Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2671c864 by Bastien Roucariès at 2025-04-21T01:44:42+02:00
Reserve DLA-4132-1 for erlang
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -22077,7 +22077,6 @@ CVE-2025-27091 (OpenH264 is a free license codec
library which supports H.264 en
CVE-2025-26618 (Erlang is a programming language and runtime system for
building massi ...)
{DSA-5906-1}
- erlang 1:27.2.4+dfsg-1
- [bullseye] - erlang <postponed> (Minor issue)
NOTE:
https://github.com/erlang/otp/security/advisories/GHSA-78cv-45vx-q6fr
NOTE:
https://github.com/erlang/otp/commit/0ed2573cbd55c92e9125c9dc70fa1ca7fed82872
(OTP-25.3.2.18, OTP-26.2.5.9, OTP-27.2.4)
CVE-2025-26311 (Multiple memory leaks have been identified in the clip actions
parsing ...)
@@ -140497,7 +140496,6 @@ CVE-2023-48795 (The SSH transport protocol with
certain OpenSSH extensions, foun
[bullseye] - dropbear 2020.81-3+deb11u1
[buster] - dropbear <not-affected> (ChaCha20-Poly1305 support
introduced in 2020.79; *-EtM not supported as of 2022.83)
- erlang 1:25.3.2.8+dfsg-1 (bug #1059002)
- [bullseye] - erlang <no-dsa> (Minor issue)
[buster] - erlang <no-dsa> (Minor issue)
- filezilla 3.66.4-1
[bookworm] - filezilla 3.63.0-1+deb12u3
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[21 Apr 2025] DLA-4132-1 erlang - security update
+ {CVE-2023-48795 CVE-2025-26618 CVE-2025-30211 CVE-2025-32433}
+ [bullseye] - erlang 1:23.2.6+dfsg-1+deb11u2
[19 Apr 2025] DLA-4131-1 zabbix - security update
{CVE-2024-36469 CVE-2024-42325 CVE-2024-45699 CVE-2024-45700}
[bullseye] - zabbix 1:5.0.46+dfsg-1+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -65,10 +65,6 @@ edk2 (Markus Koschany)
NOTE: 20240815: (10 ipv6-related, postponed CVEs), plus there are older
postponed vulnerabilities (Beuc/front-desk)
NOTE: 20241105: maintainer proposed opu debdiff for CVE-2024-38796 and
CVE-2024-1298, https://bugs.debian.org/1086762 (santiago)
--
-erlang (rouca)
- NOTE: 20250402: Added by Front-Desk (Beuc)
- NOTE: 20250412: Wait for review (rouca)
---
espeak-ng
NOTE: 20240816: Added by Front-Desk (Beuc)
NOTE: 20240816: Follow fixes from bookworm 12.5 (5 CVEs) (Beuc/front-desk)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2671c8641a4ccee23c9b04258da9c36ed788dbe4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2671c8641a4ccee23c9b04258da9c36ed788dbe4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
