[Git][security-tracker-team/security-tracker][master] Reserve DSA number for openssh update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Apr 9 21:28:41 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
07cdadf7 by Salvatore Bonaccorso at 2026-04-09T22:27:47+02:00
Reserve DSA number for openssh update
- - - - -
4 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
- data/next-oldstable-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
Binary files a/data/CVE/list and b/data/CVE/list differ
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[09 Apr 2026] DSA-6204-1 openssh - security update
+ {CVE-2026-3497}
+ [bookworm] - openssh 1:9.2p1-2+deb12u9
+ [trixie] - openssh 1:10.0p1-7+deb13u2
[08 Apr 2026] DSA-6203-1 tiff - security update
{CVE-2026-4775}
[bookworm] - tiff 4.5.0-6+deb12u4
=====================================
data/dsa-needed.txt
=====================================
@@ -63,9 +63,6 @@ nodejs/oldstable
opennds/oldstable
pinged maintainer, but no reply yet. should most probably be bumped to 10.x
--
-openssh (carnil)
- Maintainer posted debdiffs for review for trixie and bookworm
---
openvswitch
Maintainer proposed updates via security, but issue affects only FTP algo and
needs to be explicitly enabled, check for assessment DSA/no-dsa first
=====================================
data/next-oldstable-point-update.txt
=====================================
@@ -10,10 +10,6 @@ CVE-2025-27221
[bookworm] - ruby3.1 3.1.7-1~deb12u1
CVE-2023-50262
[bookworm] - php-dompdf 2.0.3+dfsg-1+deb12u1
-CVE-2025-61985
- [bookworm] - openssh 1:9.2p1-2+deb12u8
-CVE-2025-61984
- [bookworm] - openssh 1:9.2p1-2+deb12u8
CVE-2025-67269
[bookworm] - gpsd 3.22-4.1+deb12u1
CVE-2025-67268
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07cdadf74b8912d5da12b11a9af0400748c098e6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07cdadf74b8912d5da12b11a9af0400748c098e6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260409/b5d26948/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list