April 2025 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Tue Apr 1 05:02:01 BST 2025
Ending: Thu Apr 24 09:41:25 BST 2025
Messages: 972

• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30672 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30673/libsub-handlesvia-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3051 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update note for zfs-linux   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-30673   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-30211/erlang via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] atop fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Drupal to CNA list   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add rule for Netgear   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Payara   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Canon   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new assimp issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new glslang non issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4105-1 for tzdata   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new pytorch issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-pyo3 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new firefox issues mfsa2025-20   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new firefox-esr issues from mfsa2025-22   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2025-3033   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add firefox-esr to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new thunderbird issues from mfsa2025-24   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add thunderbird to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add thunderbird to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Drop notes on rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-6762,jetty9: fixed in trixie and unstable since 9.4.54-1   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-6763,jetty9: mark bookworm and bullseye as ignored   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2025-23203   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-23203   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-27406/icingaweb2-module-reporting   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two libdbix-class-encodedcolumn-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-23203/icingaweb2-module-director   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30224/mydumper   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29069/lcms2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] libsub-handlesvia-perl spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim jinja2   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] CVE-2022-30287/php-horde-turba: fix commits, actually reference 4.2.x branch...   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4106-1 for jetty9   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4107-1 for openjpeg2   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4108-1 for tomcat9   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-31162/fig2dev: fix patch link   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Claim edk2 and php-twig in dla-needed.txt   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2024-6763 as unimportant   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox-esr via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new crhomium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some mongodb CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for Moxa   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] "new" keycloak issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] remove source package association for CVE-2025-29069   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4109-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2024-11704/firefox-esr as fixed in 128.7.0esr-1   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] pytorch: bullseye postponed   Sylvain Beucler ( at beuc)
  • [Git][security-tracker-team/security-tracker][master] pytorch: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add erlang   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27833/ghostscript does not affect bullseye   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2023-44428,CVE-2024-48013/musescore*: bullseye ignored   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27834/ghostscript does not affect bullseye   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for thunderbird issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some Linux CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-30474,commons-vfs: Debian is not affected   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27553,commons-vfs: link to fixing commit   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] firefox-esr DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2704/openvpn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] chromium fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove notes on rejected CVE from Linux kernel CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes on now rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4110-1 for thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Update metadata for CVE-2025-30474   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] record older gitlab fixes   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new ros-dynamic-reconfigure issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27553: Reference commit and upstream tag from the repository   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add pull request reference for CVE-2024-39780   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-27556   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4111-1 for commons-vfs   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] CVE-2023-44428,CVE-2024-48013/musescore*: precise bullseye triage   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2025-2704 and add introducing commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30090/squirrelmail   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new zabbix issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-36465/zabbix   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libreoffice in dla-needed.txt   Daniel Leidert ( at dleidert)
  • [Git][security-tracker-team/security-tracker][master] LTS: claim libreoffice in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: release claim on ruby-saml in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: claim nagvis in dla-needed.txt   Daniel Leidert ( at dleidert)
  • [Git][security-tracker-team/security-tracker][master] LTS: claim nagvis in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] openvpn fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27553,commons-vfs: fixed in unstable   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Add reference to advisory for CVE-2025-2704/openvpn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for atop   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2023-39327 as no-dsa for bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new ATS issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] older gitlab issues fixed   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-30349: doesn't affect php-horde, only php-horde-imp   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4112-1 for php-horde-editor   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4113-1 for php-horde-imp   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] nwe go issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] xpdf n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gitlab fixes in sid   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] gitlab fixes in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Merge new Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new pytorch entries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-3122/wabt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31334 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note about trafficserver collecting new CVEs   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] DLA-4112-1/php-horde-editor: not a direct security update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2018-16789/shellinabox: reference patch   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] thunderbird DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31115/xz-utils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status on CVE-2025-31115/xz-utils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-22871/golang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-27406/icingaweb2-module-reporting   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference and description for CVE-2024-53868   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2784/libsoup3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29070/lcms2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32053/libsoup3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add libsoup2.4 tracking for CVE-2025-2784 and CVE-2025-32053   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2025-30472/corosync   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-30224   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-30349/php-horde-imp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bugnum   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] atop DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process some new NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new assimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one trailing whitespace   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32049/libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32050/libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32051/libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32052/libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Update code-projects rule to catch as well site subproducts   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-39780   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: atop status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-31115/xz-utils via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add xz-utils in dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new yelp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Several ConcreteCMS CVEs were withdrawn by the CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-12858   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two CVEs as NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add description based rule for CodeAstro systems   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Change regexp for description based detection of Project Worlds CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark corosync as no-dsa for bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-30472   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for M-Files   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for M-Files   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Revert "auto-nfu: Add CNA based rule for M-Files"   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3198/binutils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] jackson-dataformat-cbor fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32049   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] c3p0 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process two NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add description based rule for itsourcecode System CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two pgadmin4 issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add one more product rule to cna rule for Microsoft   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add fig2dev   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Typo   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] add p0 reference   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla: take fig2dev   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2024-8176   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] record gitlab fixes in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Take xz-utils for review for DSA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2025-3155/yelp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for yelp issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4114-1 for zfs-linux   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-5893-1 for tomcat10   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-5894-1 for jetty9   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] LTS: claim ruby-saml in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4106-2 for jetty9   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4115-1 for ruby-saml   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29476/c-blosc2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-30093/condor   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-22871/golang-1.15: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add zabbix   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-26520/cacti via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional reference for CVE-2025-31160   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for xz-utils update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-21994   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-46833   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2025-21672/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ATS DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] two rustsec issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] abseil fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4116-1 for abseil   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] LTS: claim zabbix in dla-needed.txt   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] mbedtls fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Merge RUSTSEC-2025-0021 and CVE-2025-31130 entries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-openssl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Note proposed work for graphicsmagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new libnet-dropbox-api-perl / libweb-api-perl issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla: trafficserver status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add thread reference for CVE-2025-27796   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-57868   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add debian bug reference for CVE-2024-58036   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29476/c-blosc2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch wheel-unbundled-packaging   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Update status for CVE-2025-27796/graphicsmagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference tags for cacti commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed varnish update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track abseil proposed update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed shadow update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some zammad CVEs, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3236{4,5}/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32366/connman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for poppler issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32366/connman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] libbson-xs-perl removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for assimp issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for assimp issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for assimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-3136/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-2784/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libsoup2.4 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for CVE-2025-32052 and CVE-2025-32053 in libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-41973/mina   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-0231/mina   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-45699 according to upstream   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-0825/cpp-httplib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-56738/grub2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for pytorch issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for pytorch issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-2123/geshi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-27152/node-axios   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-2142 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-11831/node-serialize-javascript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-29476/c-blosc2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: remove graphicsmagick from dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4117-1 for atop   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-42134/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim libnet-easytcp-perl   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] dla-needed: Add link to branch for libnet-easytcp-perl   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-4068/node-braces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-43799/node-send   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add note   Adrian Bunk ( at bunk)
  • [Git][security-tracker-team/security-tracker][master] dla: add note   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] update notes for packages   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] lts: add note for webkit2gtk   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk / wpewebkit upstream advisory WSA-2025-0003   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] Typo fix   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add patch link for CVE-2024-53382   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add reference to upstream commit for CVE-2024-53382   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31510/lemonldap-ng   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add lemonldap-ng to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for poppler issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-29582/kotlin via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30195/pdns-recursor   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Santiago R.R. ( at santiago)
  • [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
  • [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] dla: take phpmyadmin   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4118-1 for ghostscript   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add cna based rule for Qualcomm products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3359/gnuplot   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3360/glib2.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add some notes to rubygems and claim it   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-3360/glib2.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-31510/lemonldap-ng via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-openssl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4119-1 for lemonldap-ng   Yadd ( at yadd)
• [Git][security-tracker-team/security-tracker][master] Record that Moritz is taking care of lemonldap-ng DSA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4120-1 for libnet-easytcp-perl   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32414/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29769/vips   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29482/libheif   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29481/libbpf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29480/gdal   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29479/hiredis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29087/sqlite3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-38797/edk2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from rejected CVE (withdrawn by CNA)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2025-28253   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4121-1 for phpmyadmin   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Drop one previously assigned CVE for chromium   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lemonldap-ng DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] node-send spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] phpmyadmin spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove CVE-2025-0927 as it got rejected   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31498/c-ares   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31492/libapache2-mod-auth-openidc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31344/giflib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream bug reference for CVE-2025-31344/giflib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-31672/libapache-poi-java   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tempoary entry for graphicsmagick issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29479/hiredis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29087/sqlite3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-31492/libapache2-mod-auth-openidc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-29087/sqlite3   László Böszörményi ( at gcs)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32051/libsoup2.4: possibly not-affected, left a comment in the BTS   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add libsoup2.4   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-31510/lemonldap-ng: introductory commit   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32460/graphicsmagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update CVE list for DSA-5890-1 and adjust CVE-2025-3066   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status ofr CVE-2025-3416/rust-openssl (RUSTSEC-2025-0022)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32026/element-web, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two CVEs for golang-github-bep-imagemeta, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two CVEs for Elasticsearch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-52974/kibana, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-32051/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take bootstrap3 dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4122-1 for libbssolv-perl   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30215/nats-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add description based rule for TP-Link products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add wpa   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-29769/libvips: reference follow-up commit   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: drop ckeditor3 (EOL'd and not a php-horde rdep anymore)   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2025-2849/upx-ucl: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add wget   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add subversion   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32464/haproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add glibc   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32461/tikiwiki   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-56433/shadow: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: take subversion   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-29087/sqlite3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: take wget   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] node-serialize-javascript spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add some CVEs for libstb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-12556/kibana   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-30215/nats-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference ofr CVE-2024-38797/edk2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-31344/giflib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32414/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-7537/ofono   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gitlab issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new gimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-2251 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: assimp: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Remove notes from retired CVEs from CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-12905/node-tar-fs: follow secteam triage   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-2123/geshi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process CVE-2025-27391 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-7776,CVE-2024-5187/onnx: bullseye (and probably bookworm)...   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add tracking bug for ancient embedded copy of expat in xmlrpc-c   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-23203/icingaweb2-module-director: reference follow-up commit   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-27551,CVE-2025-27552/libdbix-class-encodedcolumn-perl: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-30673/libsub-handlesvia-perl: bullseye not-affected   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-31492 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-2487 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-7776 and CVE-2024-5187   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-7776/onnx: bullseye actually affected   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add gimp   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Merge CVE fixes for ruby3.3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-28858/python-redis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mediawiki issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32728/openssh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two CVEs for helm-kubernetes, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-58136/yii, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Tweak regexp for CodeAstro products to catch more cases   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Octopus Deploy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-9052   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32395/node-vite   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32027/yii, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-24866/mattermost-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32728/openssh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32743/connman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29088/sqlite3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-23386/gerbera   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-38865/check-mk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Expand CNA based rule for Esri products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Panasonic procuts   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add adminer   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-51755,php-twig: change bullseye to ignored   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-5899-1   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] dsa-needed.txt: add commons-vfs   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-25186/ruby3.3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32728/openssh: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla: add libapache2-mod-auth-openidc   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Mark libxml2 issue as no-dsa for bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Waiting review for bootstrap   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Take curl/dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] update dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32460/graphicsmagick: bullseye not affected   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track ckeditor3 as removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add xmlrpc-c   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-32728/openssh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-9101/phpldapadmin via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2024-9102/phpldapadmin   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29088/sqlite3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2025-29481/libbpf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status on CVE-2025-32464/haproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32464/haproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29481/libbpf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add status for wpa/dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Take erlang/dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla: take xmlrpc-c for initial investigation   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2024-53427/jq   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-53427/jq   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dsa-needed: Add and take mediawiki   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3512/qt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] wpa spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32807/fusiondirectory   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-3512   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take graphicsmagick for DSA release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2021-46143 is also in libxmltok and fixed there in trixie   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2024-13939/libstring-compare-constanttime-perl: link patch proposal   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-53427 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32807/fusiondirectory: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add glib2.0   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add poppler   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add hiredis   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: revert hiredis, disputed upstream, probably false positive   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-13939/libstring-compare-constanttime-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add vips   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: add mediawiki   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-3360/glib2.0 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: take glib2.0   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] dla: update libstring-compare-constanttime-perl status   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Update references for CVE-2025-0495   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-0495/docker-buildx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-3360/glib2.0 update   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-29479   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for expat via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: take poppler   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-13939/libstring-compare-constanttime-perl: disputed upstream   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add status erlang/dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker] Pushed new branch jspricke/fix_d_s_s   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] dla: link claim/unclaim procedure   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Update status for CVE-2025-29479   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4123-1 for wpa   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for four libsoup2.4 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2014-2570/php-font-lib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2814/libcrypt-cbc-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: Initial xmlrpc-c investigation done   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4124-1 for twitter-bootstrap3   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for vorbis-tools issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for twitter-boostrap3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mediawiki DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add mediawiki references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-6531   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-56406/perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for perl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4125-1 for twitter-bootstrap4   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] bootstrap4 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][wheel-unbundled-packaging] 305 commits: Update status for CVE-2025-27796/graphicsmagick   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: wheel no longer bundles python3-packaging   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Deleted branch wheel-unbundled-packaging   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4126-1 for jinja2   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4127-1 for subversion   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] bootstrap spus   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-3512/qt6-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-21535 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issues for libstb as reported upstream by SUSE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4128-1 for glib2.0   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] bugs.py: fix doc quote   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32093/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] fixes-via-micro-releases: publicly document packages not getting targeted security fixes   Sebastien Delafond ( at seb)
• [Git][security-tracker-team/security-tracker][master] Add amd64-microcode and intel-microcode   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] expand explanations and add mediawiki, chromium and webkit   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim u-boot in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Update notes for u-boot   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add two new assimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: grub2 status update   Sylvain Beucler ( at beuc)
  • [Git][security-tracker-team/security-tracker][master] dla: grub2 status update   Sylvain Beucler ( at beuc)
  • [Git][security-tracker-team/security-tracker][master] dla: grub2 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2024-56201 as not-affected in bullseye   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] dla: hdf5 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Mark two more poppler issues as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2025-23016   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-23016/libfcgi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed glib2.0 update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two mattermost-server CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3277/sqlite3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more libsoup issues (CVE-2025-32913 and CVE-2025-32914)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libsoup issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32911/libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3576/krb5   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: swap frontdesk week with Sylvain   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][jspricke/fix_d_s_s] unsupported_packages: support new merged lists   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] unsupported_packages: support new merged lists   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker] Deleted branch jspricke/fix_d_s_s   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-1224/rust-idna via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for RUSTSEC-2025-0005/rust-grcov via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track removal of ruby-devise-two-factor from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track removal of liboqs from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new thunderbird issues from mfsa2025-27   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libsoup3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3608/firefox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32776/openrazer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Proces some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32012/jellyfin, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add one more product to Microsoft CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] thunderbird postponed   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2024-38541 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-2849/upx-ucl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-22018/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add Oracle   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new vbox issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Mark mina as removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: libapache2-mod-auth-openidc: maintainer prepared an update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: More Oracle products   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mysql-8.0 issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add libapache2-mod-auth-openidc to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Delta Electronics   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add more Oracle products   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new Java issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mysql-connector-python issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mysql-connector-java issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status and info for CVE-2024-11053/curl: bullseye not affected   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-30722/mysql-8.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new set of CVEs for peertube   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2025-32200 as got withdrawn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2025-0655   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 9 commits: Remove notes from CVE-2025-0313   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verison for CVE-2022-4603 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-3512/qt6-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more mattermost-server CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-24358/golang-github-gorilla-csrf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2291/pgbouncer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-32776/openrazer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-2291/pgbouncer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-30714   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references to blogpost for some php issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32433/erlang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4129-1 for libapache2-mod-auth-openidc   Moritz Schlarb ( at moschlar)
• [Git][security-tracker-team/security-tracker][master] Add information for CVE-2025-43703/anki   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for pgbouncer issue fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mysql-8.0 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add product based rule for Perforce (we can't use the full CNA due to Puppet)   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3730/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] twitter-boostrap: reference patches shipped in recent updates   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-3573/civicrm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove trailing whitespaces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-22872/golang-golang-x-net   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-58249/wxwidgets3.2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32433   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add erlang to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for CVE-2025-3548/assimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Hitachi Vantana   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-3573/civicrm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] libapache2-mod-auth-openidc DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mediawiki issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-3730/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two linux CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process several NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32415/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for graphicsmagick update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-42178 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32072/mediawiki   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-40124/ajaxplorer, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference (inofficial) patch for CVE-2025-31344   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Honor products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two unimportant libarchive issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for Github products   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add rule for MyBB   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Yokogawa   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32415/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: claim shadow   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Reference pull request for CVE-2025-32914   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32914/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32913/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32911/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32912/libsoup2.4 debian bug reference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32910   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 6 commits: mark CVE-2024-12368 for odoo as EOL   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-32908   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-32908   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32909/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32907/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-42330/zabbix add merge commit reference for 5.0.x series.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32906   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-40364/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-36465/zabbix add reference to fixing commit for 7.0.x   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] dla: shadow status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-37838/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-36465/zabbix - only 7.0.x is affected   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-36469/zabbix pinpoint fixing commits   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-42325/zabbix pinpoint fixing commits   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-45699/zabbix pinpoint fixing commit   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-45700/zabbix pinpointed fixing commit   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] new nsis issue, bugnums   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] openssl spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Try to consolidate style for some notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Restore lost correct ZBX reference for CVE-2024-36469   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4130-1 for shadow   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-32743/connman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for hdf5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for more hdf5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add fix commits for mongo-c-driver CVES (CVE-2024-6383, CVE-2024-6381, CVE-2023-0437   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Track bind-dyndb-ldap as removed from all supported suites   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-43903/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-43903/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add product-based rule for Tenable   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim knot-resolver in dla-needed.txt   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] LTS: update notes for mongo-c-driver   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for mongo-c-driver via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVe-2025-43903/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-43715/nsis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Review automatic NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4131-1 for zabbix   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32434/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for virtualbox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-22872   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-24358   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track switch to system libary for xmlrpc-c for embedded expat in 1.59.03-8   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2023-52971/mariaDB   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] haproxy fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rust-ring fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2023-52971: Add missing explanation for not-affected   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2023-52971: version not yet released   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Update tag annotation as 1.24.5 was not released   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Sync rubygems triage for CVE-2025-27221 with ruby3.1 in bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-31672/libapache-poi-java   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-31130/rust-gix-features   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add information for CVE-2025-3576/krb5   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libstb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2025-3416 as postponed for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] erlang DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] three issues in legacy Mailman   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new kitty issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new webpy issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gitlab issues fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2023-26819/cjson   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-26819   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2025-43929/kitty   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-43929/kitty   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2024-57520 resolved and harmless   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 6 commits: add libxml2   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2025-31672 as postponed   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4132-1 for erlang   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla: Add libxmltok notes   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] 3 commits: check-new-issues: Move definition of embedded-code-copies location   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gobgp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libheif CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libraw CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-10524/wget: Ignore in bullseye   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4133-1 for wget   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4134-1 for fig2dev   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Remove annotations claiming that DLA-2783-1 fixed CVE-2021-32765/hiredis   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track embedded protobuf copy in python3-grpc-tools   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4711{1,2}/7zip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-26791/node-dompurify   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two 7zip issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2025-3818/webpy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-3818/webpy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libraw issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add commit references for OpenJDK issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-29923   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-29787/rust-zip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29786/golang-github-antonmedv-expr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-272{1,2,3,4}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new issues for mimetex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for ruby3.1 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-56433   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-7254/rust-protobuf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cover both mimetex issues under same Debian bug reference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-29482/libheif   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2025-29480/gdal   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug refernece for CVE-2025-29480/gdal   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32366/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32743/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-2487/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] add CVE-2024-40635/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] incingaweb2 dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] haproxy/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] krb5/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] kitty/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] mimetex/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] nsis/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] openrazer/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] libbpf/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-2704/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] pgbouncer/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] python-flask-cors/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-3730/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] pytorch/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] ruby-graphql/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla: take openrazer   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] LTS: Claim glibc in dla-needed.txt   Sean Whitton ( at spwhitton)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libsoup2.4 in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Add note about WIP for libsoup2.4   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] dla: take haproxy   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] LTS: remove curl from dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Dremio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Saviynt products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add mydumper/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add golang-github-gorilla-csrf/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for Hitachi products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim ansible   Lee Garrett ( at lgarrett)
• [Git][security-tracker-team/security-tracker][master] Claim thunderbird   Lee Garrett ( at lgarrett)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2024-1391{8,9} according to analysis from maintainers   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: CVE-2024-50613/libsndfile bullseye not-affected   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] lts: CVE-2024-50613/libsndfile bullseye ingored not not-affected   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] Clarify that CVE-2024-50613 is exposed after linking with lame   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libjs-bootbox via experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2025-272{1,2,3,4}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for reported rust-pyo3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for openjdk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-58250/ppp   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add ppp/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-11595/wireshark does not affect bookworm   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] libelfin removed from sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Expand note sentence   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-2312 as no-dsa for bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] rust-gix-features fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for mosquitto via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-26923   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-27515/php-laravel-framework via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-github-gin-gonic-gin via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2018-13410/zip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32788/octoprint, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2092/check-mk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-29339/open5gs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2023-43378/Hoteldruid   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track embedded copy for xxhash in libcrypt-xxhash-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in note of previous commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-32433: Reference oss-security post with more details on issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: claim mbedtls   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Update references for libarchive issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for rubygems via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some additional NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] jayway-jsonpath n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for CODESYS   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add product-based rule for Trellix   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] node-ip fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two golang-github-jackc-pgx issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add note about libreoffice   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] python-cmarkgfm fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-tokio issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gitlab fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla: take libbpf   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for openssh via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new rust-crossbeam-channel issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove additional space in note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update references for RUSTSEC-2025-0024 and add Debian bug reference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-tokio issue for RUSTSEC-2025-0023   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tracking for three CVEs for openjdk-24   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Add note for mydumper.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] dla: take ppp   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for yelp issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track as well yelp-xsl under CVE-2025-3155   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-tokia via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-crossbeam-channel via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: add some notes for rubygems   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2023-39810   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-46394/busybox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4135-1 for haproxy   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Add two new iamgemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-58251/busybox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-10306/libapache2-mod-cluster, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Ivanti   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add libraw/dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-43965/imagemagick6   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add imagemagick/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add libheif/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add yelp-xls/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4136-1 for openrazer   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-21 issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-17 issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-11 issues fixe via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-21605/redis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for valkey for CVE-2025-21605   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for busybox issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-pyo3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for Redis issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for llvm-toolchain-*   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove annotations for trixie for hoteldruid   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2023-43378/hoteldruid   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new fig2dev issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Brocade   Moritz Muehlenhoff ( at jmm)

Last message date: Thu Apr 24 09:41:25 BST 2025
Archived on: Thu Apr 24 09:41:29 BST 2025

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...