Hi Agustin, On Mon, Oct 19, 2026 at 11:47:13AM +0200, Agustin Martin wrote: > On Fri, Oct 09, 2026 at 09:16:57PM +0200, Salvatore Bonaccorso wrote: > > Source: aspell > > Version: 0.60.8.2-3 > > X-Debbugs-CC: [email protected] > > Severity: important > > Tags: security upstream > > > > Hi, > > > > The following vulnerabilities were published for aspell. > > > > CVE-2026-75818[0]: > ... > > CVE-2026-75819[1]: > ... > > CVE-2026-75820[2]: > ... > > If you fix the vulnerabilities please also make sure to include the > > CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. > > Hi, Salvatore, > > Thanks for the info. Sorry for not replying before, I am waiting for a > new upstream release and seems it is taking longer that expected. > > Since priority is not RC I prefer to wait for that upstream release. Do you > think an upload to stable-security is convenient?
Thanks for replying back! Those issues do not warrant a DSA, so we marked them 'no-dsa' in the security-tracker already. But once the fix is landing in unstable, if feasible fixes could be included in an upcoming point release as well for trixie. But let's see first the issue get fixed in unstable, and waiting for a new upstream version seems fine (as long it is happens before forky get released). Regards, Salvatore
