[Git][security-tracker-team/security-tracker][master] Reserve DSA number for dovecot update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 5 13:06:46 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4a13daf by Salvatore Bonaccorso at 2025-10-05T14:05:37+02:00
Reserve DSA number for dovecot update

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -4677,6 +4677,7 @@ CVE-2025-39867
 	REJECTED
 CVE-2025-XXXX [auth: Use AUTH_CACHE_KEY_USER instead of per-database constants]
 	- dovecot 1:2.4.1+dfsg1-7 (bug #1115474)
+	[trixie] - dovecot 1:2.4.1+dfsg1-6+deb13u1
 	[bookworm] - dovecot <not-affected> (Vulnerable code introduced later)
 	[bullseye] - dovecot <not-affected> (Vulnerable code introduced later)
 	NOTE: Introduced by: https://github.com/dovecot/core/commit/2e298e7ee98b6df61cf85117f000290d60a473b8 (2.4.1)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[05 Oct 2025] DSA-6019-1 dovecot - security update
+	[trixie] - dovecot 1:2.4.1+dfsg1-6+deb13u1
 [03 Oct 2025] DSA-6018-1 gegl - security update
 	{CVE-2025-10921}
 	[bookworm] - gegl 1:0.4.42-2+deb12u1


=====================================
data/dsa-needed.txt
=====================================
@@ -20,8 +20,6 @@ ark/oldstable (jmm)
 cpp-httplib
   Maintainer preparing updates, waiting for feedback on bookworm status
 --
-dovecot (carnil)
---
 frr/oldstable
   coordination with the maintainer ongoing, Daniel Baumann proposing an update
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4a13daf27e1182646374dab9326e203d63cde81

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4a13daf27e1182646374dab9326e203d63cde81
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251005/494038e7/attachment.htm>


More information about the debian-security-tracker-commits mailing list