[Git][security-tracker-team/security-tracker][master] trixie/bookworm triage

Moritz Muehlenhoff (@jmm) jmm at debian.org
Sat Feb 21 14:03:21 GMT 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71e58492 by Moritz Muehlenhoff at 2026-02-21T15:02:56+01:00
trixie/bookworm triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -146,6 +146,7 @@ CVE-2026-27169 (OpenSift is an AI study tool that sifts through large datasets u
 	NOT-FOR-US: OpenSift
 CVE-2026-27168 (SAIL is a cross-platform library for loading and saving images with su ...)
 	- sail <unfixed>
+	[trixie] - sail <no-dsa> (Minor issue)
 	NOTE: https://github.com/HappySeaFox/sail/security/advisories/GHSA-3g38-x2pj-mv55
 CVE-2026-27161 (GetSimple CMS is a content management system. All versions of GetSimpl ...)
 	NOT-FOR-US: GetSimple CMS
@@ -897,6 +898,8 @@ CVE-2026-27001 (OpenClaw is a personal AI assistant. Prior to version 2026.2.15,
 	NOT-FOR-US: OpenClaw
 CVE-2026-26996 (minimatch is a minimal matching utility for converting glob expression ...)
 	- node-minimatch <unfixed>
+	[trixie] - node-minimatch <no-dsa> (Minor issue)
+	[bookworm] - node-minimatch <no-dsa> (Minor issue)
 	NOTE: https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26
 	NOTE: Fixed by: https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5 (v10.2.1)
 CVE-2026-26995


=====================================
data/dsa-needed.txt
=====================================
@@ -26,6 +26,8 @@ frr
 gh/oldstable
   Santiago Vila might work on preparing an update
 --
+gimp
+--
 git-lfs
 --
 jackson-core



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71e58492f9d54987288ab602a7281305862a1c3d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71e58492f9d54987288ab602a7281305862a1c3d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260221/55fd70bc/attachment.htm>


More information about the debian-security-tracker-commits mailing list