[Git][security-tracker-team/security-tracker][master] Reserve DLA-4679-1 for libxfont

[Andrej Shadura (@andrewsh)]

Andrej Shadura pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0e662958 by Andrej Shadura at 2026-07-12T20:33:37+02:00
Reserve DLA-4679-1 for libxfont

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,11 @@
+[12 Jul 2026] DLA-4679-1 libxfont - security update
+	{CVE-2026-56001 CVE-2026-56002 CVE-2026-56003}
+	[bullseye] - libxfont 1:2.0.4-1+deb11u1
+	[bookworm] - libxfont 1:2.0.6-1+deb12u1
+[12 Jul 2026] DLA-4678-1 libxfont - security update
+	{CVE-2026-56001 CVE-2026-56002 CVE-2026-56003}
+	[bullseye] - libxfont 2.0.4-1+deb11u1
+	[bookworm] - libxfont 1:2.0.6-1+deb12u1
 [12 Jul 2026] DLA-4677-1 chromium - security update
 	{CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110 CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114 CVE-2026-15115 CVE-2026-15116 CVE-2026-15117 CVE-2026-15118 CVE-2026-15119 CVE-2026-15120 CVE-2026-15121 CVE-2026-15122 CVE-2026-15123 CVE-2026-15124 CVE-2026-15125 CVE-2026-15126 CVE-2026-15127 CVE-2026-15128 CVE-2026-15129 CVE-2026-15130 CVE-2026-15131 CVE-2026-15132 CVE-2026-15133}
 	[bookworm] - chromium 150.0.7871.114-1~deb12u1


=====================================
data/dla-needed.txt
=====================================
@@ -415,11 +415,6 @@ libstb/bullseye
 libvncserver
   NOTE: 20260612: Added by Front-Desk (rouca)
 --
-libxfont (andrewsh)
-  NOTE: 20260709: Added by Front-Desk (utkarsh)
-  NOTE: 20260709: PCF/bitmap font-parser heap overflows CVE-2026-56001/56002/56003
-  NOTE: 20260709: (fixed libXfont2-2.0.8); Debian <=2.0.6. oss-sec 2026-07-08.
---
 libxmltok/bullseye
   NOTE: 20250421: Added by Front-Desk (ta)
   NOTE: 20250421: Also review all other expat CVEs. (bunk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e66295875b4e44b2f5412d30b6b4acce05fca91

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e66295875b4e44b2f5412d30b6b4acce05fca91
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260712/7f109015/attachment-0001.htm>