Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a8fc89f7 by Salvatore Bonaccorso at 2025-07-30T20:16:55+02:00
Mark python3.12 as removed from unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -441,7 +441,7 @@ CVE-2025-8265 (A vulnerability classified as critical has
been found in 299Ko CM
NOT-FOR-US: 299Ko CMS
CVE-2025-8194 (There is a defect in the CPython \u201ctarfile\u201d module
affecting ...)
- python3.13 <unfixed>
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <no-dsa> (Minor issue)
- python3.9 <removed>
@@ -13203,7 +13203,7 @@ CVE-2025-6196 (A flaw was found in libgepub, a library
used to read EPUB files.
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/libgepub/-/commit/70895c45364ef4ee827b39b2ed1c33723410e94c
(0.7.2)
CVE-2025-6069 (The html.parser.HTMLParser class had worse-case quadratic
complexity w ...)
- python3.13 <unfixed>
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <no-dsa> (Minor issue)
- python3.9 <removed>
@@ -17293,7 +17293,7 @@ CVE-2025-4671 (The Profile Builder plugin for WordPress
is vulnerable to Stored
NOT-FOR-US: WordPress plugin
CVE-2025-4517 (Allows arbitrary filesystem writes outside the extraction
directory du ...)
- python3.13 3.13.4-1
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <not-affected> (Vulnerable code didn't get
backported to the version in Bookworm)
- python3.9 <not-affected> (Vulnerable code got backported to 3.9.17,
but dropped from sid with 3.9.13)
@@ -17314,7 +17314,7 @@ CVE-2025-4517 (Allows arbitrary filesystem writes
outside the extraction directo
NOTE: Got backported to 3.11 in
https://github.com/python/cpython/commit/241f2e54a6a2801a1d2022f0fa56309e124866c3
(v3.11.4)
CVE-2025-4435 (When using a TarFile.errorlevel = 0and extracting with a filter
the do ...)
- python3.13 3.13.4-1
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <not-affected> (Vulnerable code didn't get
backported to the version in Bookworm)
- python3.9 <not-affected> (Vulnerable code got backported to 3.9.17,
but dropped from sid with 3.9.13)
@@ -17338,7 +17338,7 @@ CVE-2025-4392 (The Shared Files \u2013 Frontend File
Upload Form & Secure File S
NOT-FOR-US: WordPress plugin
CVE-2025-4330 (Allows the extraction filter to be ignored, allowing symlink
targets t ...)
- python3.13 3.13.4-1
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <not-affected> (Vulnerable code didn't get
backported to the version in Bookworm)
- python3.9 <not-affected> (Vulnerable code got backported to 3.9.17,
but dropped from sid with 3.9.13)
@@ -17360,7 +17360,7 @@ CVE-2025-4205 (The Popup Maker plugin for WordPress is
vulnerable to Stored Cros
NOT-FOR-US: WordPress plugin
CVE-2025-4138 (Allows the extraction filter to be ignored, allowing symlink
targets t ...)
- python3.13 3.13.4-1
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <not-affected> (Vulnerable code didn't get
backported to the version in Bookworm)
- python3.9 <not-affected> (Vulnerable code got backported to 3.9.17,
but dropped from sid with 3.9.13)
@@ -17466,7 +17466,7 @@ CVE-2024-36486 (A privilege escalation vulnerability
exists in the virtual machi
NOT-FOR-US: Parallels Desktop for Mac
CVE-2024-12718 (Allows modifying some file metadata (e.g. last modified) with
filter=" ...)
- python3.13 3.13.4-1
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <not-affected> (Vulnerable code introduced in 3.12)
- python3.9 <not-affected> (Vulnerable code introduced in 3.12)
- python2.7 <not-affected> (Vulnerable code introduced in 3.12)
@@ -22462,7 +22462,7 @@ CVE-2025-4564 (The TicketBAI Facturas para WooCommerce
plugin for WordPress is v
NOT-FOR-US: WordPress plugin
CVE-2025-4516 (There is an issue in CPython when using
`bytes.decode("unicode_escape" ...)
- python3.13 3.13.3-4
- - python3.12 <unfixed>
+ - python3.12 <removed>
- python3.11 <removed>
[bookworm] - python3.11 <no-dsa> (Minor issue)
- python3.9 <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8fc89f714a0a431da04712dba1c9ac68eaefdf5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8fc89f714a0a431da04712dba1c9ac68eaefdf5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
