[Git][security-tracker-team/security-tracker][master] Revert "two older no-dsa issues also got fixed in recent fort-validator DSA"

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
63f2e576 by Salvatore Bonaccorso at 2026-09-11T05:09:27+02:00
Revert "two older no-dsa issues also got fixed in recent fort-validator DSA"

This reverts commit b4f3686f1feaec6698926bfccfe942c2772b3e25.

Those issues were not fixed yet but eventually in a future 2.x rewrite.

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -306222,12 +306222,14 @@ CVE-2024-48943
 CVE-2024-56170 (A validation integrity issue was discovered in Fort through 1.6.4 befo ...)
 	{DSA-6490-1}
 	- fort-validator <unfixed> (bug #1090916)
+	[trixie] - fort-validator <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - fort-validator <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - fort-validator <postponed> (Minor issue, wait until it's fixed upstream)
 	NOTE: https://github.com/NICMx/FORT-validator/issues/82
 CVE-2024-56169 (A validation integrity issue was discovered in Fort through 1.6.4 befo ...)
 	{DSA-6490-1}
 	- fort-validator <unfixed> (bug #1090916)
+	[trixie] - fort-validator <postponed> (Minor issue, revisit when fixed upstream)
 	[bookworm] - fort-validator <postponed> (Minor issue, revisit when fixed upstream)
 	[bullseye] - fort-validator <postponed> (Minor issue, wait until it's fixed upstream)
 	NOTE: https://github.com/NICMx/FORT-validator/issues/82


=====================================
data/DSA/list
=====================================
@@ -5,7 +5,7 @@
 	{CVE-2026-65107 CVE-2026-65108 CVE-2026-65109 CVE-2026-65138 CVE-2026-65139 CVE-2026-65140 CVE-2026-65165}
 	[trixie] - slurm-wlm 24.11.5-4+deb13u1
 [08 Sep 2026] DSA-6490-1 fort-validator - security update
-	{CVE-2026-53499 CVE-2024-56169 CVE-2024-56170}
+	{CVE-2026-53499}
 	[trixie] - fort-validator 1.6.8-0+deb13u1
 [08 Sep 2026] DSA-6489-1 gst-plugins-base1.0 - security update
 	{CVE-2026-18297}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63f2e576bb52ce9fd7904fe9a1e1685ada195798

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/63f2e576bb52ce9fd7904fe9a1e1685ada195798
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/c2e560aa/attachment.htm>