[Git][security-tracker-team/security-tracker][master] 2 commits: DSA for caddy

Aron Xu (@aron) aron at debian.org
Tue Aug 11 04:42:48 BST 2026



Aron Xu pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af09d464 by Aron Xu at 2026-08-11T11:41:37+08:00
DSA for caddy

- - - - -
ddb2831b by Aron Xu at 2026-08-11T11:42:29+08:00
Add jq to dsa-needed

- - - - -


2 changed files:

- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[11 Aug 2026] DSA-6429-1 caddy - security update
+	{CVE-2026-27585 CVE-2026-27587 CVE-2026-27588 CVE-2026-27589 CVE-2026-27590 CVE-2026-45692 CVE-2026-52845 CVE-2026-52846}
+	[trixie] - caddy 2.6.2-12+deb13u1
 [10 Aug 2026] DSA-6428-1 libyaml-syck-perl - security update
 	{CVE-2026-5089 CVE-2026-13713 CVE-2026-57075 CVE-2026-57076 CVE-2026-57077}
 	[trixie] - libyaml-syck-perl 1.34-2+deb13u3


=====================================
data/dsa-needed.txt
=====================================
@@ -29,8 +29,6 @@ bouncycastle
 cacti
   probably best to move to 1.2.31
 --
-caddy (aron)
---
 cockpit
 --
 containerd
@@ -59,6 +57,9 @@ jetty9
 --
 jetty12
 --
+jq (aron)
+  For regression in #1144075
+--
 jupyterlab
 --
 kamailio



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fc604d6dbbf07846c7a827216e8751f6f8c5cf6...ddb2831beba31e20d3e380ba8a0e197be0a77bee

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fc604d6dbbf07846c7a827216e8751f6f8c5cf6...ddb2831beba31e20d3e380ba8a0e197be0a77bee
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/d993ced4/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list