[Git][security-tracker-team/security-tracker][master] Reserve DLA-4803-1 for ruby-oj

[Simon Quigley (@tsimonq2)]

Simon Quigley pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6480791e by Simon Quigley at 2026-09-30T08:10:57-05:00
Reserve DLA-4803-1 for ruby-oj

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 Sep 2026] DLA-4803-1 ruby-oj - security update
+	{CVE-2026-54500 CVE-2026-54502 CVE-2026-54592 CVE-2026-54896 CVE-2026-54897 CVE-2026-54898 CVE-2026-54899 CVE-2026-54900 CVE-2026-54901 CVE-2026-54902 CVE-2026-54903}
+	[bookworm] - ruby-oj 3.14.2-1+deb12u1
 [29 Sep 2026] DLA-4802-1 python-django - security update
 	{CVE-2026-48587 CVE-2026-48588}
 	[bookworm] - python-django 3:3.2.25-0+deb12u5


=====================================
data/dla-needed.txt
=====================================
@@ -659,10 +659,6 @@ rsyslog
 ruby-oauth2
   NOTE: 20260805: Added by Front-Desk (rouca)
 --
-ruby-oj (Simon Quigley)
-  NOTE: 20260709: Added by Front-Desk (utkarsh)
-  NOTE: 20260709: Oj JSON parser memory-safety batch CVE-2026-54500..54903 (GHSA); affects 2.17-3.14.
---
 ruby3.1
   NOTE: 20260713: Added by Front-Desk (Beuc)
   NOTE: 20260523: Bumping to new upstream rejected by SRM, do backport patches:



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6480791e98cd9782a38f276206ed812b0ec481c6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6480791e98cd9782a38f276206ed812b0ec481c6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/6c8a34db/attachment-0001.htm>