November 2025 Archives by date

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...

Starting: Sat Nov 1 07:29:16 GMT 2025
Ending: Sun Nov 30 22:58:27 GMT 2025
Messages: 878

• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for vtk9 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12464/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-62875/opensmtpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-11602/neo4j-community, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three netsurf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-62875/opensmtpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference followup discussion for CVE-2024-36347   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-11568/luksmeta via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4357-1 for ruby-rack   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-10934/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2023-38697/ruby-protocol-http1 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-62517 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2025-53881/exim4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-12464/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for netsurf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for luksmeta via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2025-37803/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track another CVE for suricata pending via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-62626/amd64-microcode   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4358-1 for wordpress   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 18 commits: CVE-2025-62725,docker-compose: bullseye is not affected   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Add strongswan, gimp and geographiclib to dla-needed.txt   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2025-40084/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-3757/golang-github-openpubkey-openpubkey via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Eaton CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] grub2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] openjdk-8 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim unbound in dla-needed.txt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Take libwebsockets   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4359-1 for strongswan   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Add notes for libwebsockets   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Reference upstream tag information for CVE-2025-4382/grub2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two hdf5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in description for CVE-2025-62626   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-62626/amd64-microcode   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-62291   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-61873   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12642/lighttpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference commit introducing CVE-2025-12642   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Remove armel for architectures for forky and unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4360-1 for pure-ftpd   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4361-1 for geographiclib   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4362-1 for gimp   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] ruby-rack DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4363-1 for dcmtk   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] opensmtpd fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim pytorch in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: claim pagure in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-46556/mantis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup more rejected CVEs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new curl issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for CVE-2025-11563   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2025-11277   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update state for CVE-2025-30193/dnsdist   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for libxslt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4364-1 for bind9   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] unixodbc fixed in sid   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-54352/wordpress: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add temporary item for keystone issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add libssh commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-11563/curl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-12105/libsoup2.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add DSA entry for gimp update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various xen issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-62507/redis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2025-62507: Add upstream commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12657/mongodb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take netty for dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process two Nvidia CVEs as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag reference for CVE-2024-1013   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for CVE-2025-8277 and CVE-2025-8114   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-55163 netty   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-10966/curl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-11563: pinpoint rc1 version tag   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mantis issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new runc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add github references for the runc issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Mark 6.12.57-1 as uploded for Debian trixie as released   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add runc   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-6075,CVE-2025-8291/python3.9,pypy3: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] libwebsockets spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts-do-call-me: reference some OpenStack packages we dealt with in the past   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-6445{8,9}/python-django   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63601/snipe-it, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new lasso issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-60753/libarchive   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-django issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for runc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add note for netty and potential contribution   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4365-1 for unbound   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-django via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12745/quickjs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] chromium fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2025-64458/python-django: bullseye not-affected   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: clarify openstack status   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: reference keystone   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] lts-do-call-me: reference some OpenStack packages we dealt with in the past (2)   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2025-64458 to reflect windows specific aspects   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] curl spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-46404/lasso   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-12745/quickjs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2025-46705/lasso   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-46784/lasso   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-47151/lasso   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2025-12058,CVE-2025-49655/keras: bullseye ignored   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla: drop nvidia-graphics-drivers-legacy-390xx   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-25621/containerd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] log4cxx spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add runc to dsa-needed   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2024-25621/containerd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take django   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-25621/containerd via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-58767/ruby2.7: bullseye not-affected -> postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new containerd issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Directly link the single commit from merges for CVE-2025-64336   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4366-1 for swift   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4367-1 for keystone   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] golang-1.15: harmonize bullseye triage   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: hdf5 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: samba status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: golang-github-gorilla-csrf status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: reference stalled uploads   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track keystone update until CVE assigned in temporary entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: drop busybox   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] libssh spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-64329/containerd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2025-46784/lasso   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes on two CVEs relating to Nagios Fusion (NFU)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add lasso   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] LTS: claim lasso in dla-needed.txt   Abhijith PA ( at abhijith)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-64329/containerd via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add lasso for dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64486/calibre   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-7883/llvm-toolchain-17   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new allocated CVEs for chromium update released as DSA 5993-1   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12863/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12875/mruby   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-12863/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-59375/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: dla: add libarchive (low pri)   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-59375/expat for bullseye.   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] 4 commits: dla: drop sogo   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: drop goldendict   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Refine triaging for CVE-2025-59375/expat   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] icinga2: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: drop epiphany-browser   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: drop icingaweb2   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] LTS: claim jackson-core in dla-needed.txt   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Track proposed fetchmail update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-12343/ffmpeg as not affecting bullseye   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-7883/llvm-toolchain-18   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2025-2338   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add gst-plugins-base1.0 and gst-plugins-good1.0   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2024-51317,CVE-2025-29699,CVE-2025-45663: bullseye postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-58056/netty   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Consolidate style of notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference followup commit for CVE-2025-61962   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for edk2 via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Drop for now the proposed fetchmail update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-11065 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-58057/netty   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] calibre ospu/spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Take libarchive/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-59933/vips via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference changes required for CVE-2025-62626   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim ffmpeg in dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-5915/libarchive   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for new incus issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for incus issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-62689/libmicrohttpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-59777/libmicrohttpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Retake dla-needed squid   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Reference followup for CVE-2025-11563   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new rust-sudo-rs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts-missing-uploads: script purpose   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] lts-missing-uploads: make it work again   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Demote two libmicrohttpd issues to unimportant   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for incus issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update references for incus issue and add lxd reference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add incus to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add rust-sudo-rs to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for incus update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Remove notes from CVE-2016-15054   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63288/open5gs, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-56503/submlime-text, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate CVE-2024-25255 with sublime-text, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add commit from sssd-2-11 branch for CVE-2025-11561   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-64507/lxd as ignored   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove incorrect ingored tagged entry for lxd in bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup CVE-2025-59396 notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64512/pdfminer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-60876/busybox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64484/oauth2-proxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for three new OpenEXR issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new firefox issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new firefox-esr issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-58160 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed lxd update for trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVEs assigned for rust-sudo-rs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2025-299{8,9}/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add firefox-esr   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] sudo-rs DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add sudo-rs CVEs to DSA entry   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update CVE id reference for rust-sudo-rs issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add containerd to dsa-needed with note for wip work   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup rejected entries   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4368-1 for libarchive   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add some more products for Intel NFU rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add more products covered for Intel NFU rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs from Intel advisories   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add some more products for Intel NFU rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add one Windows specific product for Intel's NFU rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12748/libvirt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13027/firefox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4369-1 for squid   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla: precise the intent of low-priority   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Revert "Mark CVE-2025-9905/keras as not-affected for bullseye"   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track firefox issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track one more fixed version for CVE-2025-13026/firefox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox-esr uploaded via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: libsoup2.4 last contributor status   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend rule for Apache   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new chromium issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-13042/chromium via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for advisory for CVE-2025-64507/lxd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-12875/mruby   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-12748/libvirt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63811/golang-github-dvsekhvalnov-jose2go   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-37734/kibana, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-205-5908{8,9}/python-kdcproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-57812/{libcupsfilters,cups-filters}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] firefox-esr DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add lxd to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2024-47866/ceph   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64503/{libcupsfilters,cups-filters}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] sumo code copy of libstb fixed   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new symfony issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lts: take webkit2gtk   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new postgresql issues (additional details to be added once official advisories are out)   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] revised fix for wcurl issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4370-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] LTS: claim erlang in dla-needed.txt   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] lts: claim gst-plugins-base1.0   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2025-64500/symfony   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Indicate path upwards in tags where commit was merged for CVE-2025-64500   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for postgresql issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new gitlab issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commits for postgresql issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: gst-plugins-base1.0 is in review   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2025-40128 (rejected from CNA)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] keystone DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for lxd update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove assignments for CVE-2025-9864   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-64512/pdfminer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64718/node-js-yaml   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64716/anubis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64429/duckdb, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64345/rust-wasmtime   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63396/pytorch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new pgAdmin issues (itp'ed)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-11777/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-11538/keycloak   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-62291/strongswan via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for AlgoSec   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13120/mruby   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: gst-plugins-good1.0 blocked by doing a bookworm upload first   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Intel rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Take pdfminer from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct references for rust-sudo-rs upstream fixes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 7 commits: add containerd   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64754/jitsi-meet, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process new CVEs for mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-9479/chromium   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-47913/golang-go.crypto   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-11776/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Backfill some Google Chrome issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] keystone fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] symfony fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for symfony via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-12748/libvirt as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4371-1 for gst-plugins-base1.0   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] Drop postponed entry for CVE-2025-47808   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Claim pdfminer.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] libmatio fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for two upstream commits for libmatio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Move list of not (yet) accepted or uploaded packages down the list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13033/node-nodemailer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-11794/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Add thunderbird issues from mfsa2025-91   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for node-js-yaml issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-64181/openexr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-wasmtime issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for cupsfilters issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-63811   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add commit references for python-kdcproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-kdcproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for CVE-2025-57812   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate CVE-2023-41419 with python-gevent   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-12863/libxml2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Revert "lts: take thunderbird"   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two new radare2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Merge changes for updates with CVEs via trixie 13.2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for three netty issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-64345/rust-wasmtime via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Mark CVE-2025-13033 as no-dsa for trixie and bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for syslog-ng via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for squid via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed add a note about netty   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add RUSTSEC reference for CVE-2025-64345   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed take ansible   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for lasso update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2025-12748 as postponed for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Handoff django to Chris as requested via mail; claim ceph   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Swap a frontdesk week with Utkarsh by request.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-64512/pdfminer via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2025-58056/netty   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13193/libvirt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-13193/libvirt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13107 for DSA-5993-1 for chromium   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim zabbix in dla-needed.txt   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via experimental for runc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4372-1 for thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] thunderbird DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13102/chromium, consider it Android only   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13097/chromium and list it for DSA-5914-1 release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Consider issues from INTEL-SA-01356 as NFU (Intel)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update information on two Intel NPU driver CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two more CVEs as NFU for Intel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-27249 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2025-47913 as postponed for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] add python-gevent   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take openexr   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take python-gevent   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] 3 commits: mark CVE-2025-13120 as postponed for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] 4 commits: gen-DSA: check the CVE list consistency (Closes: #43)   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] CVE allocated for keystone issue (OSSA-2025-002)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for runc issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2025-2912/hdf5   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-6176/python-scrapy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-6141/ncurses via experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage mako for bullseye LTS (CVE-2022-40023)   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64756/node-glob   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new chromium issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4373-1 for libwebsockets   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] take mako   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark lua-cgi as removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: add libssh   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] check-advisory-cve-ids: merge CVEFile entries with CVEExtendFile's rather than overwriting them   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] rlottie fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add later assigned CVEs for chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-45091/seafile-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64076/cbor2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64996/check-mk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63828/backdrop, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new check-mk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-55074/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new grub2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new fastdds issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63829/fastdds   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add VE-2025-10158/rsync   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for grub2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4374-1 for pdfminer   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-64486 in calibre for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Drop calibre from dla-needed.txt.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] LTS: claim containerd in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: claim r-cran-gh in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reference mitigation tracking on Linux side for CVE-2025-62626   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new openvpn CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add one more product covered for the NVIDIA CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-10158 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-65015/joserfc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-62406/piwigo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-10158 in rsync for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-12863   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Expand Apache CNA rule by another covered product   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one more NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed gdk-pixbuf update for bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-58057/netty via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12119/mongo-c-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-47914 and CVE-2025-58181 for golang-go.crypto   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4375-1 for webkit2gtk   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13402/rnp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-13402/rnp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-13402/rnp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openvpn issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64524/{libcupsfilters,cups-filters}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for cups-filters issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-65015/joserfc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE-2025-12863   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove note from rejected CVE-2025-57901   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new CVEs from limesurvey, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new phppgadmin assigned CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo for NFU entry: Google zx tool   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for golang-go.crypto issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for a set of CVEs for fastdds covered by same fixing commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for fasdds commits and recent CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-64438   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-62799   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-9820/gnutls28   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-6141/ncurses   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-13086/openvpn via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references to upstream fixes for CVE-2025-13086   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-13086/openvpn: Reference introducing commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from one rejected CVE from the Linux kernel CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new issues in vllm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13499/wireshark   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add pull request and fixing commit for CVE-2025-60753   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two mbedtls issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-13499/wireshark   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-13086 in openvpn for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-9820 in gnutls28 for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-47914 & CVE-2025-58181 in golang-go.crypto for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Remove association for CVE-2025-64524 with libcupsfilters   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference commit for CVE-2025-9820   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-9820/gnutls28   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2024-7883/llvm-toolchain-19 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2025-62908   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate rnp with CVE-2025-13470   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-13470/rnp via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update NOTES for jackson-core that I'm working at   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-11021/libsoup3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libcupsfilters issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for gnutls28 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take rail   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] new libpng issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2024-26144/rails [bullseye]   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for libpng1.6 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2025-65018   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream issue reference for CVE-2025-64720   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream pull request for CVE-2025-64506   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream pull request for CVE-2025-64505   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libpng1.6 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-65102/pjproject   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2022-32224/bullseye [rails]   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add new issue in tryton-sao   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new tryton-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage libpng1.6 for bullseye LTS (CVE-2025-65018,...   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] dla-needed.txt: tobi likely to update libpng1.6 in LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2022-32224 in rails for bullseye LTS.   Chris Lamb ( at lamby)
• Processing b18f0c329e5a5695beccdd009560f3b419e28b2e failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] Remove duplicate line.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue with question on CVE-2025-63829   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for tryton-{server,sao} issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note that maintainer is preparing work for libpng1.6   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTEs for my packages   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-48385/openexr: mark bullseye as not-affected   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] dla-needed: drop openexr: nothing remains to be done   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Mark postgresql issues as no-dsa for trixie and bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gnutls spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some AMD specific NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-62672/rplay   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix for gnutls28 issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Clarify NFU for CVE-2025-65947   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate for now two CVEs from AMD with amd64-microcode   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/CVE/list: Add MR note for CVE-2025-4945   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libpng1.6 in dla-needed.txt   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add cbor2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixes for tryton-server via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] semi-automatic unclaim after 2 weeks of inactivity   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-40212/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-64181/openexr: add NOTEs on when vulnerable code got introduced   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-63829/fastdds   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4376-1 for erlang   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVE from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Postpone CVE-2025-48040 for bulleseye   Jochen Sprickerhof ( at jspricke)
• [Git][security-tracker-team/security-tracker][master] LTS: claim pytorch in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: claim pagure in dla-needed.txt   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-59820/krita   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for xwayland issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTEs for python-gevent   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add upstream tag information for introducing commit for CVE-2025-64181   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libcoap issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13466/node-body-parser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libpng1.6 issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTEs for python-gevent   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take lasso   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4377-1 for python-gevent   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Track fix for regression from CVE-2024-36615   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4378-1 for r-cran-gh   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for libcupsfilters via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for r-cran-gh via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64761/openbao, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63498/sogo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mongodb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm/trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla-needed add tryton-server   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed: give lasso back to abhijith   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-26625/git-lfs via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4379-1 for linux-6.1   Ben Hutchings ( at benh)
• [Git][security-tracker-team/security-tracker][master] dla: update ./find-work usage   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: claim qtbase-opensource-src   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4380-1 for cups-filters   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4381-1 for net-snmp   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4382-1 for libsdl2   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4383-1 for rails   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for cups-filters via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed cups-filters update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: rail is a partial release   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] tryton-sao DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Claim tryton-server in bullseye LTS   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-9624/opensearch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-65965/grype, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the NVIDIA CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13467/Keycloak, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for pdfminer update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take samba   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] r-cran-gh spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla-needed: Restore first sentence   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update version number for r-cran-gh update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-12119/mongo-c-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-12119/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] sogo/dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTEs on samba   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] LTS: re-claim ffmpeg in data/dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for social-auth-app-django via experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libcoap3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-9624/opensearch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference or CVE-2025-13466/node-body-parser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-55174/skanpage   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66019/pypdf and update notes for CVE-2025-62708   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-40212 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one more NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12816/node-node-forge   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add another product covered by the NVIDIA CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2025-5351/libssh n/a on bullseye   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-10158   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-55174/skanpage   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Document incomplete fix for CVE-2025-11411/unbound   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTEs on samba   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] dla-needed: take sogo   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4384-1 for samba   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gitlab issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-63938/tinyproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13674/wireshark   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new kdeconnect issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] kdeconnect DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track complete fix for CVE-2025-11411 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for commit introducing CVE-2025-66270   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-40934   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13601/glib2.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66040/spotipy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new node-node-forge issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new suricata issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4385-1 for libssh   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-3277/neutron   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove now unnecessary postponed tags for neutron for CVE-2022-3277   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-13601   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rlottie spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libssh ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Merge followup for libssh with two more CVEs fixed via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note on openvpn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-59390/druid, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-45311/fail2ban   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-2486/edk2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2024-7319   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-13466/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] tryton-server DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] radare2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: netty status update   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] krita DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Open-Xchange (the CNA also covers Dovecot)   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA entry for rami.io   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information fo two radare2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-58056/netty via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2025-61915/cups   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-10158 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-63938/tinyproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-66040/spotipy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2025-13502   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Restore TODO marker   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add unbound to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66382/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Assign guilhem to unbound in dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-66382   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libvirt via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annoate dsa-needed entry for mbedtls (Adrian Bunk proposed update)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFU   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4386-1 for sogo   Paride Legovini ( at paride)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-13086: Add functional prerequisite commit for fixing commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-32898   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2025-66270   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for fixing commit for CVE-2025-66270   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: hdf5 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: grub2 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-12638/keras   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-4472/{mistral-dashboard,python-mistralclient}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for gitlab issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add krita   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed add mistral-dashboard   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed add python-mistralclient   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-63938/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] cups/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] wolfssl/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-62727/Starlette   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add to dla-needed glib2.0   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-66382/expat bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-66382/kdeconnect   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in orangehrm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: claim python-mistralclient   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reassociate two NFUs to itp'ed entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take glib2.0   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66221 for python-werkzeug   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66034/fonttols   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-64715/cilium, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-12638/keras bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2025-66034/fonttols   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4387-1 for qtbase-opensource-src   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Fix trixie version for DSA-6041-1   Adam Barratt ( at adsb)
• [Git][security-tracker-team/security-tracker][master] libcoap2/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4388-1 for tryton-server   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reccord as fixed version in temporary entries for tryton-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark tryton-server's temporary entry (#1121241) as not-affected in bullseye   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for xen issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch users/ecite/suricata-cves-20251129-add-notes   Andreas Dolp ( at ecite)
• [Git][security-tracker-team/security-tracker][master] Now track the fixed verison in the right associationed temporary entry for tryton-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-13699 with unclear details   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional references for CVE-2025-13699/mariadb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Deleted branch users/ecite/suricata-cves-20251129-add-notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: suricata: Update infos on latest CVEs for 8.0.2 / 7.0.13   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-13466/node-body-parser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via unstable for CVE-2025-13699   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-13466/node-body-parser via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-13699 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2025-13699   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note on xen in dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: libsoup2.4 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: grub2 status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Typo   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-66420/tryton-sao assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-66421/tryton-sao assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-6642{2,3,4}/tryton-server assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-66433/htcondor   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-61224/dokuwiki via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-13699/mariadb-10.5 [bullseye]   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla-needed: Add firmware-nonfree   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add sudo   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add libgd2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] gsconnect DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Mark firmware-nonfree as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4365-2 for unbound   Guilhem Moulin ( at guilhem)

Last message date: Sun Nov 30 22:58:27 GMT 2025
Archived on: Sun Nov 30 22:58:34 GMT 2025

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...