[Git][security-tracker-team/security-tracker][master] Reserve DLA-4684-1 for opam

Utkarsh Gupta (@utkarsh) utkarsh at debian.org
Wed Jul 15 01:59:42 BST 2026



Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
602361b0 by Utkarsh Gupta at 2026-07-15T06:29:37+05:30
Reserve DLA-4684-1 for opam

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[15 Jul 2026] DLA-4684-1 opam - security update
+	{CVE-2026-57825}
+	[bookworm] - opam 2.1.2-1+deb12u2
 [15 Jul 2026] DLA-4683-1 wolfssl - security update
 	{CVE-2026-5194 CVE-2026-6092 CVE-2026-6094 CVE-2026-6325 CVE-2026-6329 CVE-2026-6331 CVE-2026-6450 CVE-2026-6678 CVE-2026-6681 CVE-2026-6731 CVE-2026-7511 CVE-2026-55961 CVE-2026-55962 CVE-2026-55967}
 	[bookworm] - wolfssl 5.5.4-2+deb12u3


=====================================
data/dla-needed.txt
=====================================
@@ -510,11 +510,6 @@ nvidia-graphics-drivers/bullseye
 ocaml/bullseye
   NOTE: 20260419: Added by Front-Desk (rouca)
 --
-opam (utkarsh)
-  NOTE: 20260709: Added by Front-Desk (utkarsh)
-  NOTE: 20260709: CVE-2026-57825 symlink switch-prefix bypass (opamAction.ml); affects 2.x incl. bullseye/bookworm.
-  NOTE: 20260709: maintainer prepared update @ https://salsa.debian.org/ocaml-team/opam/-/tree/debian/bookworm.
---
 openexr
   NOTE: 20260413: Added by Front-Desk (rouca)
   NOTE: 20260713: Also add for bookworm (Beuc/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/602361b0bbfa0e5bfbb05c8e7d64f33584e5a350

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/602361b0bbfa0e5bfbb05c8e7d64f33584e5a350
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260715/32f17058/attachment.htm>


More information about the debian-security-tracker-commits mailing list