[Git][security-tracker-team/security-tracker][master] Reserve DLA-3903-1 for unbound

Daniel Leidert (@dleidert) dleidert at debian.org
Sun Sep 29 03:03:31 BST 2024



Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ccb36653 by Daniel Leidert at 2024-09-29T04:03:21+02:00
Reserve DLA-3903-1 for unbound

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Sep 2024] DLA-3903-1 unbound - security update
+	{CVE-2024-43167 CVE-2024-43168}
+	[bullseye] - unbound 1.13.1-1+deb11u3
 [28 Sep 2024] DLA-3902-1 ruby-rails-html-sanitizer - security update
 	{CVE-2022-23517 CVE-2022-23518 CVE-2022-23519 CVE-2022-23520 CVE-2022-32209}
 	[bullseye] - ruby-rails-html-sanitizer 1.3.0-1+deb11u1


=====================================
data/dla-needed.txt
=====================================
@@ -228,12 +228,6 @@ twisted
   NOTE: 20240807: Added by oldstable Security Team (jmm)
   NOTE: 20240815: A bookworm DSA is planned (Beuc/front-desk)
 --
-unbound (dleidert)
-  NOTE: 20240825: Added by Front-Desk (ta)
-  NOTE: 20240905: The fix for CVE-2024-43168 might require more commits (dfff8d2, 4497e8a, c085a53). (dleidert)
-  NOTE: 20240905: I sent a message to upstream to get more information about this situation. (dleidert)
-  NOTE: 20240923: Still waiting for feedback. (dleidert)
---
 upx-ucl
   NOTE: 20240815: Added by Front-Desk (Beuc)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccb3665374c1a5420f01b2e0f06f76d74b2289bf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccb3665374c1a5420f01b2e0f06f76d74b2289bf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240929/ab1fbf46/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list