[Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-114605 in dnspython for bookworm LTS.

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2a2a4c5 by Chris Lamb at 2026-10-24T14:21:49-07:00
Triage CVE-2026-114605 in dnspython for bookworm LTS.

- - - - -
95e4ec56 by Chris Lamb at 2026-10-24T14:22:09-07:00
Triage CVE-2026-17591 in libarchive for bookworm LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2269,6 +2269,7 @@ CVE-2026-114606 (draw.io Desktop is the official Electron build of draw.io. Prio
 CVE-2026-114605 (dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_w ...)
 	- dnspython <unfixed> (bug #1151842)
 	[trixie] - dnspython <no-dsa> (Minor issue)
+	[bookworm] - dnspython <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/rthalley/dnspython/security/advisories/GHSA-45c3-73f7-pv4m
 	NOTE: Fixed by: https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023 (v2.9.0)
 CVE-2026-114603 (OpenTelemetry Python provides the Python API and SDK for OpenTelemetry ...)
@@ -12859,6 +12860,7 @@ CVE-2026-30971 (ZoneMinder is a free, open source closed-circuit television soft
 CVE-2026-17591 (A flaw was found in libarchive. An attacker can cause a Denial of Serv ...)
 	- libarchive 3.8.9-1
 	[trixie] - libarchive <no-dsa> (Minor issue)
+	[bookworm] - libarchive <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/libarchive/libarchive/pull/3318
 	NOTE: Fixed by: https://github.com/mmatuska/libarchive/commit/45f7ec5422e7677673a7da1ae9ae2ac2b5721204 (v3.8.9)
 CVE-2026-111855 (An issue was discovered on Tektronix 3 Series MDO devices before 1.21. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/64e8c2664977b1b37205c9ce5e84d48c1a3a79d0...95e4ec56caf733bcd504eeb83ca42e7244fc4ec3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/64e8c2664977b1b37205c9ce5e84d48c1a3a79d0...95e4ec56caf733bcd504eeb83ca42e7244fc4ec3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/bcbb1574/attachment.htm>