[Git][security-tracker-team/security-tracker][master] Reserve DLA-4830-1 for twitter-bootstrap3

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a1a11db5 by Bastien Roucariès at 2026-10-08T23:55:07+02:00
Reserve DLA-4830-1 for twitter-bootstrap3

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -298463,7 +298463,6 @@ CVE-2025-1647 (Improper Neutralization of Input During Web Page Generation (XSS
 	{DLA-4204-1}
 	- twitter-bootstrap4 <not-affected> (Only affects 3.x)
 	- twitter-bootstrap3 3.4.1+dfsg-5 (bug #1105899)
-	[bookworm] - twitter-bootstrap3 <no-dsa> (Minor issue)
 	NOTE: https://www.herodevs.com/vulnerability-directory/cve-2025-1647
 CVE-2024-56006 (Missing Authorization vulnerability in Automattic Jetpack Debug Tools. ...)
 	NOT-FOR-US: WordPress plugin or theme


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Oct 2026] DLA-4830-1 twitter-bootstrap3 - security update
+	{CVE-2025-1647}
+	[bookworm] - twitter-bootstrap3 3.4.1+dfsg-3+deb12u2
 [08 Oct 2026] DLA-4829-1 rails - security update
 	{CVE-2026-33168 CVE-2026-33169 CVE-2026-33170 CVE-2026-33173 CVE-2026-33176 CVE-2026-33195 CVE-2026-33202 CVE-2026-66066}
 	[bookworm] - rails 2:6.1.7.10+dfsg-1~deb12u3


=====================================
data/dla-needed.txt
=====================================
@@ -834,9 +834,6 @@ tryton-server
   NOTE: 20260921: Coordinate with maintainer:
   NOTE: 20260921: https://lists.debian.org/debian-lts/2026/09/threads.html#00067
 --
-twitter-bootstrap3 (rouca)
-  NOTE: 20261008: Added by Front-Desk (rouca)
---
 u-boot
   NOTE: 20260804: Added by Front-Desk (rouca)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a11db5b178b3a9ac7109bf04c1dfdac773b9c4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a1a11db5b178b3a9ac7109bf04c1dfdac773b9c4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/1a5ea255/attachment.htm>