[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add inetutils to dla-needed.txt
Carlos Henrique Lima Melara (@charles)
gitlab at salsa.debian.org
Mon Mar 23 02:01:10 GMT 2026
Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5935ce8a by Carlos Henrique Lima Melara at 2026-03-22T22:33:05-03:00
LTS: add inetutils to dla-needed.txt
- - - - -
f546dacc by Carlos Henrique Lima Melara at 2026-03-22T22:58:19-03:00
LTS: add libxml-parser-perl to dla-needed.txt
- - - - -
1 changed file:
- data/dla-needed.txt
Changes:
=====================================
data/dla-needed.txt
=====================================
@@ -173,6 +173,10 @@ imagemagick (rouca)
NOTE: 20260228: In dsa-needed, coordinate with secteam (charles)
NOTE: 20260311: made a partial release (rouca)
--
+inetutils
+ NOTE: 20260322: Added by Front-Desk (charles)
+ NOTE: 20260322: In dsa-needed, coordinate with secteam (charles)
+--
jackson-core (Markus Koschany)
NOTE: 20250707: Added by Front-Desk (apo)
NOTE: 20251016: A single patch is not possible to apply to fix the CVE. I'm working on backporting more than one.
@@ -232,6 +236,12 @@ libstb (abhijith)
NOTE: 20251206: try to fix other CVEs and help with PU if needed (rouca/front-desk)
NOTE: 20260226: Fixed CVE-2021-28021 CVE-2021-37789 CVE-2021-42715 CVE-2022-28041 CVE-2022-28042 with DLA-4493-1 (abhijith)
--
+libxml-parser-perl
+ NOTE: 20260322: Added by Front-Desk (charles)
+ NOTE: 20260322: In dsa-needed, coordinate with secteam. CVE-2006-10002 only
+ NOTE: 20260322: affects elts. Patches for both CVEs were lost in the source
+ NOTE: 20260322: format 1.0 to 3.0 in 2.40-1, 2.36-1.1 has the patches. (charles)
+--
libxmltok
NOTE: 20250421: Added by Front-Desk (ta)
NOTE: 20250421: Also review all other expat CVEs. (bunk)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b821f4c4e262c8ac56068f0570c89c60eaaafea4...f546dacc02cf0f3d5df39eba8fccce14490391fd
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b821f4c4e262c8ac56068f0570c89c60eaaafea4...f546dacc02cf0f3d5df39eba8fccce14490391fd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260323/40439b1c/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list