[Git][security-tracker-team/security-tracker][master] LTS: sync triage of CVE-2024-52046 and drop mina2 from dla-needed.txt (only 2 postponed CVEs)

Roberto C. Sánchez (@roberto) roberto at debian.org
Wed Jun 25 19:01:39 BST 2025



Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f8e07cc2 by Roberto C. Sánchez at 2025-06-25T14:01:07-04:00
LTS: sync triage of CVE-2024-52046 and drop mina2 from dla-needed.txt (only 2 postponed CVEs)

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -59598,6 +59598,7 @@ CVE-2024-52046 (The ObjectSerializationDecoder in Apache MINA uses Java\u2019s n
 	[bullseye] - mina <postponed> (Minor issue; need specific conditions)
 	- mina2 <unfixed> (bug #1091530)
 	[bookworm] - mina2 <no-dsa> (Minor issue)
+	[bullseye] - mina2 <postponed> (Minor issue; need specific conditions)
 	NOTE: https://lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8
 	NOTE: https://github.com/apache/mina/commit/f9cc5ada6ebef4ee7cc51aac824e42e2e422310e (2.2.4)
 	NOTE: https://github.com/apache/mina/commit/cdb59eb6131696a440870ab89ad0e20804eb5ca7 (2.1.10)


=====================================
data/dla-needed.txt
=====================================
@@ -216,11 +216,6 @@ mediawiki
 mimetex
   NOTE: 20250422: Added by Front-Desk (rouca)
 --
-mina2
-  NOTE: 20250111: Added by Front-Desk (ta)
-  NOTE: 20250114: Patches for CVE-2024-52046 https://github.com/apache/mina/commit/f9cc5ada6ebef4ee7cc51aac824e42e2e422310e (2.2.4) and ... (dleidert)
-  NOTE: 20250114: ... https://github.com/apache/mina/commit/cdb59eb6131696a440870ab89ad0e20804eb5ca7 (2.1.10) (dleidert)
---
 nagvis
   NOTE: 20250117: Added by Front-Desk (rouca)
   NOTE: 20250119: Also check/fix https://bugs.debian.org/1061044



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8e07cc2f1227e0ddce37e6f4829b67f948bed5d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f8e07cc2f1227e0ddce37e6f4829b67f948bed5d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250625/2998898f/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list