Commit Graph

2 Commits

Author SHA1 Message Date
Gyorgy Sarvari 6e9eff155e python3-marshmallow: mark CVE-2025-68480 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68480

The vulnerability has been fixed in version 4.1.2[1], however
NVD tracks this CVE without version info. Mark it as patched explicitly.

[1]: https://github.com/marshmallow-code/marshmallow/commit/d24a0c9df061c4daa92f71cf85aca25b83eee508

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-03-26 10:29:24 +05:30
Wang Mingyu a1538075cf python3-marshmallow: upgrade 4.1.1 -> 4.1.2
Changelog:
  Merge error store messages without rebuilding collections.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 54691ea40a)

Contains fix for CVE-2025-68480

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-19 08:20:23 +05:30