June 2026 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Mon Jun 1 01:25:28 BST 2026
Ending: Tue Jun 30 22:40:52 BST 2026
Messages: 1761

• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: add prometheus to dla-needed   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4611-1 for keystone   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] 4 commits: lts: mark CVE-2026-41150,CVE-2026-41159/node-mermaid as postponed   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4612-1 for sentry-python   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim xrdp   Abhijith PA ( at abhijith)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8796/libsereal-decoder-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4613-1 for python-aiohttp   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Swap FD duties with Emilio as discussed via IRC   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] rails: postponed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Correct upstream tag for commit for CVE-2026-41401   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: claim openvpn   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add two libusb-1.0 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48501/GitHub CLI (gh)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] older symfony non issue fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44825/lucene-solr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48827/mina   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-35563/apache-directory-api   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate CVE-2018-1337 with apache-directory-api   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFus   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add upstream tags for fastnetmon 1.2.9   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41570   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new qemu issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new kas issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add commit references for qemu issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] various rust-coreutils issues fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41440/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] rsync ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] pygments ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41439/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] neutron spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lwip spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] pymatgen ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41438/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41437/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41436/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFU CVE-2026-49328 Apache Fesod   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-41435/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-8341/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-45192/airflow   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] 2 commits: trixie/bookworm triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Some CVEs need re-evaluation, node-systeminformation is packaged   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add one more CVE-less Dulwich issue and commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lts: claim yelp   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Add Debian bug reference for CVE-2026-8796   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Review first batch of CVES for node-systeminformation   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Review second batch of node-systeminformation CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-8796 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Bump note for redis in dla-needed.txt.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] symfony DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gst-plugins-good1.0 DSA   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] gst-plugins-good1.0 DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46243   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libunicode-linebreak-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-44903/prometheus: introductory commit + bullseye not-affected (bookworm neither)   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for FastNetMon issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes on one rejected CVE   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Remove notes on one rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-45729/thorvg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: libcaca status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Process some Nextcloud server CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed 7zip update via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-44903/prometheus   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for rsync via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44740/go-billy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-43958/rrdtool   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-45104/mapserver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] twig triage for older suites   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-44227 n/a for RT4/5   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] netatalk fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new activemq issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mpd fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2026-44227 now that release info has been updated   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new xorg-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed pygments update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gpac issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new gpac issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10532/logback   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10275/OpenSC   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of assimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10118/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for sshfs-fuse via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-45249/echarts, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-37630/quickjs-ng   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA for yelp   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add AuthToken and RSS/iCal related changes for CVE-2026-44231   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Temporarily track yelp fixes until CVE assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Document Daniel is proposing to work on an update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take frr   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for xorg-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim sudo in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Take expat   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] python-filelock ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mbedtls spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] tomcat10 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] fastnetmon fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] xorg-server/xwayland fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new orthanc issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new whisper.cpp non issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new packagekit issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new node-babel7 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track as well golang-github-go-git-go-git-v6 for some recent CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track separate bug for xwayland issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove tailing whitespaces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed sshfs-fuse update via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one more CVE addressed by pytho-filelock bookworm-pu update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10118/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] php-twig DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] correct fixed version for php-twig DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new kafka issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove notes from two rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49943/bird   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-24122 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] krb5: CVE-2026-40355 and CVE-2026-40356   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Revert "krb5: CVE-2026-40355 and CVE-2026-40356"   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for poppler via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust source package name for golang-golang-x-net   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verison for golang-golang-x-net issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new firefox issues from mfsa2026-54   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox issues via unstable   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-pip via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49975/apache2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for advisories for libcpanel-json-xs-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add for now as well bird3 for CVE-2026-49943   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for apache2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new go issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-5422/jupyter-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some NFUsProcess some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-38978/transmission   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for one varnish issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50031/freeipmi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48682/fastnetmon   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new elixir-tesla issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new python-aiohttp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one issue in glpi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-5385/glpi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10650/libwebsockets   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-24712/cfengine3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add jupyterlab for node-systeminformation CVE   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add kind of embedding for node-systeminformation   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new python-django issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-django issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for freeipmi issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for python-aiohttp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for thorvg issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for varnish issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: prepare for bullseye+bookworm LTS during June 12th -> September 1st 2026   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48019/php-laravel-framework   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for apache2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ironic issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-41283/mistral   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3276/python   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for kas issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts-cve-triage.py: support package/dist entries   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Typo   Sylvain Beucler ( at beuc)
  • [Git][security-tracker-team/security-tracker][master] Typo   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6657/jupyter-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two issues in python-daphne   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in optee-os   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new glpi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new issues in libnet-cidr-set-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new okular issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ceph update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take popper from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add temporary entry for nginx issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-37459/frr   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8722 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed versionfor CVE-2026-50052/varnish via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust indentation   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for golang-github-xenolf-lego issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-38978/transmission   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for redis issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8829/libhtml-parser-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts-cve-triage.py: allow setting the target dists   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-5663/dcmtk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50219/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts-cve-triage.py: display defaults in --help   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] lts: bullseye triage   Emilio Pozuelo Monfort ( at pochu)
  • [Git][security-tracker-team/security-tracker][master] lts: bullseye triage   Emilio Pozuelo Monfort ( at pochu)
  • [Git][security-tracker-team/security-tracker][master] lts: bullseye triage   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-8829/ibhtml-parser-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4614-1 for sudo   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] claim exim4   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] claim gsasl   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Take xorg-server from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Record fact that Andreas is interested in providing an update for atril   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new gdal issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track new openstack related issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for edk2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update on mesa.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA for frr   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50292/libinput   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for neutron issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add announce reference for CVE-2026-8829   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46739/libnet-statsd-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46741 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for libnet-cidr-set-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take botan3 from dsa-needed   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add some commit references for CVE-2026-25243/redis   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Remove notes on CVE-2026-9642, which was withdrawn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add perl for CVE-2026-7010   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8916/rlottie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add cloned bugs for perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for neutron issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-7774/python   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for python-daphne issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for two radare2 issues via experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49837/gobgp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verison for two python-aiohttp issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-daphne issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-50219/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-1.25 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-1.26 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for thorvg issue fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rlottie issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new froxlor issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9496/npm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9358/node-css-loader   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim openssl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Two znuny CVEs assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50593/graphite2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVEs assigned for xorg-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47774/envoyproxy, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for radare2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for optee-os issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4615-1 for exim4   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add some NFUs in netty-incubator-codec-http   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new issues in golang-opentelemetry-otel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-40898/quic-go   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-37462/gobgp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-37460/frr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] claim haveged   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] 2 commits: NFU CVE-2026-34912 Revive Adserver   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] NFU Revive Adserver   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4616-1 for haveged   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] 3 commits: CVE-2020-28200/dovecot: Mark as ignored/too disruptive for bullseye   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4618-1 for gsasl   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] update notes   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Decouple some CVEs in DSA 6322-1/frr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim u-boot in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Track fixes via experimental for openbabel issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-6732/libxml2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version gdal issues via unstable uploads   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-49014/gdal   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new mina issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for rlottie issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA based rule for eltonika Networks CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9088/keycloak, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50589/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for CVE-2026-50265   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11332/ansible-core   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10879/libdbi-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-36499 with unclear upstream status/validity   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new issues in libxls   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new koha issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-41259/swupdate   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add new chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Postpone some perl updates   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial indication for work in progress on apache2 and nginx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts-cve-triage.py: typo   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add another product for Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-45409/python-idna   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-45300/async-http-client   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9698/libdbi-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10805/network-manager   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10796/nvm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10305/rlottie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10722/golang-github-cilium-ebpf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-60477/gpac   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10705/dask   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libdbi-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ironic issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for chromium via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10725/libprotocol-http2-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for okular issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-10725 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-43073   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for apache2 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for request-tracker5 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add libinput to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for perl issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark graphite2 as no-dsa for trixie and bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-39821/golang-golang-x-net   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-11332/ansible-core   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add apache2 dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-45409/python-idna   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-45300/async-http-client   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference or CVE-2026-11332   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for golang-opentelemetry-otel issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for quic-go issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10305   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-46739   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mina2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10722/golang-github-cilium-ebpf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10705/dask   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10650/libwebsockets   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10532/logback   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-35563   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10194/dcmtk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-9496/npm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-9358   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-24712   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed graphite2 update via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for ruby-css-parser via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4619-1 for tomcat9   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-0992/libxml2: Add reference to follow-up commits   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reassociate CVE-2025-68618 to src:weasyprint   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-15646/libhtml-gumbo-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-46739/libnet-statsd-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-40021/log4net fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in mariadb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2026-42859   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-10705 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take care of releasing DSA for nginx update prepared by maintainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-10650/libwebsockets   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4620-1 for apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2025-15646/libhtml-gumbo-perl as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-47430   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] dla: attribute request-tracker4 to its maintainer   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Adjust tracking for src:ansible for CVE-2026-11332   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10275/opensc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-6732   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take snapd   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for nginx update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Reserve DSA number for nginx update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for libxml2 via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for freeipmi issue fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for opensc issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for mutt issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for request-tracker4 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-8732/libxml2: Reference fixing commit   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4621-1 for glibc   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for two gitsign issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-44544/gittuf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt:update status of ruby-rack and ruby2.7   Abhijith PA ( at abhijith)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11487/neovim   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4622-1 for libxml2   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48977/openslide   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for network-manager issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4623-1 for jackson-core   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-6328-1 for tomcat10   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-6329-1 for tomcat11   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] allocate DSA for strongSwan   Yves-Alexis Perez ( at corsac)
• Processing 42ee1d80908f8b40b5d7fe6b9c55b9e3a5fd976e failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47895/strongswan   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim samba in dla-needed.txt   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] Take libdbi-perl from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2025-8732/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Document that sogo has a debdiff for review   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add okular to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ironic n/a for released suites   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add commit link for CVE-2026-23479/redis.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add commit link for CVE-2026-23631/redis.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Follow dsa and add dla-needed to libdbi-perl   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Follow dsa for libinput   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add sogo to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add apache-directory-api   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Triagge assimp bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Correct reference to commit for CVE-2026-25243   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tags for two redis upstream commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2020-37248/offlineimap3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-37248/offlineimap3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-47895/strongswan via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] keystone DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2021-36489/allegro4.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] track two keystones originally lined up for spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-10194/dcmtk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE-2026-50265   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add correct set of backport commits for libinput issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues for check-mk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-7186/check-mk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in routinator   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new apache2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48507/snipe-it, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-7774/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] cargo/bullseye triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dask/bullseye triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] etcd/bullseye triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] skanpage fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for apache2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add apache2 to dla needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4624-1 for openssl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Claim giflib   Arnaud Rebillout ( at arnaudr)
  • [Git][security-tracker-team/security-tracker][master] Claim giflib   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Update giflib, unclaim   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add reference to applied patch in 6.1.3-1 for CVE-2026-26740   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim dnsmasq   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] update CVE-2026-8328 commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9669   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new 389-ds issue   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new 389-ds issue   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new 389-ds issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update vmware rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11623/tmux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-9698   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2009-10007/libcatalyst-plugin-authentication-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Bump deb version for DLA-4624-1   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] new spring issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-28370/vitrage   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] php-guzzlehttp-psr7 spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new xen issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add one additional xen issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in openssl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] okular, mistral DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new issues in librabbitmq   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49839/jq   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for linux issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add openssl to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gdown spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libxpm, python3.13 spus   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Triagge freeipmi   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Claim libreoffice in dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for poppler update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-23479 in redis for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add openssl in bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-25243 in redis for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Remove redis/bullseye from dla-needed.txt; all CVEs properly triaged.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] Bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] bullseye triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] Bullseye triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] libcpanel-json-xs-perl/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for openssl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bullseye triagge   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add two issues in limesurvey, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in FreeSWITCH, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49762/elixir-lang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new 389-ds-base issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11526/libgd-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup rejected CVE   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10846/ldns   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new mongodb issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new mongodb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim openssl (again)   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Everpure CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-11526/libgd-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new debusine issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference mitigations for CVE-2025-10263 in src:linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for coturn issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4625-1 for dnsmasq   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] new sqlfluff issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new libspring-security-2.0-java issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for ldns issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2009-10007   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48019   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new onionshare issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for gimp via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for sqlfluff issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for openssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-5172/dnsmasq: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] vitrage spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] horizon spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libtemplate-perl/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add reference for ITScape for CVE-2026-46316   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ldns issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-29167/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-29170/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-34356/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-42535/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53689/libnfs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-42536/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add new issues in ghidra, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-34355/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-44119/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add some new erlang issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new ghidra issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11884/389-ds-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-6336-1 for jackson-core   Markus Koschany ( at apo)
• [Git][security-tracker-team/security-tracker][master] skanpage spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] followup fix for CVE-2026-6019   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] xen eol for bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dla needed async-http-client   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-44185/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] apache2 commit   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] rclone commit refs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-48913/apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Claim libinput in dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-34182/openssl: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Track fixed version fro some python3.14 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python3.13 issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libdbi-perl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to reported openssl issue for CVE fixes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libinput update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-42770/openssl: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-44028   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-45445/openssl: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add new dracut issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10143/python-kafka   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new ansible issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-45446/openssl: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] claim asterisk   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-45767/openssl: bullseye not-affected   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add information for CVE-2026-32836/libchdr   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] elixir-lang fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] postfix spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] qemu spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mark CVE-2026-11460 as bogus, usual VulDB junk   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libcrypt-urandom-perl spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add reference for CVE-2025-40214   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add reference for CVE-2026-43494   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] ironic, neutron DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Sync upstream tag for CVE-2026-5172   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Unify notes for apache2 entries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for onionshare issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2026-7930   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup two rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gitlab issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9648/haskell-crypton-x509-validation   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-5497/vllm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new vim issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new vim issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new vim issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add librabbitmq to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for one dulwich issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add missing 'explanation' for end-of-life tag   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add ansible to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] add jq to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add libgd-perl to dla-nedeed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50127/weblate, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new issues in rust-russh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add pyhton-aiolib to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Re-associate old rust-russh issues which were marked NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more rust-russh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 8 commits: add-dsa-needed: Only list packages for stable for dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update dsa-needed to remove boomworm-specific entries and claim librabbitmq and jpeg-xl   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] apache2 spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dcmtk spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-50572 with maintainers input   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add dla-needed imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add dracut to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add libheif to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4626-1 for libinput   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-6893/dracut   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-russh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for erlang issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-9648   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for vim issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libnfs issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53701/gst-plugins-bad1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53702/gst-plugins-bad1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: drop bin/contact-maintainers and templates   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] trixie / imagemagick triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] cvelist.el: Update default distro   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new chromium issues / NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add gitlab   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new netty issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] two uriparser issues fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Ping CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] apache2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] three rlottie issues fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new krb5 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Reserve DLA-4627-1 for kernel-wedge/bookworm   Ben Hutchings ( at benh)
• [Git][security-tracker-team/security-tracker][master] new node-axios issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49982/node-tmp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to commit for CVE-2026-49982   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two node-tmp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference full commit hash for CVE-2026-11850   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] apache2 ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add explanation for end-of-life entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add a note for libio-compress-perl   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add two new squid issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tags for squid issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new node-js-cookie issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim libgd-perl.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim cockpit.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-46625   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-44705   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim async-http-client.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add p7zip to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add libnfs to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add libvnc to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4629-1 for apache2   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add gst-plugins-bad1.0 to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] jpeg-xl, librabbitmq DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for erlang issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libcrypt-pbkdf2-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: p7zip status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2017-20240/libcrypt-pbkdf2-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libcrypt-pbkdf2-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add commit references for libcrypt-pbkdf2-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add python-oslo.messaging to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add new mattermost-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of netty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add a note about dracut in dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48914/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of netty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44967/opentelemetry-cpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3433 for mattermost-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-48733   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for two python-kafka issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add libcrypt-pbkdf2-perl to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-11623/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] add mistral to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-46529/atril   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new pyo issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-postgres-protocol issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-diesel issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libcrypt-pbkdf2-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix a couple of copy-paste typos of mine while triaging imagemagick CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new kitty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libcrypt-pbkdf2-perl via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add a note on dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for kitty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: bookworm LTS handover, sync from data/dsa-needed.txt   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libcrypt-pbkdf2-perl via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-11933   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: dla: drop bookworm EOL'd packages   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: drop mimetex/bookworm (EOL)   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] dla: smb4k bookworm EOL   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] bookworm EOL   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for assimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: add the usual warning about OSPU conflict   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openimageio issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for netty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-11837/ansible   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: reference current upload status   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Bookworm triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add dulwich to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add pgjave to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libhtml-parser-perl via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for okular via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-kafka fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for kitty issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48914/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-44393   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libhtml-parser-perl via bookworm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mutt spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] isc-kea spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add libhtml-parser-perl to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-41579/runc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new rust-http-types issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new gpac issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new gpac issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new gpac issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new gpac issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new node-form-data issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new sqlite3 issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new docker.io issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new redmine issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rabbitmq issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add libhttp-daemon-perl to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for docker.io issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-http-types issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for node-form-data issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for sqlite3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for docker.io issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] sqlite3 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-53462/trixie   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] new rust-pyo3 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new ironic issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one new NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new rust-tokio-postgres issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for debusine via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix version for CVE-2026-4285{0,1}/kitty   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove trailing whitespaces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add kitty to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annotate that Bastien Roucaries will prepare imagemagick updates   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48977   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-11487   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-41579/runc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for shiro issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add packages to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] dcmtk ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libnet-cidr-set-perl spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Fix small typos in NOTE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-48977 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-tokio-postgres issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-pyo3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-54421   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11527/libconfig-inifiles-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openssl issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gpac/bullseye   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add lxml to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] sqlite3 LTS triagge   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add bookworm pu note about libhtml-parser-perl   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4630-1 for openssl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker] Deleted branch users/roberto/rmadison_review-update-needed   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-11527 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-11487/neovim   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in tag   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] pyjwt commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] alsa-lib fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-43618/rsync: reference fix and regression fix   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] review-update-needed: document script purpose   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54411/pam   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] nasm references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] golang-golang-x-net fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] weasyprint fixed in sid and new issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] u-boot fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] horizon fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new golang-sslmate-src-go-pkcs12 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] erlang-hex fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12205/libcrypt-dsa-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-11527   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Reference for CVE-2026-11526/libgd-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate libvncserver issue with CVE-2026-50538   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add note for postgresql-13   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Claim bind9 in dla-needed.txt   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] mark CVE-2026-40892 as not-affected for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] mark CVE-2026-41416 as not-affected for Bullseye   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Bump fixed version for CVE-2026-48977/openslide   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-42500/golang-golang-x-image   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to upstream issue for CVE-2026-11837   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust one CVE for mutt update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for three libreoffice issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more libreoffice issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47777/mastodon, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libgd-perl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] libreoffice, bird2 DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] giflib spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for golang-sslmate-src-go-pkcs12 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libcrypt-dsa-perl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 5 commits: LTS: add rsync to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libcrypt-dsa-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11832 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12087/{perl,libsocket-perl}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-10294   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 4 commits: fix libreoffice version info for sid; add not-affected for CVEs not affecting...   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for perl in dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53705/gst-plugins-good1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-52717/gst-libav1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim atril/bookworm in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Add one missing source package for CVE-2026-52717   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-52718   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-52719/gst-plugins-bad1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-53702   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-5370{3,4}/gst-plugins-ugly1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gsasl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference pull request for ansible.posix collections module issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new duktape issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new gst-plugins-bad1.0 issues / NFU   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50890/grocy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47261/rust-wasmtime   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new gst-plugins-good1.0 issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-47261/rust-wasmtime   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] claim rsync   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] new gstreamer issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-50538   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two gst-plugins-bad1.0 issues fixed with 1.28.4-1 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] rust-wasmtime fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4631-1 for asterisk   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10649/pacemaker   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46448/nova   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12087/perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2026-5271{7,8}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-54421/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gsasl DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new libidn issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update CVEs for osticket   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4632-1 for atril   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Add firefox issues from mfsa2026-57   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add firefox-esr and thunderbird to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] dla: update bookworm-related warnings   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add new firefox-esr issues from mfsa2026-58   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-33637/ruby-faraday via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new imagemagick issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ocaml issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add thunderbird issues for thunderbird from mfsa2026-61   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-46242   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via bookworm for CVE-2024-56647   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: okular: postpone vulnerabilities without CVE ID for bullseye   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox-esr issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for packagekit issue fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for imagemagick issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add CVE-2026-36849/tiff   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tracking of ironic in CVE-2026-43003   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-54411/pam   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-46173   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53612/util-linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53613/util-linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53614/util-linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53615/util-linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-10649/pacemaker   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-54411/pam   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for docker.io issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commits for util-linux issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for util-linux issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] five chromium issues rejected   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new virtualbox issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mysql issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lts: take firefox-esr and thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new chromium issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new chromium issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] cfengine3 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for cfengine3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verison for CVE-2021-41556 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4633-1 for libreoffice/bookworm   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47178/libheif   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-47178   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for libvncserver issues via point releases   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for util-linux issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for atril update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] firefox-esr DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Claim libconfig-inifiles-perl in dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-55748/horizon   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libtasn1-6 via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for thunderbird issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-undici issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for tiff issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-ecdsa spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add notes about u-boot to dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4634-1 for nginx/bookworm   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Add note for gdcm.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-52717/gst-libav1.0: mark bullseye,bookworm not-affected   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] LTS: add pacemaker to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8484/jansi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-49268/shiro   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] NFU CVE-2026-49050 Apache DolphinScheduler   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-12003 references   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] Process two firefox issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50889/lldap   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove todo item for CVE-2026-49268   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mark CVE-2026-11850 as a non issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rust-imageproc fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new nginx issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] one more nginx issue affecting sid only   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Cleanup one Kernel CNA rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup some more rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new python non issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55202/tinyproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libssh2 issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add two new libssh2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add two new tinyproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48990/joserfc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new shaarli issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add nginx to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] new rust-git2 issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Claim vim   Lee Garrett ( at lgarrett)
• [Git][security-tracker-team/security-tracker][master] Annotate that Lee Garrett is interested in contributing vim update for stable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48988/node-markdown-it   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48818/starlette   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48817/starlette   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9692 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for shaarli issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for tinyproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48988/node-markdown-it   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8461/ffmpeg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new webmin issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55392/nilfs-tools   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new haproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50141/woodpecker, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48779/node-ws   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48157/php-slim   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nodejs issues from june release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for advisories for nginx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to advisory for CVE-2026-42530   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for squirrel3 via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for glibc issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-11332 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-28348/CVE-2026-28350: lxml-html-clean was part of lxml before trixie   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] LTS: add util-linux to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] LTS: add jpeg-xl to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Add DSA entry for thunderbird   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add DSA entry for chroimum   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: also add expat/bookworm in dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-42530/nginx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for nginx issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for nodejs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one additional whitespace   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track two more CVEs as fixed in unstable upload for nodejs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove some temporary trackings for only unfixed experimental status   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-43003 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for tiff issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nilfs-tools issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55766/php-guzzlehttp-psr7   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for node-undici issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] carrierwave still in older distros   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new coturn issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more expat issues open and pending for 2.8.2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new openexr issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4635-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4636-1 for thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-67713/miniflux does not affect trixie   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] new nltk issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new cifs-utils issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new 389-ds-base issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new libzypp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] cowlib fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Cleanup trailing whitespace   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove fixed versions for CVE-2026-45852   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] nodejs commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] php-guzzlehttp-psr7 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new containerd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for containerd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-15661/libssh2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for expat issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nf: Extend Eclipse rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mxml spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lxml-html-clean spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-52908/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] krb5 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libssh2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new php-guzzlehttp-guzzle issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct source package name for guzzle   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for unstable for some linux CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gst-libav1.0 DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libconfig-inifiles-perl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for containerd fixes via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-8466 via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2026-9648   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4637-1 for libconfig-inifiles-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new aom issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49271/libheif   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12706/ffmpeg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-70102/dhcpcd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-56814/opencpn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two nginx issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] take gst-plugins-good1.0   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-37248/offlineimap3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark ruby-carrierwave as removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2025-67713   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2026-12528   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for ansible-core via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12505/cifs-utils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9375/python-urllib3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9265/libcrypt-openssl-pkcs12-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new lissues in libde265   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49342/yard   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new issues in proxysql, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-9265/libcrypt-openssl-pkcs12-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-9375/python-urllib3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for aom issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48779/node-ws   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for haproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libde265 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for miniupnpd via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-undici issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-48779/node-ws   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for nbconvert via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for opencc via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-71379/vllm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54604/openslide   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for poco via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-49219/imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Claim libhttp-daemon-perl in dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libcrypt-openssl-pkcs12-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVE from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-39199/libretro-snes9x   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-53461/imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-53462/imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Ignore CVE-2026-54604 for openslide in trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mesa spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] php-guzzlehttp-psr7 spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-49271/libheif   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-39199/libretro-snes9x   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12528   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12199/nltk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12216/duktape   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-1836/redmine   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-11623   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4638-1 for libgd-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DLA-4591-1,DSA-6282-1/rsync: reference missing CVEs   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] imagemagick DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add SPU bug references for mesa -- I'm going to wait for feedback on those...   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] pillow DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] protobuf fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for libhttp-daemon-perl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4639-1 for libhttp-daemon-perl   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] LTS: add containerd to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] squid DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] openslide spu/ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mesa ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] psd-tools spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] alsa-lib spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track missed fixed version for one containerd issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Restore source package name for CVE-2024-27004   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new (older) imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new CVEs for expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more expat issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] one coturn issue unfixed in sid, advisory seems wrong   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4640-1 for mediawiki   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reference followup for CVE-2026-46447/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ironic issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-47729/squid   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] fixed in sid rust-postgres-protocol   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12805/dcmtk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] nova fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commits for CVE-2026-10649   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-34591/poetry via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libdbi-perl and libtext-csv-xs-perl in dla-needed.txt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] pupnp spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new lemonldap-ng issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new pdfkit issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for pymdown-extensions   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libxml2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for pyopenssl via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for expat issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11373 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: claim nginx   Lucas Kanashiro ( at kanashiro)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ffmpeg issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-12804   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-12805/dcmtk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-43994/coturn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for xorg-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes on rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ffmpeg DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Process some mattermost-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9029/grafana   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56109/alsa-lib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new starlette issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54293/nltk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage nodejs for LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add new python-aiohttp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one mattermost-server issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one more NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ffmpeg triage for 7.1   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new python-multipart issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two issues in node-protobufjs, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53655/node-tar   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53571/node-vite, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2026-7246/python-click   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-9733 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new openssh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new vllm issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-12805/dcmtk via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55599/phpseclib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-55599   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ujson issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of pypdf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new vllm issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48712/node-protobufjs, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-41479/python-authlib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44889/python-webob   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-41523/vllm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] jupyter-server fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-55748 in horizon for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Track some new angular.js issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gst-plugins-bad1.0 DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50221/swift   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-pyramid ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55556   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-urllib3 DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-57063/libidn assignment   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-26740/giflib - add upstream patch reference.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-56968/gsasl assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11940/python   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for optee-os via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44517/golang-github-containers-buildah   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Unify comments for note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-57062/gnupg2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4641-1 for beets   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new dhcpcd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54257/electron   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for starlette issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-54911/ujson   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for pypdf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-multipart issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add kamailio commit reference   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4642-1 for u-boot   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4643-1 for imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add a note for node-lodash   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] LTS: take nginx from kanashiro   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-57062/gnupg2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference commit for CVE-2026-57062/gnupg2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48785/apptainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12064/curl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-48785/apptainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add first batch of new curl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of curl issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add another batch of curl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-47215/singularity-container   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Traefik issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56785/flatpress   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new libslirp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2026-9539   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-48493/snipe-it   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new jackson-databind issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for two gst-plugins-bad1.0 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new caddy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new yt-dlp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two dnsmasq issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-qs via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix moved from experimental to unstable for CVE-2026-42338   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-9358 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-12143/node-form-data   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-45149 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-44705/node-tar via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed udpate for u-boot via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-dynaconf spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python-daphne fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4644-1 for libmatio   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4645-1 for cloud-init   Noah Meyerhans ( at noahm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-50221/swift   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct the cloud-init DLA ID   Noah Meyerhans ( at noahm)
• [Git][security-tracker-team/security-tracker][master] Revert "Correct the cloud-init DLA ID"   Noah Meyerhans ( at noahm)
• [Git][security-tracker-team/security-tracker][master] Track proposed node-tar update via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-53550/node-js-yaml   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Re-associate an older node-js-yaml issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-50193/jackson-databind   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-44727/Jupyter-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for some docker.io issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4646-1 for postgresql-13   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] swift fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] node-tar fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add squid references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Grafana   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-35025/proftpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54297/ruby-faraday   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-6472: Mark as not-affected   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add new ruby-concurrent issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new ghost issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new libsoup issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-49980/rclone   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49851/mistune   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new imagemagick issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in reference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new jellyfin-server issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-42450/opencolorio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] one openssh n/a for Debian   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Grafana rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4647-1 for yelp   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] lts: mark yelp sandbox escape issue as fixed in version 3.38.3-1+deb11u2   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libssh2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-js-yaml issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-49356/node-babel7   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Move mariadb to no-dsa after maintainer's feedback   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track rpoposed python-memray via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Mastodon issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-40079/cacti   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new cacti issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new cacti issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add four more cacti issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] NFU Apache Kvrocks   Henri Salo ( at hsalo-guest)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-45409/python-idna via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-39373/python-jwcrypto   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-68480/python-marshmallow   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54548/kas   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new pdns issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gopls fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new pdns-rec issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-53655   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new dnsdist issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add note for sogo.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage libssh2 for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] libssh2, sogo DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4648-1 for libtext-csv-xs-perl   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] LTS: claim python-urllib3 in dla-needed.txt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12844/liblist-someutils-xs-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nsd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional commit reference from upper branch for CVE-2026-39863   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-2443: Add relation note for CVE-2026-12549   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] pdns, pdns-rec, dnsdist DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new Keycloak issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some more vim issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55520/python-protego   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for expat issues in 2.8.2 release upstream   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix indentation for one vim CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ruby-nokogiri issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rtklib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56790/canboat, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56774/kanboard   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues for pnpm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55693/vim   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two issues for trivy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54679/jq   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new glances issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new znuny issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-9375/python-urllib3: Triage for bookworm and bullseye   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for ruby-nokogiri issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rtklib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for dhcpcd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4649-1 for libdbi-perl   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4650-1 for giflib   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] new incus/lxd issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add incus advisories   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Deassociate CVE-2026-56115 from dhcpcd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] incus commit refs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for kanboard issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for vim issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for caddy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new python issue   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new python issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new batch of wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Some more wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in bitwarden   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove typos in notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new logback issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4651-1 for python-urllib3   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] new node-shell-quote issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new geary issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new py7zr   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11625/libbytes-random-secure-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11702 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] remove lxd CVEs from Incus issues, these get different CVEs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] data/CVE/list: Add patch link to gdcm CVEs.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-11625 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-11940 & CVE-2026-0864 in python2.7 for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2025-55639 in gpac for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libbytes-random-secure-perl via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for gdcm issues via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for dhcpcd via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via experimental for haproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libslirp via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for asterisk issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-6658/nbconvert   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-5757/ollama, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-57918/libnfs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-57527/zaproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-57231/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new envoyproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56876/node-extract-zip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55686/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55677/golang-github-labstack-echo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-4339/mattermost-server, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56123/socat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for wolfssl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference or CVE-2026-49356/node-babel7   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4652-1 for gdcm   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for cacti issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2026-42005/pdns   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for two haproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-49980/rclone   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-13311   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust upstream tag for CVE-2026-3650/gdcm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4653-1 for openvpn   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libhtml-parser-perl and libraw in dla-needed.txt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-11623/tmux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two lxd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new golang-golang-x-image issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: auto-nfu: Add another product covered for the Apache CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] util-linux updates in the work by maintainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-71382/mupdf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for xorg-server update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Shift assigned xorg-server DSA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add incus entry for DSA 6370-1   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove no-dsa tagged entry for CVE-2026-48756   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove incus entry from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add commit reference for CVE-2026-6068/nasm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-41526/kf6-kcoreaddons via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Mark libnet-cidr-lite-perl issues as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Flowise   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Trellix rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-8177 as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2026-39199 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track libxml-libxml-perl updates via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tor to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tracking for dhcpcd update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for xz-utils via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-11625 in libbytes-random-secure-perl for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] new libass issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] take tor   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lts: take chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4654-1 for chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for python-idna via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for python-jwcrypto via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track two more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed libass update via trixie-pu and identify issues via GHSA temporarily   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29509/patool   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-28385/lxd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56770/python-libais   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for nginx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new tor issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] deassociate CVE-2026-48756 with lxd, this is tracked as CVE-2026-9639 for lxd   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add lxd references, thanks to Mathias Gibbens   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] giflib ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] one more dhcpcd issue fixed in spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mariadb spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mariadb ospu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Tenable rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new shiro issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for pdns-recursor issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for qemu via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new qemu issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit and tag in v11.0.2 release for CVE-2026-48914   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-48002   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-48003   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-48004   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-48915   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream references for CVE-2026-6425   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-8343/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nmap issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nghttp2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4655-1 for libhtml-parser-perl   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-58053/gitea   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-58049/ffmepg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-48915/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-44517 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for python-marshmallow trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-57918/libnfs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct tracking for CVE-2025-11226   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nmap issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nghttp2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for golang-golang-x-image issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for node-shell-quote issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for logback issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libsoup3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-shell-quote issue fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update via trixie-pu for qemu update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] tor DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lxd DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-56379/imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] lts: claim aiohttp   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-12479 in keras for bullseye LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-45852   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track temporarily python-xmltodict change in experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-48988   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-urllib3 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for python-virtualenv via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-54277/python-aiohttp as not affecting Trixie and earlier   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add temporary entry for linuxcnc issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new antlr4 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13490/glpi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-22879/vtk-dicom   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track Linux mitigations for CVE-2025-10263   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for CVE-2026-34155/rauc via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-54278/python-aiohttp as not affecting Trixie and earlier   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4656-1 for tor   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Fix typos in notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add notes about CVE-2026-54273/python-aiohttp   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add note for bind9   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for ruby-nokogiri issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fixup some CVEs for Linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two virtuoso-opensource issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some new virtuoso-opensource issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] one more python-urllib3 issue fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add qemu upstream reference   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add linux reference   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add ruby3.3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gstreamer triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add upstream tags for openCryptoki issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two opencryptoki issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-46215   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] iAdd attr and acl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim sogo.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-46445, CVE-2026-46446, CVE-2025-71276, CVE-2026-33550,...   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4657-1 for sogo   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for linuxcnc via {trixie,bookworm}-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new spice-vdagent issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11979/libxml2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-45300 in async-http-client for LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add two new libjavascript-minifier-xs-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13593/libcss-minifier-xs-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for acl and attr issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup one rejected CVE   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13757/p11-kit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026--13601/yelp assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Claim libssh2 in dla-needed.txt   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13595/util-linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-12912/tiff   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new gzip issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-4802 in cockpit for LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add patch link for CVE-2026-30997   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] 5 commits: lts: add cacti to dla-needed   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-46242   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-58302/linuxcnc assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to upstream commit for CVE-2026-11837   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-543{69,70,71}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add metacpan reference for CVE-2026-12844   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13758/libcryptx-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-37555/libsndfile   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-13593 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libjavascript-minifier-xs-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-12318/nss   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-25707/libzypp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13676/node-ajv   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13523/gpac   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tomcat11 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tomcat10 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tomcat9 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55957/tomcat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes on two now rejected originally open-webui CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] two bogus CVEs for llvm, the usual VulDB noise   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Eclipse rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new angular issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new graphicsmagick issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rpm issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new spice-vdagent issue (n/a)   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] requests fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] one unimportant ffmpeg issue fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libhtml-gumpo-perl via bookworm-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add four new issues in Net::BitTorrent   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove trailing whitespaces in note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13766 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend rule for Grafana   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mruby fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python-xmltodict fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim librabbitmq.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add note re. librabbitmq.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4658-1 for librabbitmq   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4659-1 for debian-security-support   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-56109/alsa-lib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: webkit2gtk is EOL in bullseye   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-34450/rtl-433: Link to commit in upstream repo   Adrian Bunk ( at bunk)
• [Git][security-tracker-team/security-tracker][master] first batch of mediawiki issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-14164/libarchive   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] more mediawiki issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rtl-433 spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-14164/libarchive   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for glib2.0 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for glib2.0 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-54276   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-54273 as ignored for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Weaken assessment for CVE-2026-54278   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference additional commits for bind9 issues from v9.20.23 tagged verison   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-30997   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-13757/p11-kit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim jq in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-543{69,70,71}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] glibc spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add warning for CVE-2026-54369   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] buildah spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-58374/wpa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Adjust some older CVEs for woodpecker   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add two new issues in seaweedfs, itp'ed   Salvatore Bonaccorso ( at carnil)

Last message date: Tue Jun 30 22:40:52 BST 2026
Archived on: Tue Jun 30 22:40:55 BST 2026

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...