[Git][security-tracker-team/security-tracker][master] Mark CVE-2025-58767 as ignored in bullseye. Minor issue
Abhijith PA (@abhijith)
abhijith at debian.org
Fri Jul 31 10:46:14 BST 2026
Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker
Commits:
465fc9e2 by Abhijith PA at 2026-07-31T15:13:58+05:30
Mark CVE-2025-58767 as ignored in bullseye. Minor issue
Intrusive to backport.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -168026,7 +168026,7 @@ CVE-2025-58767 (REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3
- ruby3.1 <not-affected> (Vulnerable code not present)
[bookworm] - ruby3.1 <no-dsa> (Minor issue)
- ruby2.7 <removed>
- [bullseye] - ruby2.7 <postponed> (Minor issue, DoS)
+ [bullseye] - ruby2.7 <ignored> (Minor issue, DoS. Intrusive to backport)
- ruby-rexml <removed>
NOTE: https://www.ruby-lang.org/en/news/2025/09/18/dos-rexml-cve-2025-58767/
NOTE: https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/465fc9e2e35bed2f558df2bb7d79cc47ae7d960a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/465fc9e2e35bed2f558df2bb7d79cc47ae7d960a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260731/cd34fada/attachment.htm>
More information about the debian-security-tracker-commits
mailing list