[Git][security-tracker-team/security-tracker][master] update notes for buildstream

[Thorsten Alteholz (@alteholz)]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2e571ff4 by Thorsten Alteholz at 2026-10-24T11:05:18+02:00
update notes for buildstream

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -87,6 +87,10 @@ bouncycastle
 --
 buildstream
   NOTE: 20260925: Added by Front-Desk (ta)
+  NOTE: 20261024: the suggested patch makes use of an additional filter, configured in tar.extractall()
+  NOTE: 20261024: this feature is only available in python3.12+ and as bookworm has only python3.11, a
+  NOTE: 20261024: new patch needs to be developed.
+  NOTE: 20261024: I would suggest to mark CVE-2026-82331 as <ignored> but the score is 9.8 (ta)
 --
 busybox
   NOTE: 20260511: Added by Front-Desk (dleidert)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e571ff467dd7bf15bd8906b86082d0ae53deb98

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2e571ff467dd7bf15bd8906b86082d0ae53deb98
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/ebab8a48/attachment-0001.htm>