[Git][security-tracker-team/security-tracker][master] trixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
785ff9ea by Moritz Muehlenhoff at 2026-07-06T10:29:25+02:00
trixie triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -270,6 +270,7 @@ CVE-2026-14570 (Crypt::DSA versions before 1.22 for Perl draw the DSA signing no
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/41542402/
 CVE-2026-14647 (A weakness has been identified in onnx up to 1.21.x. This vulnerabilit ...)
 	- onnx <unfixed>
+	[trixie] - onnx <no-dsa> (Minor issue)
 	NOTE: https://github.com/onnx/onnx/issues/8036
 	NOTE: https://github.com/onnx/onnx/pull/8051
 	NOTE: Fixed by: https://github.com/onnx/onnx/commit/a7bf3a0f1d18bb62575236ef6e4944980c40e045
@@ -1280,6 +1281,7 @@ CVE-2026-39448 (Unauthenticated Broken Access Control in NOWPayments for WooComm
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-33592 (An unauthenticated remote attacker can exhaust server memory via the F ...)
 	- open62541 <unfixed> (bug #1141441)
+	[trixie] - open62541 <no-dsa> (Minor issue)
 	NOTE: https://github.com/open62541/open62541/pull/8142
 	NOTE: Fixed by: https://github.com/open62541/open62541/commit/c9563e8ea4a8db2f64059c8ff7efe0b49a35bea3 (v1.4.17)
 CVE-2026-27436 (Editor Arbitrary Code Execution in Five Star Business Profile and Sche ...)
@@ -1338,6 +1340,7 @@ CVE-2026-12122 (The Kirki \u2013 Freeform Page Builder, Website Builder & Custom
 	NOT-FOR-US: WordPress plugin
 CVE-2026-11946 (An unauthenticated remote attacker can exhaust server memory via the G ...)
 	- open62541 <unfixed> (bug #1141441)
+	[trixie] - open62541 <no-dsa> (Minor issue)
 	NOTE: https://github.com/open62541/open62541/pull/8142
 	NOTE: Fixed by: https://github.com/open62541/open62541/commit/c9563e8ea4a8db2f64059c8ff7efe0b49a35bea3 (v1.4.17)
 CVE-2026-11896 (The My Calendar \u2013 Accessible Event Manager plugin for WordPress i ...)
@@ -4477,11 +4480,13 @@ CVE-2026-4629 (A flaw was found in Keycloak. A highly privileged user with `mana
 CVE-2026-4360 (In the Tarfile.extract() function, the filter parameter is not passed  ...)
 	- python3.14 <unfixed>
 	- python3.13 <unfixed>
+	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
 	- python3.9 <removed>
 	- python2.7 <removed>
 	[bullseye] - python2.7 <end-of-life> (EOL in bullseye LTS)
 	- jython <unfixed>
+	[trixie] - jython <no-dsa> (Minor issue)
 	[bullseye] - jython <end-of-life> (EOL in bullseye LTS)
 	- pypy3 <unfixed> (bug #1141531)
 	[trixie] - pypy3 <no-dsa> (Minor issue)


=====================================
data/dsa-needed.txt
=====================================
@@ -82,6 +82,8 @@ perl (carnil)
 --
 prometheus
 --
+python-msgpack
+--
 redis
 --
 rsync



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/785ff9ea52158cd8222869d6b0f3dd951d96206e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/785ff9ea52158cd8222869d6b0f3dd951d96206e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260706/49f42a8e/attachment-0001.htm>