[Git][security-tracker-team/security-tracker][master] teixie triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2094e26e by Moritz Muehlenhoff at 2026-10-07T14:45:24+02:00
teixie triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -3035,18 +3035,25 @@ CVE-2026-59788 (The email media type OAuth form passes the Authorization endpoin
 	NOTE: https://support.zabbix.com/browse/ZBX-28198
 CVE-2026-59787 (The Perl SNMP trap receiver script shipped with Zabbix does not proper ...)
 	- zabbix 1:7.0.29+dfsg-1
+	[trixie] - zabbix <no-dsa> (Minor issue)
 	NOTE: https://support.zabbix.com/browse/ZBX-28197
 CVE-2026-59786 (Zabbix Server and Proxy accept the active agent heartbeat message rega ...)
 	- zabbix 1:7.0.29+dfsg-1
+	[trixie] - zabbix <no-dsa> (Minor issue)
 	NOTE: https://support.zabbix.com/browse/ZBX-28196
 CVE-2026-59785 (Host search in Frontend allows filtering by fields that are not displa ...)
 	- zabbix 1:7.0.29+dfsg-1
+	[trixie] - zabbix <ignored> (The WEB UI is only supported for access by trusted users, no security updates issued for it, #1124558)
+	[bookworm] - zabbix <ignored> (The WEB UI is only supported for access by trusted users, no security updates issued for it, #1124558)
 	NOTE: https://support.zabbix.com/browse/ZBX-28195
 CVE-2026-59783 (The Zabbix Server/Proxy has a vulnerability where binary items can cra ...)
 	- zabbix 1:7.0.29+dfsg-1
+	[trixie] - zabbix <no-dsa> (Minor issue)
 	NOTE: https://support.zabbix.com/browse/ZBX-28194
 CVE-2026-59782 (The JavaScript preprocessing (Duktape) engine on Zabbix server has a v ...)
 	- zabbix 1:7.0.29+dfsg-1
+	[trixie] - zabbix <ignored> (The WEB UI is only supported for access by trusted users, no security updates issued for it, #1124558)
+	[bookworm] - zabbix <ignored> (The WEB UI is only supported for access by trusted users, no security updates issued for it, #1124558)
 	NOTE: https://support.zabbix.com/browse/ZBX-28193
 CVE-2026-58880 (In handle_app_val_response of btif_rc.cc, there is a possible way to a ...)
 	NOT-FOR-US: Android


=====================================
data/dsa-needed.txt
=====================================
@@ -59,11 +59,13 @@ freerdp3 (jmm)
 gegl (jmm)
   move to 0.4.72
 --
+ghostscript (carnil)
+--
 gnocchi
 --
 graphicsmagick
 --
-gst-plugins-good1.0
+gst-plugins-good1.0 (jmm)
 --
 hplip
   security patches first need to be isolated
@@ -186,6 +188,8 @@ vips
 weechat
   Upstream recommends to use branch from https://github.com/weechat/weechat/commits/4.6/, cf #1142597
 --
+xorg-server
+--
 xz-utils (carnil)
 --
 zlib (carnil)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2094e26e7098af75bd8bb37ab08281fc7e0475bc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2094e26e7098af75bd8bb37ab08281fc7e0475bc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/469ecf8b/attachment-0001.htm>