Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bd31d7a9 by Salvatore Bonaccorso at 2025-12-23T09:35:30+01:00
Add CVE-2025-68480/python-marshmallow
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,7 +13,14 @@ CVE-2025-68650
CVE-2025-68614 (LibreNMS is an auto-discovering PHP/MySQL/SNMP based network
monitorin ...)
TODO: check
CVE-2025-68480 (Marshmallow is a lightweight library for converting complex
objects to ...)
- TODO: check
+ - python-marshmallow <unfixed>
+ NOTE:
https://github.com/marshmallow-code/marshmallow/security/advisories/GHSA-428g-f7cq-pgp5
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/218d98a785d3bd25dad8880bb07e9cce70340f31
(4.1.2)
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/70141f4180fb94ced3544cdefdaff89172dd3956
(4.1.2)
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/36f87877d0e889e682386a0121eabe030cde57b1
(4.1.2)
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/0356a3f1c307830f8ded56d823abca5611c594c9
(3.26.2)
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/6d4a17dad54ea9711040c6aa6ba4d59267242a41
(3.26.2)
+ NOTE:
https://github.com/marshmallow-code/marshmallow/commit/489a8d421dc7955bb53b89e962d69465fbc5b6af
(3.26.2)
CVE-2025-68476 (KEDA is a Kubernetes-based Event Driven Autoscaling component.
Prior t ...)
TODO: check
CVE-2025-68475 (Fedify is a TypeScript library for building federated server
apps powe ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd31d7a900f2dbe27ff5fda6a31c9cb8aff4afba
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd31d7a900f2dbe27ff5fda6a31c9cb8aff4afba
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
