August 2026 Archives by thread
Starting: Sat Aug 1 01:52:58 BST 2026
Ending: Sat Aug 15 08:45:46 BST 2026
Messages: 968
- [Git][security-tracker-team/security-tracker][master] chromium dsa
Andres Salomon ( at dilinger)
- [Git][security-tracker-team/security-tracker][master] 3 commits: lts: mark CVE-2026-11771/openvpn as not affecting Bullseye
Daniel Leidert ( at dleidert)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for two libarchive issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-42533 via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-15588 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56818/netty
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-66066/rails
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 4 commits: add adminer
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] 3 commits: add gawk
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two coturn issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54909/pion-stun
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54787/sigstore-go
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4710-1 for chromium
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libgd2 update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2025-43718/poppler: Reference commit introducing the issue
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for proftpd-dfsg via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18536/libdata-entropy-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-55995/open-isns via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track trixie-pu update for open-isns
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-54908 via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-54388
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] claim libyaml-syck-perl for carnil
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4711-1 for starlette
Daniel Leidert ( at dleidert)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4712-1 for node-tar
Daniel Leidert ( at dleidert)
- [Git][security-tracker-team/security-tracker][master] Add fixing commit for CVE-2026-50019
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-46600 for trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Some MINA SSHD issues were miss-assigned to src:mina2, correct to libmina-sshd-java
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 3 commits: add libmodbus
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4714-1 for libmodbus
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] 5 commits: add jline3
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reassign CVE-2026-48827 to libmina-sshd-java
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-18536/libdata-entropy-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new guzzle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-67338/jupyterlab
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new python-git issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new node-axios issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-67309/traefik
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Note prepared update for libyaml-syck-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of freerdp3 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-66066/rails
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references bugs for various issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fix via unstable for CVE-2026-50813/sqlite3
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-66755/tika
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-67320/node-axios
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references for reported Debian bugs for various issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9335/keras
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of keycloak issues, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process one more NFU
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-17523
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libssh update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 3 commits: add unzip
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] add urwid
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] mark CVE-2026-11703 and CVE-2026-11999 as postponed for Bullseye
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] mark CVE-2026-11310, CVE-2026-10592, CVE-2026-10512, CVE-2026-10098 and...
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4715-1 for kissfft
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for ocker-registry issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new freerdp3 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for python-aiohttp issues via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for avahi via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for libraw via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track spice-vdagent issues via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track alternative for wolfssl via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 6 commits: mark CVE-2026-64611 as postponed
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for cyrus-imapd via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for bettercap via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for dhcpcd via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2026-6390 as postponed for Bookworm and Bullseye
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] mark CVE-2026-16461 and CVE-2026-16277 as postponed for Bookworm and Bullseye
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][master] 2 commits: web tracker: delete broken unix socket server
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Deleted branch add-more-links
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Deleted branch helmutg/delete-dead-webservice
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Mark wolfssl issues as no-dsa for trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Fix typos in TODO items
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] LTS: claim libgd2 in dla-needed.txt
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] 4 commits: mark CVE-2026-16473 as postponed for Bookworm and Bullseye
Thorsten Alteholz ( at alteholz)
- [Git][security-tracker-team/security-tracker][helmutg/type-improvements] 251 commits: Correct source package association of CVE-2026-55995 to open-isns
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Two dracut issues fixed in unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-58016/glib2.0 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18581/llama.cpp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Track openjdk-8 issues fixed in unstable
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker] Pushed new branch dasel-cves
Guilherme Puida Moreira ( at puida)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Update affected versions for CVE-2026-46377 and CVE-2026-46378
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Deleted branch dasel-cves
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6695/gimp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6694/gimp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-14461/mtr via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add some NFUs in XML-Sig Perl module
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add NFUs in Net-SAML2 Perl module
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add some new bouncycastle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add another batch of bouncycastle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track CVE fixes for perl issues addressed via experimental
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for the various bouncycastle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-69153/node-postcss
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new node-brace-expansion issue (CVE-2026-69152)
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new angular.js issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new python-git issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-68930/rust-russh
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-68742/sssd
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-61372/apache-jena
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18718/ghidra, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18651/389-ds-base issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two tar issues (CVE-2026-18477 and CVE-2026-18508)
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12259/nltk
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-18321
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Pushed new branch helmutg/web-result-encoding
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-XXXX/nginx: mark as fixed in bullseye, fixed by DLA-4660-1
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-github-gomarkdown-markdown via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-18446/node-ajv via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4716-1 for ruby2.7
Abhijith PA ( at abhijith)
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libvncserver
Abhijith PA ( at abhijith)
- [Git][security-tracker-team/security-tracker][master] Remove annotations from one now rejected CVE
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new python-cryptography issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new guzzle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new python-aiohttp issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two node-ip-address issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add one more sssd issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add one rust-crossbeam-epoch issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take aom
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Add php7.4
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-69185/node-socket.io-parser
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-42169/gimp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18739/popt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18569/keycloak
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-17614/WildFly
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Python3.9 triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-51105/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-63317/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] LTS: claim php7.4 in dla-needed.txt
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-47667/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-67194/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add sssd to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 3 commits: Track fixed version for netcdf-perallel issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references for reported issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new python-django issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references for python-django issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-64193
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-django issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process two new stunnel issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add another sssd issue with only Red Hat bugilla reference
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add three new pdm issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add php8.2 to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add another product for the Eclipse CNA rule
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two jackson-core issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18809/firefox
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two open62541 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18772/rlottie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13229/Zammad, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10050/jetty
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] goaccess triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-54332/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add libarchive
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add u-boot to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add python-zeroconf
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-18536/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-18446/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add php-dompdf to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add puma to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2024-42643/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] ruby-websocket-driver/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] add to dla-needed ruby-oauth2
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-54522/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add dla-needed ruby-jwt
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add to dla-needed to python-django
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-18321/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] onnx/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-55995
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim python-django.
Chris Lamb ( at lamby)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA for aom
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA for botan3
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Take jq
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Track fixed versions via unstable for thunderbird issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-66901 as NFU
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-66902 as NFU
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for python-django via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-69247/python-cryptography via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new libxfont issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-57451/vim
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Correct status for CVE-2026-32316 in trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for two guzzle issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-42170/gimp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2026-13325
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new Ghost CMS issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4717-1 for linux
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] pglogical triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add pglogical
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add pipewire to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] imagemagick/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add python-cryptography to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71201/ironic
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVEs for swift issues now assigned
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add neutron to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add new batch of qpid-java issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of open62541 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new qpid-proton issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Track xorg-server issues fixed in unstable
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Add new opensips issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18819/racktables
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Associate some CVEs with src:opensips
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] lts: claim p7zip
Sylvain Beucler ( at beuc)
- [Git][security-tracker-team/security-tracker][master] Add calibre to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add texworks for affected by CVE-2026-63729
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add texsudio for CVE-2026-63729
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add emacs-pdf-tools for CVE-2026-63729
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add synctex to embeded code copy
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add okular for syntex CVE
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4718-1 for 7zip
Sylvain Beucler ( at beuc)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4719-1 for p7zip
Sylvain Beucler ( at beuc)
- [Git][security-tracker-team/security-tracker][master] Add libmojo-jwt-perl to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Ignore CVE-2026-66011 for LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] lts: add dist to php packages
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4720-1 for linux
Ben Hutchings ( at benh)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-64685
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Removed fontforge from dla-needed.txt
Santiago R.R. ( at santiago)
- [Git][security-tracker-team/security-tracker][master] Remove a few packages from dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54876/openssl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] libpgjava/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Remove from dla-needed libpgjava
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-70952/libpf4j-java via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: libxmltok/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-9064/389-ds-base
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71265/domoticz, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71236/grocy, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reassign some CVEs with grocy, itp'ed entry
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new libkcapi with some AI assisted overhead
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of electron issues, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two ghost issues, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Fix libsynctex embed copy
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the Apache CNA rule
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new keycloak issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: libsynctex is used by emacs-pdf-tools
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] texworks not affected by libsynctex
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add NOTE for CVE-2026-13321
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Add NOTE for CVE-2026-13204
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-12617: mark not-affected in bullseye; add commit for bookworm
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Take libde265
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Drop entries with no security impact on CVE-2026-63729
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for libxfont issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Drop trailing whitespaces
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for some hdf5 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-2153
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for hdf5 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Pushed new branch helmutg/web-adapter
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Add new rclone issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: web_support.py: tighten the types/encoding of Result objects
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker] Deleted branch helmutg/web-result-encoding
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] LTS triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] ruby-sqlite3/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] pypy3/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][helmutg/type-improvements] 229 commits: LTS: claim libgd2 in dla-needed.txt
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Add node-re2 to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] nodejs triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add new open62541 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-34966/gitea
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of hdf5 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18967/Keycloak
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA for libde265
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Add qpid-proton to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage libheif CVEs
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-13321: Add NOTE for bookworm version
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-47251
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-13204: Add NOTE for bookworm version
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-11721: Add NOTE for bullseyes and bookworm version
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-11622: Add NOTE for bullseyes and bookworm version
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-71201/ironic
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-71201/ironic via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add udisks2 CVE-2026-7867
Alberto Garcia ( at berto)
- [Git][security-tracker-team/security-tracker][master] Proton CVE look mistriaged wait for dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-35563/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-41579 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-14957 as no-dsa for trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 3 commits: Revert triage of qpid-proton assigned issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-64564
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4721-1 for async-http-client
Chris Lamb ( at lamby)
- [Git][security-tracker-team/security-tracker][master] udisks2 DSA-6414-1
Alberto Garcia ( at berto)
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-64561
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Pushed new branch helmutg/vulnerable-enum
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][helmutg/type-improvements] 5 commits: security_db.py: rewrite mergeLists using sets
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][helmutg/vulnerable-enum] security_db.py: track source_package_status.vulnerable as an enum
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-7867: mark as fixed in udisks2 2.11.2-1
Alberto Garcia ( at berto)
- [Git][security-tracker-team/security-tracker][master] Add back reference for CVE-2026-7867
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references for udisks2 issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new PowerDNS issues (pdns, pdns-recursor, dnsdist)
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-68480/linux
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-68480
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] docker-registry/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] docker-registry/bullseye
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add libgd-securityimage-perl
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2026-51992
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add python-asyncssh
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-61477/libvirt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] node-tar/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] node-ua-parser-js/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-69185/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-43622/llama.cpp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18839/popt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Update status for libsynctex2
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Demote now CVE-2026-66011 to unimportant
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4722-1 for redis
Chris Lamb ( at lamby)
- [Git][security-tracker-team/security-tracker][master] Add new set of apr-util issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: security_db.py: track source_package_status.vulnerable as an enum
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker] Deleted branch helmutg/vulnerable-enum
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-13321: Fix commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-13204: Fix commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-12617: fix commit link and add new one
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-11721: fix commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-11622: fix commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-11331: add commits link
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] DSA for jq
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] 3 commits: CVE-2026-10723: add commits link
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-3592: Add commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-3039: add commits links
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Track some fixes for rust-coreutils via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-1836 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-18401
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for two tar issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for apr-util issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for PowerDNS issue (CVE-2026-52682)
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add new chromium issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][helmutg/type-improvements] 93 commits: pypy3/LTS
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-54876
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-64638/wordpress
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rclone issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18938/p11-kit
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for wordpress issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Cleanup two CVEs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71554/python-h2
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two node-re2 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71497/jsoup
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add some new node-mermaid issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new Traefik issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-35345 according to maintainer's information
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4723-1 for linux-6.1
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] lts: unclaim xorg-server
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] lts: drop shim
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] lts: take chromium
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-64638/wordpress
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new llama.cpp issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add wordpress to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new ffmpeg issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4724-1 for linux-6.12
Ben Hutchings ( at benh)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4725-1 for bind9
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Add wordpress to dla-needed (follow dsa)
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 11 commits: lib: change internUrgency not to return None
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker] Deleted branch helmutg/type-improvements
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for apr-util issues via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add temporary entry for zip issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Remove for now no-dsa tag until clarified with maintainer
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add apr-utils fixes
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add apr-utils
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Take apr-utils
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] DSA for libheif
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-32327/commit
Bastien Roucariès ( at rouca)
- Processing 59cac62e8bd8208cc4466d232922d9603b931d0e failed
security tracker role
- [Git][security-tracker-team/security-tracker][helmutg/web-adapter] 309 commits: Add CVE-2026-12259/nltk
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Take kitty for review
Aron Xu ( at aron)
- Processing 9b55d8acae2c9cc5f1ff3b9348b27a5632173f53 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Add apr-utils commit
Bastien Roucariès ( at rouca)
- Processing 46788f693bcfeff400dddfc3afd2268bb4459199 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-49506
Salvatore Bonaccorso ( at carnil)
- Processing 16874e256868448eb1b3dd9919fea44ea54d947c failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Reference commit from 1.6.x for CVE-2026-32327
Salvatore Bonaccorso ( at carnil)
- Processing 7dd35125ab4ebf7d173172527539ca3e83d978c9 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Reference commit from 1.6.x branch for CVE-2026-34191
Salvatore Bonaccorso ( at carnil)
- Processing 34003fcc27f3058866fde5aab9dab8be46aee3f5 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Reference commit from 1.6.x branch for CVE-2026-34501
Salvatore Bonaccorso ( at carnil)
- Processing 1eea5996545d9e6687cb2e882ac0f807f05bde91 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Reference directly commit from 1.6.x branch for CVE-2026-34502
Salvatore Bonaccorso ( at carnil)
- Processing a82501061900ba7c876dc03100ea05812b9b0543 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for thunderbird update
Salvatore Bonaccorso ( at carnil)
- Processing d65161b3ce34049a2414ca577988024d813e4a13 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-62289/libheif
Salvatore Bonaccorso ( at carnil)
- Processing c0681c30c6d4ae8645bf5cb0158abcca58e2efa9 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-62292/libheif
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process CVE-2026-17435 as NFU
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19082/libimager-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reassociate CVE-2020-36732 with src:cryptojs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71852/pypdf
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71851/cryptojs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71847/ruby-json
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two go-git issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process two new pymdown-extensions issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-64677/anki
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two more NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19079/policycoreutils
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of llama.cpp issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18487/epiphany-browser
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] claim pdns/pdns-rec/dnsdisz/xen DSAs
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Claim xorg-server
Arnaud Rebillout ( at arnaudr)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for libimager-perl via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Annotate that Bastien Roucaries will prepare nodejs updates
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][helmutg/web-adapter] web tracker: refactor service class hierarchy
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Add proposed update for glib2.0 via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take care of wordpress DSA release
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed verison for mina2 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for httpcomponents-core5 issues via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71870
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add one NFU from external check
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some new NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-65819/gopacket
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54338/jupyterhub
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48120/kakoune
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-61478/libvirt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-61477
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] trixie triage
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status on two stunnel4 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add tag reference for CVE-2026-6390 commit
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reference improved updates for libyaml-syck-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixes for two golang-github-go-git-go-git-v6 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for four node-re2 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take dnsdist, pdns and pdns-recursor for DSA
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new clamav issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] tomcat11 fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Claim nvidia-graphics-drivers/bullseye
Tobias Frost ( at tobi)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for libreswan issues fixed via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for dnsdist update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for pdns update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for pdns-recursor update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Annotate current state of unbound rebase to 1.25.2 for trixie-security
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] bugnums
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new rust-kuyv issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-55200 and CVE-2026-55199 mark them as not affected in bullseye
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] dla-needed: update NOTE for libssh2
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] node-socket.io-parser fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] nodejs fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] thrift fixed in experimental
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-71847/ruby-json
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-68743/sssd
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process two NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new issues in openbao, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add apr-util to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Expand two todos for vim related issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] lts: drop starlette from dla-needed and mark all CVEs is Bullseye as ignored
Daniel Leidert ( at dleidert)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-66033 and CVE-2026-66035 marked as not affected in bullseye
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-55200 and CVE-2026-55199 mark them as not affected for bookworm
Emmanuel Arias ( at eamanu)
- Processing 75b9665b3500ff66db33430638abb798631d0ab3 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] Correct order of suites for libssh CVEs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Adjust tracking for bind9 in CVE-2026-10822
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-17072/gst-plugins-good1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Triage kitty issues
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Update note for CVE-2026-66041
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-17510/libcrypt-openssl-pkcs12-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-17510
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libkcapi issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references as reported for various issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take icinga2
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] DSA for kitty
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Add patch links for open Zabbix issues
Daniel Leidert ( at dleidert)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-66033 and CVE-2026-66035 marked as not affected in bookworm
Emmanuel Arias ( at eamanu)
- Processing 952685d78f2175920ef53f98bb8e16d41c2a227b failed
security tracker role
- Processing 125793fc37634c9a971456acace3e4e08fa1f6ad failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] data/cve/list: Fix syntax
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] NFU CVE-2026-61899
Henri Salo ( at hsalo-guest)
- [Git][security-tracker-team/security-tracker][master] Add note that Bastien is proposing debdiff for apr-utils
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-17510 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-48120/kakoune
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-47143 as no-dsa for trixke
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47143/capstone fix via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add some new Consul CVEs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-15534/perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] xen DSA
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Follow dsa add srt to dla
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-17510/LTS
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] DLA-4726-1 ca-certificates - CA certificates update
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] kakoune spu
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Samba/LTS triagging
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add samba to dla-needed
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Take caddy
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2017-17521/fontforge
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status on CVE-2017-11573/fontforge
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take care of review apr-util from Bastien Roucaries
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add zip to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-71847 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fix via unstable for CVE-2026-54603/ruby-oauth2
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add missing CVE from external check for nltk
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new expat issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12570/keras
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19389/gst-plugins-ugly1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19387/gst-plugins-bad1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4727-1 for thunderbird
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4728-1 for chromium
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] track one more neutron issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Associate one non-CVE-ified neutron entry with #1142937
Salvatore Bonaccorso ( at carnil)
- Processing fec9f1912e9c32984fe91e69fd0c9bc6735646fe failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] openjdk-21 DSA
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Update the CVE list of icinga2 DSA
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] three icinga2 issues CVEfied
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] two accountsservice issues n/a
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] DSA for icinga2
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Two CVEs assigned for c-ares issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6791/glibc
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for glibc issues via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new roundcube issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add roundcube to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18649/gst-plugins-good1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] rust-openssl fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] rust-hickory-proto fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for expat issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two consul issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11425/Domoticz
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new libstb issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12261/nltk
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new dracut issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4729-1 for nss
Jochen Sprickerhof ( at jspricke)
- [Git][security-tracker-team/security-tracker][master] Add postfix to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for wordpress update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for #1142906 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixes for two more unzip issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for two libssh2 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] rust-git2 fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] grpc fixed in experimental
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] NFUs
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libyaml-syck-perl update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] mruby fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add four new emacs issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add three new optee-os issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] track one more nova issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-59087/gimp
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4730-1 for libyaml-syck-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add three more gimp issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71959/bitwarden
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process some more NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add one new spip issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new cpio issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: DSA for caddy
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] LTS: add roundcube to dla-needed.txt
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72568/redis which needs further investigation
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new php-league-commonmark issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71287/cacti
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reviewed some uploads for DSA release
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] roundcube issues fixed via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6368/glibc
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference to advisory for CVE-2026-6791/glibc
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for expat issue via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new lemonldap-ng issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add lemonldap-ng to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73030/unearth
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new issues for Mastodon, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72913/kitty
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Grafana rule
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Track proposed update for redmine via trixie-pu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-19349/lemonldap-ng
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Claim CVE-2026-19349
Yadd ( at yadd)
- [Git][security-tracker-team/security-tracker][master] Add two new ostree issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new svxlink issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add GHSA references for svxlink issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] python3.13 fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add flatpak placeholder and new xdg-dbus-proxy issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] python3.14 fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for xdg-dbu-proxy issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Split up flatpak temporary entry in individual entries
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add flatpak and xdg-dbus-proxy to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Claim samba in dla-needed.txt
Markus Koschany ( at apo)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for flatpak issues via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for one flatpak issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add note for spip
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for postfix update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new designate issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Assign flatpak and xdg-dbus-proxy to Moritz
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-17544/php{8.2,7.4}: Triage for bookworm and bullseye
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] Add new intel-microcode issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for intel-microcode issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73228/djangorestframework
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new coturn issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new issues in peertube, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new node-browserslist issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73086/nanoid
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reassign two CVEs to seaweedfs, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73080/seaweedfs, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of CVEs for vim
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Two new Tesseract issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new seaweedfs issues, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two FreeRDP issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Associate some CVEs with koha, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Expand note for spip, wait for regressions to be resolved
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4731-1 for libgd2
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] add upstream reference for Okular
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] openjdk-25 DSA
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Reserve DLA-4732-1 for php8.2
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] GHSA-r7hp-698j-2h6c/xdg-dbus-proxy: mark bullseye,bookworm not-affected
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] LTS: add comment to flatpak and mark DLA needed for bookworm too
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] LTS: add comment to vips and mark DLA needed for bookworm too
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] Add expat to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-66738/spip
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-672{6,7} for libtpms
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: flatpak: track upstream fixes for 1.18.x and 1.16.x
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72712/nmap
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new openssh issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72694/mrtg
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72693/kbd
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72558/civicrm
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openssh issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-72556/zoneminder
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of open5gs issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-9318/taglib
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new calibre issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process more NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73229/djangorestframework
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-70622 which needs more investigation
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add three new freecad issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19566/libnet-cidr-set-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker] Pushed new branch helmutg/web-readonly
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] LTS: claim roundcube in dla-needed.txt
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] 2 commits: web tracker: refactor service class hierarchy
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker] Deleted branch helmutg/web-adapter
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] new gh issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new mongoose issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new iperf3 issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for glib2.0 via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for designate issues fixed via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-53361
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] LTS: claim libdbi-perl and libnet-dns-perl in dla-needed.txt
Guilhem Moulin ( at guilhem)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4734-1 for lemonldap-ng
Yadd ( at yadd)
- [Git][security-tracker-team/security-tracker][master] neovim spu
Moritz Muehlenhoff ( at jmm)
- Processing f8dcdff38594506e955a76d24d4caf60f4bdd992 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] new undertow issues
Moritz Muehlenhoff ( at jmm)
- Processing f259abc7b9a940072b0c5b8331b38b6f25f8cceb failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] new libvirt issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] janet is in the archive now
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new isc-dhcp issue
Moritz Muehlenhoff ( at jmm)
- Processing e28bd19105cb877f0f43804429ac32beacbda790 failed
security tracker role
- [Git][security-tracker-team/security-tracker][master] new shim issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add three new nltk issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-63622/libvirt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-63623/libvirt
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two more freerdp3 issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][helmutg/web-readonly] 28 commits: web tracker: refactor service class hierarchy
Helmut Grohne ( at helmutg)
- [Git][security-tracker-team/security-tracker][master] Add new ironic issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4735-1 for neutron
Santiago R.R. ( at santiago)
- [Git][security-tracker-team/security-tracker][master] Track neutron bookworm update until CVE assigned in temporary entry
Santiago R.R. ( at santiago)
- [Git][security-tracker-team/security-tracker][master] flatpak, lemonldap, xdg-dbus-proxy DSAs
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for rapid7 CNA
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new qemu issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new 389-ds-base issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2026-6426/qemu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-15307 & CVE-2026-15830 in python-django for bookworm and bullseye LTS.
Chris Lamb ( at lamby)
- [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected duplicates for FreeRDP
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73295/mkdocs-material
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73232/ffuf
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for spip update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add note to python-httplib2
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Add note to libssh2
Emmanuel Arias ( at eamanu)
- [Git][security-tracker-team/security-tracker][master] Take expat
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add chromium to dla-needed.txt
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-6879/python3.11: mark as postponed for bookworm
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] Add two NFUs for not packaged Perl module
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Add new batch of rsync issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-34191/apr-util
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4737-1 for xorg-server
Arnaud Rebillout ( at arnaudr)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4738-1 for xorg-server
Arnaud Rebillout ( at arnaudr)
- [Git][security-tracker-team/security-tracker][master] bin/sign-advisory.sh: Respect file permissions of the source file
Arnaud Rebillout ( at arnaudr)
- [Git][security-tracker-team/security-tracker][master] bogus Jenkins CVE
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-6368/glibc
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Take docker.io
Aron Xu ( at aron)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73501/golang-github-getkin-kin-openapi
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new rust-russh issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] new rlottie issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Add new regex based rule for SiYuan NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Correct order for new SiYuan NFU rule
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new etcd issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for not-CVEified ironic issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new glance issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new ruby-loofah issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] mojarra n/a
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new freeipa issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73434/gst-plugins-good1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73433/gst-plugins-good1.0
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] libdbi-perl n/a
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71290 but retain TODO item for now
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-48937 commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Added mailing list urls
Henri Salo ( at hsalo-guest)
- [Git][security-tracker-team/security-tracker][master] fix source package name for CVE-2026-9318
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-9318
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Adjust source package association for CVE-2026-14191
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add initial tracking for postgresql issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add specific advisory links for postgresql issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-16238/postgresql
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-14681
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-14676
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-14672
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for apr-util update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Process two NFUs for Perl modules not packaged
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2022-4993/libhtml-formhandler-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4739-1 for chromium
Emilio Pozuelo Monfort ( at pochu)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-56846/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] postgresql-17 DSA
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-56847/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-56848/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Sync some NOTE format with current practice
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add fixed version for rust-glib-0.18 issue (RUSTSEC-2024-0429)
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add followup to CVE-2018-0499/xapian-core
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for postgresql-18 issues via unstable upload
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add upstream tag information for commit for CVE-2026-6502
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new qemu issues fixed via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Remove note on now rejected bogus CVE which was assigned outside Jenkins CNA scope
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Remove notes from CVE which was associated wih python-urllib3
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Cleanup several CVEs which got rejected and were NFUs
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of go issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73650/node-svgo
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73648/ruby-rails-html-sanitizer
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73643/node-js-yaml
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two issues in Serendipity
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new JupyterLab issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new issues in python-git
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73569/node-webfont
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73566/node-tar
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73564/frp, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new batch of vllm issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two more netty issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73515/postgis, retain todo item
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new phplist issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73415/jupyterlab
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19487/perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] 2 commits: Mark mysql-8.0 as removed from unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2022-4993/libhtml-formhandler-perl
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Gitea
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new potential ruby-amazing-print issue
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for zip update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for unzip update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for python-httplib2 update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] new rustsec issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] nltk fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] hdf5 fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add one more nltk issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73489/rust-russh
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73480/gdu
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Correct status for CVE-2026-23143/linux
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new kibana issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] recor pam upstream fix
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-52844 as Windows specific in all suites
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Track full commit hash for CVE-2026-64612
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-17544
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references for cpio issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug references for tesseract issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] more rustsec issues
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-19550
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-71217
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] calibre spu
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-56850/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add upstream tag information for fixing commit for CVE-2026-73030
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for some issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Reserve DLA-4740-1 for postgresql-15
Carlos Henrique Lima Melara ( at charles)
- [Git][security-tracker-team/security-tracker][master] Reserve DSA number for util-linux update
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2022-4993 as no-dsa for trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add libnet-dns-perl to dsa-needed list
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-53365
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add reference to advisory for zip issue
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add upstream tag reference for CVE-2026-65819 upstream commit
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] rust-event-listener fixed in sid
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] new calibre spu
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] cleanup two rejected CVEs
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-73030/unearth via unstable
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new go-chi issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] python3.13 spu
Moritz Muehlenhoff ( at jmm)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-69117/netbox
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-73051/rust-actix-http
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two new issues in rust-actix-files
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-63361/limesurvey, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add two jupyterlab issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add new lxd issues
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-67587/airflow, itp'ed
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-58039/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-58040
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] CVE-2026-58042/commit
Bastien Roucariès ( at rouca)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19720/inetutils
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-58040 as not-affected for trixie
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Prefix commit reference for one note
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-74248/octavia
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add CVE-2026-74250/ironic
Salvatore Bonaccorso ( at carnil)
- [Git][security-tracker-team/security-tracker][master] Add one more lxd issue
Salvatore Bonaccorso ( at carnil)
Last message date:
Sat Aug 15 08:45:46 BST 2026
Archived on: Sat Aug 15 08:45:49 BST 2026
This archive was generated by
Pipermail 0.09 (Mailman edition).