[Git][security-tracker-team/security-tracker][master] Add dla-needed

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
04bccede by Bastien Roucariès at 2026-10-07T00:07:40+02:00
Add dla-needed

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -67,6 +67,9 @@ apache2
   NOTE: 20261002: step with trixie: secteam waits a grace period for 2.4.69
   NOTE: 20261002: regressions before the DSA. (utkarsh/front-desk)
 --
+arm-trusted-firmware
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 bind9 (rouca)
   NOTE: 20260917: Added by Front-Desk (Beuc)
   NOTE: 20260917: Upcoming DSA (Beuc/front-desk)
@@ -187,6 +190,9 @@ exim4
   NOTE: 20260724: local privesc, exim <=4.99.4 affected, fixed in 4.99.5
   NOTE: 20260724: EXIM-Security-2026-06-22.1 (High) and .3 (Medium) (utkarsh/front-desk)
 --
+expat
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 ffmpeg
   NOTE: 20260710: Added by Front-Desk (utkarsh)
   NOTE: 20260710: CVE-2026-12706: heap UAF in RASC decoder. Fixed in bookworm/trixie/sid
@@ -253,6 +259,9 @@ glibc
   NOTE: 20260919: Added by Front-Desk (Beuc)
   NOTE: 20260918: At minimum, follow Debian 13.7 (2 CVEs) (Beuc/front-desk)
 --
+gnocchi
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 graphicsmagick
   NOTE: 20260925: Added by Front-Desk (ta)
 --
@@ -364,6 +373,9 @@ libreswan
   NOTE: 20260611: bookworm LTS handover.
   NOTE: 20260611: Sync with maintainer (dkg), hard to test.
 --
+librsvg
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 libsoup2.4
   NOTE: 20250408: Added by Front-Desk (Beuc)
   NOTE: 20250427: libsoup2.4 2.72.0-2+deb11u2 (bullseye) uploaded ...
@@ -441,6 +453,12 @@ mediawiki
 mistral
   NOTE: 20260612: Added by Front-Desk (rouca)
 --
+modsecurity
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
+modsecurity-apache
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 mongo-c-driver
   NOTE: 20260915: Added by Front-Desk (Beuc)
   NOTE: 20260915: Follow trixie 13.7 (1 CVEs)
@@ -621,9 +639,15 @@ python-aiohttp (dleidert)
 python-asyncssh
   NOTE: 20260806: Added by Front-Desk (rouca)
 --
+python-authlib
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 python-cryptography
   NOTE: 20260805: Added by Front-Desk (rouca)
 --
+python-django
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 python-eventlet
   NOTE: 20260718: Added by Front-Desk (Beuc)
   NOTE: 20260718: 1 CVE fixed in both bullseye and trixie (Beuc/front-desk)
@@ -723,6 +747,9 @@ sabnzbdplus
 samba (Markus Koschany)
   NOTE: 20260809: Added by Front-Desk (rouca)
 --
+shaarli
+  NOTE: 20261007: Added by Front-Desk (rouca)
+--
 shiro
   NOTE: 20260726: Added by Front-Desk (utkarsh)
   NOTE: 20260726: CVE-2026-56091: SimpleFilterChainResolver in shiro-guice



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04bccede621eeb18ea5f9a29a4948db35473170c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/04bccede621eeb18ea5f9a29a4948db35473170c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/6813e51c/attachment-0001.htm>