[Git][security-tracker-team/security-tracker][master] Reserve DLA-4374-2 for pdfminer
Chris Lamb (@lamby)
lamby at debian.org
Thu Jan 8 18:58:38 GMT 2026
Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
692002cf by Chris Lamb at 2026-01-08T10:58:34-08:00
Reserve DLA-4374-2 for pdfminer
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Jan 2026] DLA-4374-2 pdfminer - regression update
+ {CVE-2025-64512}
+ [bullseye] - pdfminer 20200726-1+deb11u2
[07 Jan 2026] DLA-4435-1 libsodium - security update
{CVE-2025-69277}
[bullseye] - libsodium 1.0.18-1+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -314,11 +314,6 @@ p7zip-rar
NOTE: 20260106: Proposed EOL or full replacement with 7zip (Beuc)
NOTE: 20260106: https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/306
--
-pdfminer (Chris Lamb)
- NOTE: 20260102: Added by Front-Desk (Beuc)
- NOTE: 20260102: Requires followup for CVE-2025-64512 as original fix was incomplete (Beuc/front-desk)
- NOTE: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c684208eb36689950230176dd3b4dcfa4945ae6b
---
pgbouncer (ah)
NOTE: 20251209: Added by Front-Desk (dleidert)
NOTE: 20251209: Take care of OSPU as well (and SPU for CVE-2025-12819 if not done by maintainer/secteam) (dleidert/front-desk)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/692002cf51896f817d42406fd3627cc8a57afb49
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/692002cf51896f817d42406fd3627cc8a57afb49
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260108/4d9c7689/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list