2 Commits

Author SHA1 Message Date
Gyorgy Sarvari
6e9eff155e python3-marshmallow: mark CVE-2025-68480 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-68480

The vulnerability has been fixed in version 4.1.2[1], however
NVD tracks this CVE without version info. Mark it as patched explicitly.

[1]: d24a0c9df0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-03-26 10:29:24 +05:30
Wang Mingyu
a1538075cf
python3-marshmallow: upgrade 4.1.1 -> 4.1.2
Changelog:
  Merge error store messages without rebuilding collections.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 54691ea40a98cc617d374d8368c665d103ceaf07)

Contains fix for CVE-2025-68480

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-02-19 08:20:23 +05:30