[Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add thunderbird to data/dla-needed.txt

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
76c2f5bd by Carlos Henrique Lima Melara at 2026-10-15T00:45:28-03:00
LTS: add thunderbird to data/dla-needed.txt

- - - - -
8dcf1382 by Carlos Henrique Lima Melara at 2026-10-15T00:56:21-03:00
CVE-2026-103658/aspell: mark bookworm as postponed

Follow secteam triage.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -7261,6 +7261,7 @@ CVE-2020-37279 (easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command inject
 CVE-2026-103658 (GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a ...)
 	- aspell <unfixed> (bug #1150801)
 	[trixie] - aspell <no-dsa> (Minor issue)
+	[bookworm] - aspell <postponed> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2550001
 	NOTE: https://github.com/GNUAspell/aspell/security/advisories/GHSA-p35p-2mw5-fj5j
 	NOTE: https://github.com/GNUAspell/aspell/commit/b830b6e836aea9373fe5dd361b58e2d19d511958


=====================================
data/dla-needed.txt
=====================================
@@ -814,6 +814,9 @@ swupdate
 tesseract
   NOTE: 20260919: Added by Front-Desk (Beuc)
 --
+thunderbird
+  NOTE: 20261015: Added by Front-Desk (charles)
+--
 tiff (eamanu)
   NOTE: 20260709: Added by Front-Desk (utkarsh)
   NOTE: 20260709: CVE-2026-12912 (fixed 4.7.2rc2) + CVE-2026-36849 (read-buffer alloc);



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6d4a9dd73c0f404a931ab809f81100124df30617...8dcf13822a7158cfd2e9e2107cd8cc0d6c5d8810

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6d4a9dd73c0f404a931ab809f81100124df30617...8dcf13822a7158cfd2e9e2107cd8cc0d6c5d8810
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/71593251/attachment.htm>