[Git][security-tracker-team/security-tracker][master] tryton-server DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
69feb01c by Moritz Mühlenhoff at 2026-09-06T13:01:11+02:00
tryton-server DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -82,6 +82,7 @@ CVE-2026-85498 [Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack b
 	NOTE: The fix for CVE-2026-4897 introduces th new stack buffer underflow issue.
 CVE-2026-XXXX [tryton-server: Python code execution via uploaded templates]
 	- tryton-server 7.0.53-1
+	[trixie] - tryton-server 7.0.30-1+deb13u2
 	NOTE: https://discuss.tryton.org/t/security-release-for-issue-5160-and-14869/9266
 	NOTE: https://foss.heptapod.net/tryton/tryton/-/work_items/5160
 	NOTE: https://foss.heptapod.net/tryton/tryton/-/work_items/14869


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[06 Sep 2026] DSA-6485-1 tryton-server - security update
+	[trixie] - tryton-server 7.0.30-1+deb13u2
 [05 Sep 2026] DSA-6484-1 chromium - security update
 	{CVE-2026-85042 CVE-2026-85043 CVE-2026-85044 CVE-2026-85045 CVE-2026-85046 CVE-2026-85047 CVE-2026-85048 CVE-2026-85049 CVE-2026-85050 CVE-2026-85051 CVE-2026-85052 CVE-2026-85053}
 	[trixie] - chromium 152.0.7977.82-1~deb13u1


=====================================
data/dsa-needed.txt
=====================================
@@ -158,8 +158,6 @@ tomcat10
 --
 tomcat11
 --
-tryton-server (jmm)
---
 unbound
   Michael Tokarev is working on rebasing to 1.25.2 (possibly 1.26.0)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69feb01cfd7ca11897062d30b8aa9ecc2899e72e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/69feb01cfd7ca11897062d30b8aa9ecc2899e72e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260906/2af23c21/attachment.htm>