[Git][security-tracker-team/security-tracker][master] Reserve DLA-4374-2 for pdfminer

Chris Lamb (@lamby) lamby at debian.org
Thu Jan 8 18:58:38 GMT 2026



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
692002cf by Chris Lamb at 2026-01-08T10:58:34-08:00
Reserve DLA-4374-2 for pdfminer

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Jan 2026] DLA-4374-2 pdfminer - regression update
+	{CVE-2025-64512}
+	[bullseye] - pdfminer 20200726-1+deb11u2
 [07 Jan 2026] DLA-4435-1 libsodium - security update
 	{CVE-2025-69277}
 	[bullseye] - libsodium 1.0.18-1+deb11u1


=====================================
data/dla-needed.txt
=====================================
@@ -314,11 +314,6 @@ p7zip-rar
   NOTE: 20260106: Proposed EOL or full replacement with 7zip (Beuc)
   NOTE: 20260106: https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/306
 --
-pdfminer (Chris Lamb)
-  NOTE: 20260102: Added by Front-Desk (Beuc)
-  NOTE: 20260102: Requires followup for CVE-2025-64512 as original fix was incomplete (Beuc/front-desk)
-  NOTE: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c684208eb36689950230176dd3b4dcfa4945ae6b
---
 pgbouncer (ah)
   NOTE: 20251209: Added by Front-Desk (dleidert)
   NOTE: 20251209: Take care of OSPU as well (and SPU for CVE-2025-12819 if not done by maintainer/secteam) (dleidert/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/692002cf51896f817d42406fd3627cc8a57afb49

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/692002cf51896f817d42406fd3627cc8a57afb49
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260108/4d9c7689/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list