October 2026 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Thu Oct 1 00:03:38 BST 2026
Ending: Sat Oct 31 22:32:21 GMT 2026
Messages: 2427

• [Git][security-tracker-team/security-tracker][master] webkit2gtk / wpewebkit upstream advisory WSA-2026-0006   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] Claim libreoffice in bookworm LTS   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new Zammad issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-100256/intellij-idea issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new virtualenv issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libstb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new golang-github-klauspost-compress issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ZoneMinder issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update todo item for CVE-2026-71266   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32148/erlang-hex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixes for glance via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new modsecurity issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for libsoup3 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update wikimedia rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for php-mongodb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed for thunderbird via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] trixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] ne wasmtime issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103001/pyjwt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4808-1 for network-manager-l2tp   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Add new batch of pypdf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103641/gegl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103531/opensc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103387/node-uri-js   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102991/mako   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102990/node-proxy-agents   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-101887/bluez-alsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] wolfssl triage based on #1149565   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] puma spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] pipewire spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-79616: Add commit reference in v6.11.2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take libnet-idn-encode-perl for coordination under pkg-perl umbrella   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream advisories for CVE-2026-8624{3,6}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add back reference to Debian bug for CVE-2026-19587   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] first batch of nvidia GPU CVEs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-6534-1   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] DLA-4809-1 nodejs   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] second batch of nvidia gpu CVEs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] more nvidia gpu CVEs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend wikimedia rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102504/libimager-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102505/libimager-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
  • [Git][security-tracker-team/security-tracker][master] chromium dsa   Andres Salomon ( at dilinger)
• [Git][security-tracker-team/security-tracker][master] Take bind9   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-92035 was found to affect ESR140   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libpng, thunderbird DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for apache2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for apache2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from one rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new foreman issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add two new foreman issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-77387/geopy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new jackson-dataformat related CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new foreman issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103923/node-katex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new misp issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new misp issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new misp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new keycloak issue   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new Keycloak issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103754/ansible-runner   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tnef issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new collectl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ghost issues, itp'ed   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new ghost issues, itp'ed   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new ghost issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new python-tornado issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product for the Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for apache2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in rationale for CVE-2026-59685   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] bugnums   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] ignored-debian-bug-packages: Add two more legacy nvidia packages   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug reference sfor various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust nvidia-open-gpu-kernel-modules entries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take thunderbird   Emilio Pozuelo Monfort ( at pochu)
  • [Git][security-tracker-team/security-tracker][master] lts: take thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4810-1 for thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] lts: take chromium   Emilio Pozuelo Monfort ( at pochu)
  • [Git][security-tracker-team/security-tracker][master] lts: take chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4811-1 for chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] LTS: claim ruby-oauth2 in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4812-1 for libio-compress-perl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] 7 commits: dla: add and assign Utkarsh to libpng1.6   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2026-3439{8,9}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug refrences for X11 related issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track flatpak-builder updates proposed via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-ringbuf fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2025-12781   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for liblivemedia   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-19553 and CVE-2026-19445   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: lts: mark CVE-2026-54275/python-aiohttp as not affecting Bookworm   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add two new 389-ds-base issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new GCC issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-94603/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-96544/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4814-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] libpng1.6 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103484/pgvector   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track two issues in peazip, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DSA for redis   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add note on needed review for sabnzbdplus   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Expand note for ruby-rack-session needing review   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add ruby-jwt to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one keystone issue with no CVE yet   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: crash status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add one more keystone issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add a third keystone issue without CVE assignment   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Note status for wireshark in dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add advisory reference for CVE-2026-101014   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add advisory references for opendmar and opendkim issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new mediawiki issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixes for pgpool2 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for poppler issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream issue for CVE-2026-102010   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for iperf3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mark issues specific to ESR140 as n/a for thunderbird in trixie/bookworm   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Adjust introduced version for rust-wasmtime issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-103222/c-blosc2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-91148/cockpit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add reference for CVE-2026-84968   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] radsecproxy CVEfied   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for iperf3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for modsecurity-apache issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for node-svgo issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] pgvector fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libimager-perl fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] opensbi is in the archive   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] php-mongodb, radsecproxy DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mediawiki fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python-engineio fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Simplify Apache rules   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-18022   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Adjust quoting for regex based product in Apache CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Grub issue CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process two NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95512/freetype   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add regex based NFU rule for YesWiki   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add batch of thift issues (need assessment for built bindings)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of thirft issues (need assessment for built bindings)   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add another batch of thirft issues (need assessment for built bindings)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-91784/gotop   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process new ghost issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-78376 and CVE-2026-83596 as fixed with DSA-6534-1   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] Add new bouncycastle issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new bouncycastle issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for bouncycastle   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] initial thrift triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: expat postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] thrift triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFus   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFUs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new ATS issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new fsspec issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] uv n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new ejabberd issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new apache-directory-api issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add php8.2   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-6534-2 (regression update)   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] LTS: claim rails in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] 32 commits: lts: async-http-client postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-102422/node-shell-quote   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-svgo issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two golang-opentelemetry-otel issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-102414/node-pbkdf2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annotate that Simon Quigley posted debdiff for review for rails   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim php8.2 in dla-needed.txt   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Update reference for message-id to proposed debdiffs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove Debian bug reference for CVE not part of the bugreport   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-73233/freecad [bookworm] marking as not-affected, code introduced later.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Update status for CVE-2026-104851   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two netdata CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-101887/bluez-alsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-87121   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105083/imagemagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in peazip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104988/dogtag-pki   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104994/trivy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-103923/node-katex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104874/python-multidict   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: review crash and xen   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104476/backdrop, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104855/rust-wasmtime   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104721/logback   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add chromium to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-brace-expansion issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-102414/node-pbkdf2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-94291/epiphany-browser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for two python3.15 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-96889/librsvg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for pcre2 from dla-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] wolfssl: bookworm CVE status from maintainer   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Track fixed verion for glibc issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-53495/containerd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] golang-github-go-jose-go-jose.v3 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-85091/zlib [bookworm] not affected, vulnerable code introduced later   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-85091/zlib -- correction of first version having non-blocking support.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Propose zlib to be postponed after triage.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4815-1 for freecad   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-85091   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for wss4j issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct status for CVE-2026-48804   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-95510/inetutils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Restore comment on non-blocking devices support   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some OpenAM specific NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product for the Bouncycastle CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-18040/bouncycastle   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new xreader issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add some thrift references to upstream JIRA issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4816-1 for pcre2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 12 commits: lts: node-got postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 16 commits: lts: python-asteval postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 11 commits: lts: wabt postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 16 commits: lts: triage libsoup3 in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 7 commits: Correct issue reference and add fix commit for wabt   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Adjust source association of CVE-2026-79310   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct association for CVE-2023-46120 to rabbitmq-java-client source package   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-63209   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for various isses   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-85091/zlib - remove annotation that bookworm is not affected.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Update dla-needed for zlib.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4817-1 for linux-6.12   Ben Hutchings ( at benh)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-41283/mistral   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for wlc issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-72712/nmap   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Better reference for discussion around zlib affected range   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add back initial reference for CVE-2026-90648   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for 389-ds-base issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] track one more lhttp code copy   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] c-blosc2 fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 18 commits: lts: python-urllib3 postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] ruby-oauth2 spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] qemu spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] xiphos spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] wireshark DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-71847   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-66020/qemu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] u-boot fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Claim wpa   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] ruby-rack-session DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] various liblivemedia issues fixed in re-upload   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add commit reference for CVE-2026-94603/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annotate branches for podman issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update references for CVE-2026-94603/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream commit for cjson issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2026-85498/policykit-1   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-54770/python-webob   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4818-1 for xen   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Claim python3.11   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for various issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mark skia as unsupported, see #1149852   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] opensc fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4819-1 for php8.2   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] lts: stunnel4 postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: sshuttle postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 4 commits: lts: wolfssl end-of-life in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] lts: imagemagick postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 6 commits: lts: streamlink postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] lts: expat postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: xen postponed in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 4 commits: lts: node-axios not-affected in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] 2 commits: lts: nvidia-graphics-drivers-tesla-535 ignored in bookworm   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4820-1 for node-lodash   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-53493/containerd via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream commit reference for CVE-2026-15037   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: reference proposed wolfssl update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2019-25777/libyaml-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2017-20285/libyaml-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19954/libnet-whois-raw-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process new issues in Keycloak   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4821-1 for perl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add perl to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add ceph to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add coturn   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Claim gst-plugins-base1.0 in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Update pending todo for CVE-2026-85150   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] apache-directory-api/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update note on node-shell-quote   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note on no-dsa issues in node-shell-quote   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new libreoffice issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add phppgadmin   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-85150/gst-plugins-base1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVEs assigned for modsecurity issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust reference for CVE-2026-63277/libreoffice   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for CVE-2026-102990   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gnocchi issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] freetype fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lwip fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add a note about perl   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] lts: fix DLA-4808-1 entry   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] Claim gst-plugins-good1.0 in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Add ejaberd to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add cyrus-imapd to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add openvpn   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-19954   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4822-1 for ruby-oauth2   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Add tracking for some arm-trusted-firmware fixes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take xz-utils for review for DSA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4823-1 for roundcube   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] libreoffice, sabnzbdplus DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lts: rsync status update   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for openrgb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-19487/perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust references for modsecurity GHSA's   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nvidia-graphics-drivers-tesla-550 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105712/gnupg2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105315/django-haystack   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105326/cups   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of zabbix issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two libimager-perl issues now fixed in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for cups issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update first set of cups issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for more cups issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-77214/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2026-102633/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim ejabberd.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add CVe-2026-105263/shaarli   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new buildkit issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new buildkit issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-77214/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4824-1 for libpng1.6   Utkarsh Gupta ( at utkarsh)
• [Git][security-tracker-team/security-tracker][master] LTS: add a note for rails with a link to the debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libgit2 in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4821-2 for libmodule-cpants-analyse-perl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104380 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-19954/libnet-whois-raw-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-104851/fsspec via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for roundcube update   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Reserve DSA number for roundcube update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take node-shell-quote for DSA review and release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-37117/liblivemedia   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVECVE-2026-96760/python-authlib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104056/python-authlib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-66020 and CVE-2026-6426   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libde265 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update temporary description for two libde265 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference followup to CVE-2026-49337 to avoid heap use-after-free issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Provide message-id for vim proposed debdiff   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new vllm issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new vllm issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Perforce rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add first batch of new sssd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add second batch of sssd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in joplin   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105782/python-scrapy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105775/vllm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103433/docker-buildx   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] osmo-iuh fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lwip spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for two issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4825-1 for suricata-update   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add commit references for xz-utils issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct one commit reference for xz-utils issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-34743/xz-utils: reference test case   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] tiff spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rabbitmq-server fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libgphoto2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] graphicsmagick fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new django issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] coturn fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] poppler fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Drop two commits which are unrelated to GHSA-5qpq-xqfv-j9pg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for python-django issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for python-django issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-74250/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add as well rust-russh-cryptovec for CVE-2026-46673   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for thrift issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another sssd issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for rabbitmq-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-83550/prometheus-postgres-exporter   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new smarty issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new aspell issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for smarty4 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for gfs2-utils issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] rails, ruby-jwt DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-66666/wordpress   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106443/weasyprint   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new misp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add NOTE for tiff   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add new rabbitmq-java-client issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106026/tftp-hpa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] mark dask as non issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106033/ansible-ui   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106016/firefox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new lrzsz issues fixed in 0.13.0 upstream release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libmikmod issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105922/vllm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-i18next-http-backend issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new netbox issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for node-shell-quote update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for wabt issue fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixes for rust-russh via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via experimental for openimageio issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new xorg-server and xwayland issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process initial batch of NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for pymongo issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for openssh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new wolfssh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new bcel issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-94114/bcel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-80048/sssd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-76061/cri-o   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update severity for xwayland issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of sssd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Revert Flexera CNA rule which was not intended to commit already   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-43598/rccl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new hdf5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new lz4-java CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-handlebars issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106454/twisted   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of gimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new log4net issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new wolfssh issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for Flexera   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: regexify multiple rules   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new ghostscript issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-103754/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-104851/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add mapserver   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4826-1 for puma   Abhijith PA ( at abhijith)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim rsyslog   Abhijith PA ( at abhijith)
• [Git][security-tracker-team/security-tracker][master] kbd fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for xwayland issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for xorg-server issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Prefix fixing commits in some notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-105111/bcel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update gimp references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-101258/ghostscript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references to upstream issues for Ghostscript issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Gcc12/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] teixie triage   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove unneded todo item   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-51773/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] gnupg2/boowkorm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Replace a tab in notes with a space   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-19614/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-19954/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] LTS triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update one CVE from python which were addressed in 12.15 point release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add reference to advisory for wordpress update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove mistral from dla-needed   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] new jackrabbit issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove notes on one rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more imagemagick issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add more imagemagick issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add more imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of imagemagick issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add another batch of imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-96408   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for wireshark issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for twisted issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-handlebars issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more gimp issues upstream report collecting 7 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two docker.io issues added, needs further investigation   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-56851/golang-golang-x-text   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107313/libpgjava   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new m17n-lib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107166/open5gs, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107159/miniupnpd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for xz-utils update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Work on xorg-server update for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Cisco rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Temporary track fix via experimental for opencolorio issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107363/zaqar   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new openvpn issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for guix issues via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107183/llama.cpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the NVIDIA CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one new keycloak issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104074/coturn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103668 for Movable Type   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rccl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one virtualbox issue, possibly fixed already   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more products covered by VMware CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annotate that nagios4 has an update for review from maintainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4827-1 for python3.11   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for Anthropic   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4828-1 for gst-plugins-base1.0   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] new tor issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new async-http-client issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] NFU   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new libpgjava issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new node-traverse issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new cyrus-sasl issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new telegram-desktop issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rails: mark CVE-2026-33658 and CVE-2026-33174 as not-affected for Bookworm   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-97764/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] lz4-java/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add msgpack-java   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] libpcap spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4829-1 for rails   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] libgit2: triage some CVE entries, add a note in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] lts: claim python-msgpack and python-tornado   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-26625/git-lfs: fix patches order, add additional patches, update git version   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] lts: review git-lfs   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] weasyprint fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] sg3-utils fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] openimageio fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add twitter-bootstrap3   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] tor fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-77214/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new spip issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add spip to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Correct ordering   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add first batch of new golang issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more golang issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-1.27 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for golang-1.26 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4830-1 for twitter-bootstrap3   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixes for golang-golang-x-net via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-106016/firefox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-83530/golang-github-google-cel-go via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take care of releasing maintainers upload for spip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note for CVE-2026-107230   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference to introducing commit for CVE-2026-94488   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103871   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105516/nfs-ganesha   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105517/nfs-ganesha   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nfs-ganesha issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate CVE-2026-100866 with onefetch, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mistral issues from OSSA-2026-044   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mistral issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103663/ollama   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add some new imagemagick issues, but they are all duplicates   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more ImageMagick updates, all duplicates   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-90461/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three odd gnutls28 assignments   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new ming issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new dcmtk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Proces more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ansible-core issue, but no public details, keep todo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more unclear gnutls28 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new cups issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for Backdrop CMS CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two krb5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95208/wolfssl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-19585/golang-github-hashicorp-go-getter   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107889/Keycloak   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two issues in hazelcast, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new ruby-mechanize issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107705/poppler   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107651/eog   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two Dislocker issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new keycloak issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mutt issue, CVE-2026-107570   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for flatpak-builder issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107565/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one additional space   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107698/ffmpeg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-107698/ffmpeg (missed in previous commit)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more ffmpeg issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gcc-12/gcc-13 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian but reference for mutt issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107386/golang-github-rabbitmq-amqp091-go   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] gcc-14 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libgit2: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] LTS: claim jq in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] new pymongo issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gcc-13 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] nagios4 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mistral fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libpgjava fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add imagemagick to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] ntfs-3g fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] c-blosc2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-102010 also in gcc-11   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107378/cairosvg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-61801/golang-github-moby-sys   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-10732{4,5}/golang-mongodb-mongo-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106438/mongo-c-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-98375/linux (XSA-522)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] golang-golang-x-image fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-106437/mongo-c-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update some more mongodb driver related issues in various bindings   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of mongodb driver CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup rejected imagemagick dupes   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Canva   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Correct source association for CVE-2026-95702   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some golang-gvisor-gvisor issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new pyload issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-15340/lwip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two snappy-java issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new open5gs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108093/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108063/libhangul   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107935/golang-github-containers-gvisor-tap-vsocks   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add tracking of new mariadb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107655/cups   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typo in note for CVE-2026-87121   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-87890 in python-django for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Remove trailing whitespaces from one entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add mutt   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Triage gcc issue   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend HP rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Openssh/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] aspell/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] mark CVE-2026-77178 as fixed in 7.2.8   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: dispatch FD slots for first half of 2027   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] bcel/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Fix HP CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] m17n-lib/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Fix source association for CVE-2026-51773   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two nfs-ganesha issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one rejected CVE for WordPress plugin   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-92705/aegisub   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108119/busybox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102554/guava-libraries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two CVEs assigned for php-league-commonmark issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix TEMP typo   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-87890   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark two krb5 issues as no-dsa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-96760   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commits for libx11 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commits for libxi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-94286   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust some notes to prefix fixing commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ghostscript update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-XXXX/libde265 - currently TEMP-0000000-62EEDC - GHSA-vm5w-mrw5-q329 not affecting bookworm   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Update status for two golang-1.26 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-61801 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2019-25076   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Tenable rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Docker rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Eclipse rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Eclipse rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-69150/keepassxc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for gnutls28 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional references for gnutls28 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-95208   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag for fixing commit of CVE-2026-107570/mutt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for GHSA-vm5w-mrw5-q329/libde265 for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: modsecurity: reference SPU from maintainer   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Merge keystone issues into the CVE ified entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107373/libextutils-typemaps-default-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2013-10076/libextutils-typemaps-default-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107794/libextutils-typemaps-default-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libextutils-typemaps-default-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-90460/keystone   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-108063   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-105712/gnupg2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two libextutils-typemaps-default-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-48932   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add cyrus-sasl to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] pypdf/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106435/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] jackrabbit/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] libmikmod/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] tor DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new openrefine issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for cups issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-44243: Add commit link   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add description based rule for JeecgBoot product   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108693/imagemagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new gpac issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for more libheif issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of libheif issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DSA for vips   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Take expat from dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track CVEs explicitly considered to affect graphicsmagick by upstream   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] c-blosc2 spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] parted spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Some wolfssl issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bookworm triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 2 commits: golang bookworm triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for node-i18next-http-backend issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] zabbix/bookworm   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107565/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-71287/cacti   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-72854/msgpack-c   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add cairosvg to dla-needed   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for several issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Directly reference commits for CVE-2026-44243   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for freetype via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed updates for glibc via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-94603/podman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-72854/msgpack-c   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108752/jupyterhub   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108735/miniflux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108726/glpi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108720/phpipam   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108577/libmodplug   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108573/assimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix NFU entry for CVE-2026-108572   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] track some chromium issues also for libskia   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108985/libnfs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108981/libnginx-mod-http-cache-purge   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two emacs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Frappe   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Flock   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108978/rlottie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add reference for older starlett issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4831-1 for libgit2   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Adjust source package name for async-http-client issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some miniflux issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Annotate status for sogo in dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add notes for CVE-2026-108735/miniflux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of freerdp3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-108976 (incomplete fix for CVE-2026-79992)   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track first batch of now assigned freerdp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] More FreeRDP issues assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Infoblox   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new set of imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Pointsharp   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Westell   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Process more imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Airoha   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Esaqa   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Open WebUI   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] markr recent gnutls CVEs as non issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] older nagios4 issue CVEfied   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] nagios4, librsvg, keystone DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ntfs-3g update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] jq: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Red Hat rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Semtec   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-gix issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add two erlang-hex issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark lrzsz as no-dsa for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for three lrzsz issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for lrzsz via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109399/swupdate   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-93879/hibernate-validator   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103658/aspell   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for freetype fixing commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup two rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new containerd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2026-109448   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-41210/moonlight-qt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4832-1 for nagios4   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add four new hugo issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust source package name for psqlodbc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109786/fail2ban   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4833-1 for chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Add two new fzf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109378/spip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track two more CVEs included in the proposed octavia trixie-pu upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] de-associate five CVEs with liblivemedia   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim libssh in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] new xen issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4834-1 for keystone   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2026-102701, spotted by Salvatore   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add firefox issues from mfsa2026-106   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add firefox-esr issues from mfsa2026-108   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add firefox-esr to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bind9.18 commit   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] blazar spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-12345/python3.11: mark as postponed in bookworm   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107226/async-http-client   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109563/node-n3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109425/golang-github-tink-crypto-tink-go   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104140/qgis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109347/adminer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two node-dompurify issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108836/ollama   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two janus issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108822/kamailio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-108094/mutter   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105081/imagemagick   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] nagios4: Drop suite entries already covered by DSA crossreference   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup rejected entry from fresh update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Associate some CVEs with authelia, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for several imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rsyslog   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two mongodb issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95127/libass   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two mp4v2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95117/jsmn   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add libwebsockets issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new busybox issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new sftpgo issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-84429 in python-django for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Netcore   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add SafeSource   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend nvidia rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new vifm issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] freerdp3 issues CVEfied   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] freerdp3 issues CVEfied   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Ad rule for RT-Labs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: add swupdate to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] LTS: add Xen to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track firefox-esr issues fixed via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109117/oath-toolkit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two firefox{,-esr} CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-109117 as no-dsa for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add curl to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-92392/curl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for curl update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add first batch of new curl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixed version for CVE-2026-92392 in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of curl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more CVEs which were integrated in zaqar update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for gnocchi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for upstream fix for CVE-2026-96760   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new libreswan issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add blog reference for CVE-2026-92392   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new node-axios issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-ammonia issue   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new rust-ammonia issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new bluez issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rebar/erlang-hex issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Remove a wrong note for bind9   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] new m17n-lib / libsndfile issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4834-2 for keystone   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] gnome-remote-desktop n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new pgbouncer issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] zstd-jni-java fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new imagemagick issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python-scp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] jupyterlab n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new nltk issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new clevis issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new thunderbird issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new thunderbird issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python-oauthlib issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reference full commit hash for fixing commit of CVE-2026-103658   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust tag for introducing commit for CVE-2026-70652   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] python-scp fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-81736 keep style with the notes added in same commit earlier   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new MongoDB issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] buildstream, firefox-esr, sogo DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102734/python-asteval   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4835-1 for mariadb   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] python3.15 fixed in sid   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] python3.15 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new nix issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-85747/docker-registry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Samsung rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Samsung rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110236/dolphin   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more freerdp3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110225/shaarli   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixing commits for pgbouncer issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-93453/sogo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for containerd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-74580   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Adjust product matching for f5 CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Manually trigger the auto-NFU processing   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new dpdk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nsd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add older reference for CVE-2012-2978   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for nsd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nginx issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libnginx-mod-js issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add NOTE for python-git   Emmanuel Arias ( at eamanu)
  • [Git][security-tracker-team/security-tracker][master] Add NOTE for python-git   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] 2 commits: LTS: add thunderbird to data/dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-108094/mutter   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for janus upstream commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for nsd issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for chromium via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109786/fail2ban: postpone for bookworm   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixes for nginx via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new haproxy issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add haproxy to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Indicate that Bastien (rouca) is going to work on a imagemagick update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add nginx to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product expression covered by the Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for TLS libraries issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for nix issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take erlang   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Track fixes for firefox via unstable   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Track fixes for firefox via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-96596/{erlang,rebar3,erlang-hex}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4836-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Mark bookworm as not-affected by CVE-2026-46469 + CVE-2026-46470   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-94200/erlang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two Znuny issues CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more busybox issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-86846/dpdk missed in yesterday's batch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-86476/gst-plugins-base1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-107565/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] osmo-bsc fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for e107   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-67418/rabbitmq-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more rabbitmq-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55167/lam   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] freerdp3 CVEfied   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] New (unfortunate) batch of python-git issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add four new node-nodemailer issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] bugnum   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] older blender issue fixed   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new CVEs from Linux kernel CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct metadata for CVE-2026-98432   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct upstream tag for CVE-2026-99999 commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new godot non issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4837-1 for gst-plugins-good1.0   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Drop 'bonus fix' CVE from gst-plugins-good1.0   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Claim gst-plugins-bad1.0 in dla-needed.txt   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Mark bookworm not-affected by CVE-2026-{12891,52722,53701}   Andreas Henriksson ( at ah)
• Processing b380ac919c55be3baaaf95951082379f8565586e failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] Fix syntax of previous bookworm not-affected metadata   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for pfSense   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new node-undici issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mutt, jpeg-xl DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new social-auth-core issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] mistral spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] lots of random CVE assignments by Vulncheck, mark them all as <undetermined>...   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-99999   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-89425/jackson-core via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for jackson-databind issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track more fixes for jackson-databind   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixes for cups issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-88358/simdjson   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-88358/simdjson   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for thunderbird via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-99999   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Merge rust-ammonia entry after CVE assignment   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for spip update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-85634/wildfly, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-78850/matomo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] One CVE assigned for cups issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add closing bracked for upstream tag reference for one cups issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new cifs-utils issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-88753/python-markdown2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of jetty issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-qs issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of LLM findings from one single author with no actionable entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110810/whisper.cpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110717/janus   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110777/evolution-data-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-84823/wildfly   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mattermost-server issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new mattermost-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Some FreeRDP issues CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] More FreeRDP issues CVE-ified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4838-1 for chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4839-1 for gst-plugins-bad1.0   Andreas Henriksson ( at ah)
• [Git][security-tracker-team/security-tracker][master] Process next batch of NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] sos spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python-git commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new golang-github-getkin-kin-openapi issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Suse rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Honeywell Aerospac CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] one xen issue n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2026-110236   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new clevis issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python-mcp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new libmspack issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] two older python issues fixed in 3.14   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] two more undetermined issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] xen fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] wordpress fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] node-undici fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2026-97394   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track CVE-2026-86846/dpdk as well as fixed in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some python-mcp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] two thunderbird issues don't affect ESR153   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] apache-log4j2 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new znuny issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-18649/gst-plugins-good1.0: postpone for bookworm   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] libyang fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim swupdate in data/dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] openssh n/a   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] openssh n/a   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python-tinytag issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new erlang-hex issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] more undetermined issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] More undetermined issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new xhtml2pdf issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] cleanup rejected issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4840-1 for jq   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] new pupnp issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add reference for InfinityCore issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new lomiri-[up|down]load-manager issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Allocate the apache2 DSA number   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] erlang-hex fixed in sid   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] erlang-hex fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libssh: mark two CVEs not-affected in Bookworm   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] libssh: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] haproxy: triage for LTS and add to dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Update status for erlang-hex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take haproxy for DSA release from maintainer preparing update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-105280   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-103503   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixed version for cyrus-sasl2 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup CVE-2026-108749 note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add VE-2024-58397/mp4v2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libtext-csv-xs-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream issue referrence for CVE-2026-110237   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-77205   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-101899/node-axios via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-102342/rust-ammonia correspond to RUSTSEC-2026-0213   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream issue for CVE-2026-105460/bluez   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Clean up one entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-97380/mariadb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-85745/mariadb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more MariaDB issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-89096 and CVE-2026-89098 for nfs-utils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libtirpc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-68498/jackson-core   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-62438/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libtirpc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-55543/TuxGuitar   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46472/gst-plugins-good1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-46471/gst-plugins-good1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-55543/tuxguitar   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-30971/zoneminder   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-17591/libarchive   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111802/nautilus   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track several issues from same reporter without upstream reports as undetermined   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111581/libblockdev   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVe-2026-111555/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-026-111458/ssldump   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libical issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111210/bitcoinj   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110698/praat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110679   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new spice issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new jetty issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-wasmtime issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new rust-wasmtime issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update todo for two OpenSSH issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add todo note (to be dropped) for CVE-2026-110929   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new asm issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add symfony issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102946/joserfc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102740/async-http-client   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110606/LibreCAD   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110604/mxml   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110603/laszip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110601/libsixel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more undetermined issue from AI assisted reporter   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110596/quirc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: add NOTE for haproxy in dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104198/zoneminder   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new peazip issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105236/erlang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109438/3proxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new koha issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-104086/7zip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new cpp-httplib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109144/python-certvalidator   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103902/libdigidocpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103060/rebar3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13326/qt6-connectivity   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA number for linux update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-15037/qt6-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for libtext-csv-xs-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] set CVE-2026-109144 as untermined, low quality report   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] osmo-bsc fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] rebar3 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-110855: Add commit link   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-110856: Add commit link.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-110857: Add commit link.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-110858: Add commit link.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-110859: Add commit link.   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Fix CVE-2026-111142/zziplib underminded label   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Fix typo in NOTE: fir for -> fix for   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track upstream fix for CVE-2026-110237/vifm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for gnupg2 proposed update via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111158   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-103060/rebar3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Two more FreeRDP issues CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new zoneminder issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102941/golang-github-gomarkdown-markdown   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-102893   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new angular issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim xdg-dbus-proxy in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] python-git fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new condor issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for FreeBSD   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new gst-plugins-bad1.0 issues (with not a lot of detail yet)   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add folowup fixes for CVE-2026-12505/cifs-utils   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one more python-git issue without CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Where possible link directly to the single commit   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2018-1000644/rdf4j   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for libyang via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream reference for CVE-2026-111555/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-102941 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2017-20286   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for cifs-utils regression update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA numer for haproxy update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Some issues for freeimage fixed in experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for pupnp via experimental upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-103502   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take haproxy in bookworm LTS to issue the DLA   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4842-1 for haproxy   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Mark the two haproxy TEMP issues fixed in bookworm by DLA-4842-1   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-109854/m17n-lib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-102635   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] xen DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2024-58392   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] record fixes for clamav stable-updates update   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Identify the "revert" commit for CVE-2026-102635   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-78497 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107168/m17n-lib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-109976/clevis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixing commits for clevis issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112062/lwip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more batches of for now undetermined issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for pupnp via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112046/asm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112021/snac2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two schroedinger issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libplack-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106569   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libplack-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] asm fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] luksmeta fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 3 commits: CVE-2026-46471/gst-plugins-good1.0: postpone for bookworm   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-50161/libre via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libplack-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add CVE-2026-112112/bird   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new radare2 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112036/mupdf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-88384/openexr   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107651/eog   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for various rclone issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-39879/syslog-ng   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112006/python-opentelemetry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111997/node-ip-address   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more undetermined CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for htslib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take nginx   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Really take nginx   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Cleanup incomplete references for Linux CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Mark libcrypt-password-perl as removed from unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust source package name for thunderbird for CVE-2026-109704   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update tracking for CVE-2026-96424/lomiri-download-manager   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libcpanel-json-xs-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove now rejected CVEs from Linux kernel CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-8168/qt6-svg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112368/php-mongodb   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112366/node-anymatch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2017-20286 in devil for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another product covered by the Apache CNA rules   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-102554 in guava-libraries for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-89425 in jackson-core for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add new roundcube issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-111555 in luksmeta for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-109854 in m17n-lib for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] more garbage from the VulnCheck CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] even more VulnCheck garbage assignments   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] more vulncheck noise   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new gimp issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mxml issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mopidy issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new node-markdown-it   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4843-1 for python-django   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Correct indentation in btch of roundcube CVES earlier added   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-11946 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Cleanup trailing whitespaces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add roundcube to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark two CVEs as NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-112259/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-112259/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference introducing commit for CVE-2026-112094   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] iDirecty reference single fixing commit from merge for CVE-2026-111925   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111759   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libcpanel-json-xs-perl issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for r-cran-readxl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-108981 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for some issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Google p0 references for virtualbox issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111755/node-follow-redirects   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libdbi-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111136/libinstpatch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two golang-github-containerd-stargz-snapshotter issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add three new python-aiohttp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more python-aiohttp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] One CVE assigned for roundcube issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add mroe pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111555/luksmeta   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update notes   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add another batch of pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for axis via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112778/traefik, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112300/configobj   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new gimp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove oboslete TODO for python-aiohttp entry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111766/node-markdown-it   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110095/node-ajv   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109831/unrtf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109395/compress-lzf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112214/gst-plugins-ugly1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111061/rust-russh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-109831/unrtf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new firefox and firefox-esr issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix via experimental for CVE-2026-65918   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fix for CVE-2026-10649/pacemaker via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-26625: add pre-req   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Add references for CVE-2026-113470   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-23949/setuptool   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove notes from CVE-2026-80726   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-110602 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-93856/cinder   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-71195/manila   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4844-1 for libssh   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Add new tomcat11 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of tomcat10 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tomcat9 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add batch of python-filelock issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for ca-certificates update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage pillow for bookworm LTS (CVE-2026-112390 & CVE-2026-112391, etc.)   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4845-1 for ca-certificates   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-93879 in libhibernate-validator-java for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-108830 in janus for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage vifm for bookworm LTS (CVE-2026-110237)   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Revert "data/dla-needed.txt: Triage vifm for bookworm LTS (CVE-2026-110237)"   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-110237 in vifm for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-108978 in rlottie for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] xdg-dbus-proxy: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-111925 in mopidy for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] LTS: claim inkscape in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Annotate some CVEs which Red Hat confirmed are going to be rejected   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-71195/manila   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-93856/cinder   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-93749   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113812/libmozilla-ca-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for libdbi-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-85783 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112202/libimager-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for firefox-esr via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch wip/gnome-remote-desktop-202610   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][wip/gnome-remote-desktop-202610] Update status for 2 gnome-remote-desktop issues   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] Add new CouchDB issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-110095 in node-ajv for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4846-1 for git-lfs   Sylvain Beucler ( at beuc)
• [Git][security-tracker-team/security-tracker][master] Cleanup some newly rejected CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-52290/ffmpeg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111943/go   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: take tzdata and libdatetime-timezone-perl   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Claim openssl in data/dla-needed.txt   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111758/node-markdown-it   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-40898 via experimental   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2013-0337 as unimportant   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] firefox-esr DSA   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] firefox-esr DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add three libmodulemd   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4847-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] php8.4 DSA   Moritz Muehlenhoff ( at jmm)
• Processing d070e3bb642e9c3e621982c79ef6e2b826e73a5d failed   security tracker role
• [Git][security-tracker-team/security-tracker][master] initial tracking for latest PHP issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4848-1 for php8.2   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] Add references for php issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for php8.4   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DSA for nginx   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] One libmatio CVE finally rejected   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new bind9 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new unbound issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new pdns-recursor issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for pdns-recursor issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new pdns issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new ATS issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add bind9 to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for two mxml issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new snipe-it issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Some FreeRDP CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114038/multipath-tools   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for unbound issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take bind9 for DSA release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take roundcube for DSA release prepared by maintainer   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note about dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for bind9 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for php8.4 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-pip issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Oracle rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new Java issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new openjfx issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Ectend Oracle rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new virtualbox issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new mysql issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113811 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add CVE-2026-94140/rex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-94423 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112921 as NFu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference needed followup commit for CVE-2026-56367 to not loose changes for CVE-2026-24481   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nodejs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-7807 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for openjdk-25 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-21 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for openjdk-17 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-106435/pymongo   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add four new ntpsec issues fixed in 1.2.6 release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add nss to dsa-needed for removal of CAs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Claim expat   Andrej Shadura ( at andrewsh)
• [Git][security-tracker-team/security-tracker][master] Remove note from two valid new rejects   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Traefik issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of pillow issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track first batch of CVE ified roundcube issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process second batch of roundcube CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for bind9 issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: update Oracle rule   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Oracle rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-92183/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add unbound to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] one more java issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Cisco rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Vyper   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111497/{brotli,nodejs}   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-92205/busybox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-83404/mysql-connector-python   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] webkit2gtk DSA-6534-3 (regression update)   Alberto Garcia ( at berto)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4850-1 for linux-6.12   Ben Hutchings ( at benh)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95168   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Adjust Oracle rule for WebLogic product   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new aide issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add aide to dsa-needed to coordinate for release   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update rule for Cisco   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: Add aide to dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-48976   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-45205/commons-configuration2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new pillow issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] zvbi fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] fzf fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Prefix commit for CVE-2026-114501   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] fix status for two Java issues and add OpenJDK advisories   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113786/pypdf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] openjdk-27 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] track skia for latest chromium issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new pypdf issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new pypdf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] aide fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] thunderbird fixed in si   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Correct one reference for mfsa2026-115   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag reference for CVE-2026-110654   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new mod-qos issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new undertow issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new djangorestframework issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for some mistune issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one rust-rusttls-webpki issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for dislocker in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libimager-perl issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for mysql-9.7 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVEs for openjdk-27   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add openjdk-27 for CVE-2026-91403   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for libdbi-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Velneo CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add new openstack related issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Vaadin CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] One python-git issue CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114140/nbconvert   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new uv issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Dulwich issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Addn new virtualenv issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new python-virtualenv issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] add CNA rule for EnterpriseDB   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python-virtualenv issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for aide update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new golang-github-go-chi-chi issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new jupyter-server issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update Apache rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new ognl issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python-oslo.utils fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] ironic fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] inkscape: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-110601 in libsixel for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-108985 in libnfs for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage roundcube for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4851-1 for aide   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libdbi-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] aide: Track fixed versions explicitly until CVEs available   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-112202/libimager-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via unstable for two php-laravel-framework issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verion for mysql-9.7 issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit from 1.0.y for CVE-2026-111497/brotli   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DSA for erlang   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111183/gst-plugins-good1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112177/ghostscript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-105923/QT   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take varnish   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-105923   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new openbao issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track first batch of now assigned CVEs for incus issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] More Incus issues CVEified   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] New Ghidra issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track new libsoup source package for yet unfixed libsoup3 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for CVE-2026-96541   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-18358   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-97631/edk2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-93336/juju   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVe-2026-92287/apache-arrow   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new python issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114605/dnspython   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2026-115516 already as rejected   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new graphql-core issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-13411/mattermost-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115638/ironic   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115506/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115505/libsmb2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115504/cfitsio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new open-iscsi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-83404/mysql-connector-python   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new mistune issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new python-authlib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115449/libslirp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4852-1 for clamav   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] claim antiword   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] CVE-2025-40777/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] allocate DSA for unbound   Yves-Alexis Perez ( at corsac)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for Canonical   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Document imagemagick regression   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4853-1 for chromium   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new expat issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new cockpit-machines issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Correct CVE-2026-111497/brotli bug number   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new dokuwiki issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114613/python-msgpack   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: Add brotli to dla-needed.txt   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] new json-smart issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114655/libmongocrypt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add note on nss for open clarification   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add brotli to dsa-needed, update already proposed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114645/mongo-c-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new wasmtime issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for mongodb   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for dislocker via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: data/dla-needed.txt: Triage openjdk-17 for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115327/libyang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115319/fzf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115221/freeipa   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115207/patch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two fpdf2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114608/pylint   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim brotli   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4854-1 for tzdata   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] rust-wasmtime issues CVEfied   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: unclaim samba from apo   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114603/python-opentelemetry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-113351 in expat for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-113602 in json-smart for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another covered product for the Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111181/node-body-parser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-108094 in mutter for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Open libsoup bugs got reassigned to src:libsoup   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4855-1 for brotli   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Add two new HarfBuzz issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113681/openimageio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113613/flexget   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113466/minio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Fix typos in notes   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-93879 in libhibernate-validator4-java for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109411/samba   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-109956 in nltk for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-114583/python3.14   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-115207/patch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-114583/python3.15 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for some issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-109563 in node-n3 for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-107363 in zaqar for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-109152 in python-scp for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for brotli update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-105274 in rebar3 for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-62363/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-111181 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ignored-debian-bug-packages: Add gcc-12, which will not be in forky   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] gcc commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4856-1 for xdg-dbus-proxy   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] DSA for libheif   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110725/node-ajv   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more node-ajv issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-95620/qt6-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115936/libio-compress-brotli-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113877/libhttp-headers-actionpack-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-111943 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for further products in the Eclipse CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another covered product by the HP CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-83813/twisted   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-87901/phpbb3   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for rust-wasmtime issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] One CVE assigned for Wasmtime issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two xdg-desktop-portal issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update notes for buildstream   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add new cacti issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-16762/QT   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new twisted issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115863/connman   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] claim caddy   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115586/python-virtualenv   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] claim cyrus-sasl2   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] new haproxy issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115754/node-serialize-javascript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process new NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115730/node-i18next-http-backend   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115722/python-rply   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115567/rust-tokio   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-113352/utox   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-111756/node-follow-redirects   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115570/electron   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for CVE-2026-110353   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for three erlang issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2026-113877 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for dnspython via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference Debian bug report for nodejs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-114629/libweb-simple-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for ruby issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-114613 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for node-ajv issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4857-1 for caddy   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] gcc-15/16 fixed in sid   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] gcc-15/16 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] update status for CVE-2026-85518   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-85518   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-110095/node-ajv via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-93590/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Triage CVE-2026-112112 in bird2 for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Triage CVE-2026-114605 in dnspython for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106575/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-112202 in libimager-perl for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106576/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage eog for bookworm LTS (CVE-2026-107651)   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-111183 in gst-plugins-good1.0 for bookworm LTS.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] clevis fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] qtbase-opensource-src fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new open62541 issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new lua-nginx-dns issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new python issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] LTS: claim vlc in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] DSA for varnish   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] 4 commits: Track fixed version for CVE-2026-115754 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 3 commits: Add two new phpipam issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update todo for CVE-2026-105963   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-106017   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two node-serialize-javascript issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106564/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106570/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add GStreamer-SA-2026-0090 for gstreamer-editing-services1.0   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] aegisub fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add TODO for my previous entry   Jeremy Bícha ( at jbicha)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Update status for gstreamer-editing-services1.0 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update references for CVE-2026-11073{4,5,6}/godot   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional required fix for CVE-2026-63430   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-109841   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for php-league-flysystem via trixie-pu   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two kin-openapi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference commit for 25.04 branch for CVE-2026-110236   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark two CVEs as no-dsa for trixie   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-104266   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-106574/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Revert "Mark bookworm as not-affected by CVE-2026-46469 + CVE-2026-46470"   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-110237/vifm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-111497/brotli via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in snipe-it, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in vllm, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new starman issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115825/libplack-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for new rclone issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for libheif via DSA-6583-1   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add first set of imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] thunderbird DSA   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] thunderbird DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Nodejs triagging   Bastien Roucariès ( at rouca)
  • [Git][security-tracker-team/security-tracker][master] nodejs triagging   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-105483   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] DLA-4858-1 imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] imagemagick dla   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Take dpdk   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4859-1 for openssl   Arnaud Rebillout ( at arnaudr)
• [Git][security-tracker-team/security-tracker][master] Cleanup additional whitespaces   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-115825/libplack-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for starman issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for zlib issue via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-102601/php-league-flysystem   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-111497   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ACVE-2026-116053/mycli   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110522 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115683/epiphany-browser   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one CVE potentially affecting src:openssh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-110879/jackson-databind   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust upstream tag for CVE-2026-110353   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2026-110354/haproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116124/libgsf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new musl issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new QT issue   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new qt issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4860-1 for libdatetime-timezone-perl   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] lts: correct update type for libdatetime-timezone-perl   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4861-1 for openjdk-17   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4862-1 for inkscape   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Update note for zlib.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] add note in dla-needed for zlib, fixed in unstable.   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] LTS: claim strongswan in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Remove notes from now rejected CVE from the Linux kernel CNA   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Claim eog.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4863-1 for thunderbird   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-110642   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-27171/zlib is not affecteing in bullseye   Tobias Frost ( at tobi)
• [Git][security-tracker-team/security-tracker][master] Remove one rejected CVE   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of vllm issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-96432/qt6-base   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new routinator issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116612/gstreamer-editing-services1.0 assigned   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two open5gs issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process one more NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116516/mattermost-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116497/gssproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2020-12658/gssproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes via untable for bcel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new lldpd issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one new electrum issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update temporary description for one electrum issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new php-masterminds-html5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115910/social-auth-core   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rust-zip issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-107080/openjpeg2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for rust-zip issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: add note about libreoffice/bookworm   Santiago R.R. ( at santiago)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4864-1 for swupdate   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] DSA for valkey   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-112818/git-annex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-111136/libinstpatch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-88371/zbar   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track nodejs issues fixed in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new netty-tcnative issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116486/Objenesis   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two llama.cpp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libimobiledevice issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new onnx issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process two more NFUs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one unneeded todo item   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new consul issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issues in libosmocore   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add osmo-msc issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2013-10077/octoprint   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add another covered product for Apache CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add fixed versions for various X libraries   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new qbittorrent issues   Moritz Muehlenhoff ( at jmm)
  • [Git][security-tracker-team/security-tracker][master] new qbittorrent issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] libowasp-antisamy-java fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] python3.14 fixed in sid   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker] Pushed new branch cpython-cves   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Add tracking bug for CVE-2026-73206/pdns   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-65632/erlang-jose   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add more erlang-jose issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more erlang-json issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch pypy-cves   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Add advisory references for X libraries from update in october   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more libxi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of upstream advisory reference for X library issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-109088/libxtst   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add for consistency as well merge request for followup lbixi issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Asterisk issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new asterisk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: sign-advisory.sh: warn when about to sign an unmodified template   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-107570/mutt   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for some python issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][cpython-cves] Update Python 3.14 CVEs   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Add two new devilutionx issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new llama.cpp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new python-autobahn issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Update Python 3.14 CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Deleted branch cpython-cves   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tornado issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-dompurify issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116748/transmission   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116744/ndpi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] pdns, php-mongodb, openjdk-21, thunderbird DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] fix advisory ID for thunderbird   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reference upstream fix CVE-2026-109828   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][pypy-cves] 30 commits: sign-advisory.sh: warn when about to sign an unmodified template   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reference upstream commit for CVE-2026-43598/rccl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update upstream tag for one qbittorrent issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Update canonical rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add asterisk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process new asterisk issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Three node-dompurify issues fixe in unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new firefox issues from mfsa2026-118   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new firefox-esr issues from mfsa2026-120   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new thunderbird issues from mfsa2026-122   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add firefox-esr and thunderbird to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Cover more products for NVIDIA CNA rule   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: add firefox-esr and thunderbird and assign to @pochu   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for libmime-tools-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4865-1 for bind9   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] 6 commits: lts: mark CVE-2026-95620/qt6-base as not affecting Bookworm   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] LTS: add NOTE for parted in dla-needed.txt   Carlos Henrique Lima Melara ( at charles)
• [Git][security-tracker-team/security-tracker][master] 2 commits: PyPy3 CVEs fixed in stdlib v3.11.17   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker] Deleted branch pypy-cves   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-107891/musl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-100801   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed verison for firefox-esr issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed versions for thunderbird issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libmime-tools-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new phpunit issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-108735/miniflux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for rust-zip issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Process some CVEs related to Nexcloud products   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for php-mongodb issues fixed via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118131/gnupg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new electrum issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch authlib   Stefano Rivera ( at stefanor)
  • [Git][security-tracker-team/security-tracker] Pushed new branch authlib   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] Update CVE-2022-31246/electrum   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-99100/linux   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][authlib] 4 commits: Update CVE-2022-31246/electrum   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Move CVE-2026-104056 to a new bug and add notes   Stefano Rivera ( at stefanor)
• [Git][security-tracker-team/security-tracker] Deleted branch authlib   Stefano Rivera ( at stefanor)
  • [Git][security-tracker-team/security-tracker] Deleted branch authlib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118370/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Details for CVE-2026-116672   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-systeminformation issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new golang-golang-x-net issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-58496/thorvg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118384/mtools   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118375/llama.cpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new LibreSSL issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117610/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-118370/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] ne ruby-crass issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-117610/expat   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117609/rtl-433   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117608/assimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rust-russh issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116694/python-opentelemetry   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116689/node-follow-redirects   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug referencd for thorvg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-authlib issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Pushed new branch dont-list-undetermined-issues   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109258/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Clarify CVE-2026-107651/eog fixed by.   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Split off the non-cveified eog issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] vlc: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Add new SDL_image issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117556/zchunk   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117555/cimg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-117526/node-redux-devtools   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116743/libmsiecf   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python3.13 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] map some chromium issues to skia as well   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-11116{5,6}/libmikmod   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new icingaweb2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new icinga2 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109271   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] libsidplayfp fixed in experimental   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109277/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109274/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] new c-ares issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add three new python-mcp issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-93402/rsyslog   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for libmime-tools-perl advisories   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new libhttp-body-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for openjdk-11 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new kafka issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add rule for postgresql   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116141/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-59959/sail   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116140   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116143   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Remove additional whitespace   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118688/rust-wasmtime   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for aspell issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118681/golang-github-go-chi-chi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118581/mongo-java-driver   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109265/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Process one MongoDB related NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118485/axel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Catch case variants for one Samsung CNA product   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new golang-github-labstack-echo issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] openjdk-25 DSA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add prefix CNA   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116794/rust-russh   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new qpid-proton issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Pentaho   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Samsung Semiconductor   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Zenitel   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-105081   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add Erlang rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-105083   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116145   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] lts: mark CVE-2026-52297,CVE-2026-96611/ffmpeg as not affecting Bookworm   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] 4 commits: lts: fix Bookworm mark for libyang2   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-118258   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new amule issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for CVE-2026-114820   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116742/htslib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116741/speex   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two libvmime issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update for one rejected CVE which was a NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-93851/mattermost-server   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-75520/Domoticz   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add temporary entry for batch of wordpress issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for new qemu issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track new CVEs for Echo web framework   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new kafka issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for wordpress issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109259   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-15564/wildfly   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new epiphany-browser issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4866-1 for firefox-esr   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-114605/dnspython   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new tiger issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Note that Lucas Kanashiro will work on a ruby3.3 update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] lts: add tzdata and libdatetime-timezone-perl   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new fltk issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixes for wordpress via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-golang-x-net issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for qemu issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Correct status for CVE-2026-45070/symfony   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add symfony to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Take kitty   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] new rapidjson issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] dla-needed: add NOTE for python-git   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] new dwarfutils issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4867-1 for tzdata   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4868-1 for libdatetime-timezone-perl   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] new tor issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker] Pushed new branch auto-rejected   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Adjust wo qpid-proton references   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for godot issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][dont-list-undetermined-issues] security_db: don't list undetermined issues for unreported vulns   Emilio Pozuelo Monfort ( at pochu)
• [Git][security-tracker-team/security-tracker][master] Reference full commit id for qpid-proton commits   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference advisory for ironic issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115642/python-keystonemiddleware   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for CVE-2026-114820/OpenJDK   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new composer issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] strongswan: add debian-lts email   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] python-git, tor, imagemagick DSAs   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] patch spu   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4869-1 for vlc   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] Add new batch of dnsmasq issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for two telegram-desktop issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for wordpress update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] LTS: claim ntfs-3g in dla-needed.txt   Simon Quigley ( at tsimonq2)
• [Git][security-tracker-team/security-tracker][master] 2 commits: security_db: don't list undetermined issues for unreported vulns   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker] Deleted branch dont-list-undetermined-issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new nomad issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update some rust-wasmtime issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for some rust-wasmtime issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new imagemagick issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add initial tracking for some request-tracker5 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for Nozomi   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] GHSA-83w9-w85j-h9jc is CVE-2026-116152 fixed by DLA-4858-1   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-109272   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] update notes (closing commits) on libmongocrypt CVEs   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Add incus to dsa-needed list   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add new incus issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-7701   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119053/lwip   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119052/llama.cpp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119025/node-open   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new node-node-forge issues   Salvatore Bonaccorso ( at carnil)
  • [Git][security-tracker-team/security-tracker][master] Add new node-node-forge issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118773/node-glob   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118764/node-minimatch   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118905/nvm   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118756/golang-github-gopasspw-gopass   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-115943/libspreadsheet-xlsx-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118694/python-markdown2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118669/python-oauthlib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118662/node-vite   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-118590/nibabel   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark GHSA-3rgf-297m-775x postponed to better reflect current state   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Mark clamav issues as pending for the next update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference introducing commit for CVE-2026-106569   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add another batch of chromium issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new joserfc issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new set of pypdf issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new pyasn1 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for one phpunit issue   Salvatore Bonaccorso ( at carnil)
• 3,147 earned points entering final validity period   Tesco Rewards Operations
• [Git][security-tracker-team/security-tracker][master] new go jose security issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new snappy-java issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-10920/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Take squid   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] Add new mariadb-connector-java issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] track skia for one chromium issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new golang-github-klauspost-compress issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bugs for two openstack components   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for pyasn1 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new ghostscript issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] add python3.13 commit references   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2026-111925   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE assigned for one eog issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-103963/glib-networking   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] DSA for dpdk   Aron Xu ( at aron)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track fixes via unstable for twisted issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-115642 via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for rust-wasmtime issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add one more rust-wasmtime issue which got fixed in unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4870-1 for antiword   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4871-1 for cyrus-sasl2   Thorsten Alteholz ( at alteholz)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-115943/libspreadsheet-xlsx-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for libhttp-body-perl via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for antiword for non-CVEified issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] cleanup one rejected issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-116130/libhttp-parser-xs-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new issue in fwupd-efi   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference fix for fwupd-efi issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-87768 as NFU   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new blender issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add four new starlet issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] imagemagick/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Add new moodle issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new jellyfin-server issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Forgejo issues, itp'ed   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119528/gimp   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116153/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116142   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] new proftpd-dfsg issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119760/sniproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] update notes (closing commits) on mongo-c-driver CVEs   Roberto C. Sánchez ( at roberto)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119729/gst-plugins-{base,bad}1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119842/gst-plugins-base1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-119777/gst-plugins-bad1.0   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-84243/glibc   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] new pistache issue   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Add CNA rule for ESET   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] new ruby-crass issues   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend vmware rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for nix issues via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two more gst-plugins-bad1.0 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version starlet issues fixed in unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2026-116130/libhttp-parser-xs-perl   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4872-1 for python-git   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add patch links for various python-tornado issues   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] 6 commits: lts: mark CVE-2026-111581/libblockdev as postponed   Daniel Leidert ( at dleidert)
• [Git][security-tracker-team/security-tracker][master] Track fixes for two golang-gvisor-gvisor issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for libnet-idn-encode-perl issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for python-tornado issues via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-110715/mujs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-110716   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-112007   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-119760   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information on CVE-2026-118384/mtool   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-54610/libredwg   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new rust-rustls issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add additional references for rust-rustls issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-97209/elixir-lang   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-63402/node-i18next   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-91920/undertow   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Adjust product name for one ESET product   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-62965/sabnzbdplus   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new libredwg issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of pgadmin4 issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new ladybird issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-93894/vinyl-cache via unstable   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reassociate CVE-2022-40482 for php-laravel-framework   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reassociate two NFUs to php-laravel-framework   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add reference for commit for CVE-2026-118681   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update notes for CVE-2025-40777   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-92705/aegisub   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add references for cockpit-machines issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for rust-rustls-webpki issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two more rust-wasmtime issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust reference to advisory for CVE-2026-115381   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-95619: Replace tab with space in note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-93590: Adjust upstream tag where UHDR was introduced   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reference upstream tag for nodejs commit for CVE-2026-111497   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update information for CVE-2026-101201   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4873-1 for dovecot   Guilhem Moulin ( at guilhem)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-27171: Align style of note   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add GHSA id to temporary subject for c-ares issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116156   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-116158/LTS   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-107157   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-116591 via unstable upload   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-112922/ghostscript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-110133/ghostscript   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag references for some python CVEs   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust upstream tag for CVE-2026-116142   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for proftpd-dfsg issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Adjust upstream tag information for one mongo-c-driver issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag information for CVE-2026-61845   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-119760/sniproxy   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for blender issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Remove one unecessary todo item   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-61725/rust-sevenz-rust2   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Use same bug for libredwg across all entries   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new Tesseract issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] data/CVE/list: CVE-2026-78409 mark as not-affected for bookworm   Emmanuel Arias ( at eamanu)
• [Git][security-tracker-team/security-tracker][master] Add new php-getid3 issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add new botan issues   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-59993/picotls   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for nss update   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] One CVE assigned for libheif issue   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-120194/json-glib   Salvatore Bonaccorso ( at carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4874-1 for eog   Chris Lamb ( at lamby)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4875-1 for imagemagick   Bastien Roucariès ( at rouca)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Broadcom rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] auto-nfu: Extend Erlang rule   Moritz Muehlenhoff ( at jmm)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Add regression fix patch link for CVE-2025-69224/python-aiohttp   Daniel Leidert ( at dleidert)