[Git][security-tracker-team/security-tracker][master] Reserve DLA-4765-1 for expat

[Andrej Shadura (@andrewsh)]

Andrej Shadura pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af69d833 by Andrej Shadura at 2026-08-31T23:06:16+02:00
Reserve DLA-4765-1 for expat

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[31 Aug 2026] DLA-4765-1 expat - security update
+	{CVE-2026-50219 CVE-2026-56131 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412 CVE-2026-72522 CVE-2026-76957}
+	[bookworm] - expat 2.5.0-1+deb12u3
 [31 Aug 2026] DLA-4764-2 libdbd-csv-perl - regression update
 	[bullseye] - libdbd-csv-perl 0.5800-1+deb11u1
 	[bookworm] - libdbd-csv-perl 0.6000-1+deb12u1


=====================================
data/dla-needed.txt
=====================================
@@ -168,10 +168,11 @@ exim4
   NOTE: 20260724: local privesc, exim <=4.99.4 affected, fixed in 4.99.5
   NOTE: 20260724: EXIM-Security-2026-06-22.1 (High) and .3 (Medium) (utkarsh/front-desk)
 --
-expat (andrewsh)
+expat
   NOTE: 20260518: Added by Front-Desk (Beuc)
-  NOTE: 20260518: Upcoming DSA + many postponed CVE.
+  NOTE: 20260518: Many postponed CVE.
   NOTE: 20260518: CVE-2026-41080 fix requires for python's CVE-2026-7210.
+  NOTE: 20260831: CVE-2026-45186 and CVE-2026-66046 require more work (andrewsh)
 --
 ffmpeg
   NOTE: 20260710: Added by Front-Desk (utkarsh)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af69d8338dfbe518fd2378de964cf0eab02d6587

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af69d8338dfbe518fd2378de964cf0eab02d6587
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/270a1129/attachment.htm>