April 2026 Archives by thread

Messages sorted by: [ subject ] [ author ] [ date ]
More info on this list...

Starting: Wed Apr 1 05:05:55 BST 2026
Ending: Fri Apr 3 22:47:04 BST 2026
Messages: 176

[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34743/xz-utils Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new chromium isses Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34956/openvswitch Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-34956/openvswitch Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34982/vim Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Remove notes from one withdrawn CVE assignement Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34982/vim Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34956/openvswitch Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34982 and correct association for CVE-2026-34714 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-5201/gdk-pixbuf Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] one more opensc issue Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Bento4 Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-34956/openvswitch via unstable Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version CVE-2026-33936/python-ecdsa Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Reserve DLA-4520-1 for python-tornado Daniel Leidert ( at dleidert)
[Git][security-tracker-team/security-tracker][master] lts: track fixed version of python-tornado in Bullseye until a CVE has been assigned Daniel Leidert ( at dleidert)
[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-4800/node-lodash Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34441/cpp-httplib Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34235/pjproject Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34155/rauc Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34204/minio, itp'ed Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-geopandas. Chris Lamb ( at lamby)
[Git][security-tracker-team/security-tracker][master] add dovecot Thorsten Alteholz ( at alteholz)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34743/xz-utils Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-5201 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-4800 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-4046/glibc Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-3945 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] gst DSAs Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Remove notes on two rejected CVEs Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-4370/juju Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] LTS: claim dovecot in dla-needed.txt Guilhem Moulin ( at guilhem)
[Git][security-tracker-team/security-tracker][master] Document state for dovecot in dsa-needed list Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-3509{3,4}/libinput Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new corosync issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track proposed update for p7zip via bookworm-pu Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new mbedtls issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new issues in onnx Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34219/rust-libp2p, itp'ed Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34165/golang-github-go-git-go-git Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add notes for python 3.9 Arnaud Rebillout ( at arnaudr)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-3308/mupdf Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new teampass issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-33762/golang-github-go-git-go-git Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-33276/check-mk Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new mbedtls issues Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new mbedtls issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] cgif fixed in sid Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] node-lodash fixed in sid Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] 3 commits: add nghttp2 Thorsten Alteholz ( at alteholz)
[Git][security-tracker-team/security-tracker][master] 2 commits: add redis Thorsten Alteholz ( at alteholz)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-5318/libraw Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new openexr issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] LTS: claim nghttp2 in dla-needed.txt Lukas Märdian ( at slyon)
[Git][security-tracker-team/security-tracker][master] Add set of new libstb issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34543/openexr Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34531/python-flask-httpauth Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new python-aiohttp issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] grub2 ospu Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] new util-linux issue Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Reserve DLA-4521-1 for libpng1.6 Tobias Frost ( at tobi)
[Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-27456 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libinput issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-5344/textpattern Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-5342/libraw Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new keycloak issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new set of openssh issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add new ruby-rack issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add some more ruby-rack issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34786/ruby-rack Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two more CVEs for ruby-rack Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] chromium dsa Andres Salomon ( at dilinger)
[Git][security-tracker-team/security-tracker][master] Add initial tracking for new Suricata issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] CVE-2026-35536 assigned for one python-tornado issue Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-35535/sudo Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-5201 via unstable Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version for libde265 issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] first batch of new mediawiki issues Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Merge CVEs from th Roundcube 1.7-rc6, 1.6.15 and 1.5.15 release Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Merge CVE assignments from Roundcube 1.7-rc5, 1.6.14 and 1.5.14 release Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-35549/mariadb Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new CVEs in shynet, itp'ed Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Process batch of NFUs Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34760/vllm Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34610/leancrypto, itp'ed Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34601/node-xmldom Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34591/poetry Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new glances issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-34159/llama.cpp Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2026-22891, CVE-2026-20777 and CVE-2025-64736 as postponed for Bullseye Thorsten Alteholz ( at alteholz)
[Git][security-tracker-team/security-tracker][master] Fix typos in notes for openssh issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug references for openssh issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mbedtls issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openexr issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34531 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-aiohttp issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for golang-github-go-git-go-git Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-35535/sudo via unstable Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new trafficserver issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-63261/awstats Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Update CVE-2025-63261 to earlier state for trixie and bookworm Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] add more mediawiki issues Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] 6 commits: mark CVE-2026-33554 as postponed for Bullseye Thorsten Alteholz ( at alteholz)
[Git][security-tracker-team/security-tracker][master] Revert "Update CVE-2025-63261 to earlier state for trixie and bookworm" Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] remaining mediawiki issues Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Update status for fixed version for CVE-2025-13763 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-26962/ruby-rack Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-22815/python-aiohttp Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add additional mbedtls issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-27489/onnx Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] auto-nfu: Add another NVIDIA product covered by the CNA rule Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two new check-mk issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two scitokens-cpp issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add CVE-2026-2950/node-lodash Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add three new botan issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Reserve DSA number for inetutils update Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34060/ruby-ruby-lsp Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Reserve DSA number for pyasn1 update Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug references for glances issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug references for onnx issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34043 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] trixie/bookworm triage Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-34591/poetry Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Reference directly the fixing commit for CVE-2026-5201 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] 2 commits: Take gdk-pixbuf from dsa-needed list Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] dpkg ospu Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-34043 via unstable Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Correct information on CVE-2025-40219 after kernel-sec triage Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Remove notes on one rejected CVE Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Correct information on CVE-2026-23333/linux Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Remove notes from one rejected Linux CVE Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2024-30850 (rejected, duplicate) Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two more CVEs for botan Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Correct the actual source package name for botan3 Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add the removed botan source package for tracking recent Botan CVEs Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add one new dokuwiki issue Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Add two juju issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] Track fixed version for two libvncserver issues Salvatore Bonaccorso ( at carnil)
[Git][security-tracker-team/security-tracker][master] tornado DSA Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] p7zip-rar ospu Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] golang-github-tillitis-tkeyclient spu Moritz Muehlenhoff ( at jmm)
[Git][security-tracker-team/security-tracker][master] LTS: claim pyasn1 in dla-needed.txt Emmanuel Arias ( at eamanu)

Last message date: Fri Apr 3 22:47:04 BST 2026
Archived on: Fri Apr 3 22:47:08 BST 2026

Messages sorted by: [ subject ] [ author ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).