[Git][security-tracker-team/security-tracker][master] trixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ccc64abb by Moritz Muehlenhoff at 2026-11-04T19:24:14+01:00
trixie triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -21922,12 +21922,11 @@ CVE-2026-113496 (A flaw was found in cockpit-machines. When saving Virtual Netwo
 	NOTE: https://github.com/advisories/GHSA-vxhg-j5jv-qgqm
 	NOTE: Fixed by: https://github.com/cockpit-project/cockpit-machines/commit/e0d400eb32ef806bfcdda701608f8dc222cec2ab
 CVE-2026-113495 (A flaw was found in cockpit-machines. Red Hat Subscription Management  ...)
-	- cockpit-machines 360-1 (bug #1152782)
-	[trixie] - cockpit-machines <no-dsa> (Minor issue)
-	[bookworm] - cockpit-machines <postponed> (Minor issue, can be mitigated and then fixed with next release)
+	- cockpit-machines 360-1 (bug #1152782; unimportant)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2556057
 	NOTE: https://github.com/advisories/GHSA-rq8f-q9xv-wmhm
 	NOTE: Fixed by: https://github.com/cockpit-project/cockpit-machines/commit/b058e6872778d1ae362634b44463adf387ba49ea
+	NOTE: Not relevant on Debian systems
 CVE-2026-113469 (A failure has been identified in the SNS during dynamic data files sig ...)
 	NOT-FOR-US: SNS
 CVE-2026-113468 (The payment notification endpoint for PayPal accepts incoming data wit ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -137,6 +137,8 @@ podman
 --
 prometheus
 --
+puppet-agent (jmm)
+--
 py7zr
 --
 python-authlib
@@ -174,6 +176,8 @@ tomcat10
 --
 tomcat11
 --
+trapperkeeper-authorization-clojure (jmm)
+--
 weechat
   Upstream recommends to use branch from https://github.com/weechat/weechat/commits/4.6/, cf #1142597
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccc64abbe6d5bb423a7d27648a292d6a5aa884c0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ccc64abbe6d5bb423a7d27648a292d6a5aa884c0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/0a322722/attachment-0001.htm>