Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker
Commits: 95bac970 by Roberto C. Sánchez at 2025-05-19T08:57:58-04:00 LTS: update notes on mongo-c-driver - - - - - 38e0634d by Roberto C. Sánchez at 2025-05-19T08:58:53-04:00 semi-automatic unclaim after 2 weeks of inactivity Signed-off-by: Roberto C. Sánchez <[email protected]> - - - - - 1 changed file: - data/dla-needed.txt Changes: ===================================== data/dla-needed.txt ===================================== @@ -158,7 +158,7 @@ knot-resolver (eamanu) NOTE: 20240924: Added by Front-Desk (lamby) NOTE: 20250506: Writting to upstream to get a PoC to reproduce open CVEs. -- -krb5 (rouca) +krb5 NOTE: 20250422: Added by Front-Desk (rouca) NOTE: 20250422: Backporting knob allow_des3 and allow_rc4 variables in [libdefaults] may be suffisant (rouca) NOTE: 20250504: Bookworm PU on review (rouca) @@ -192,7 +192,7 @@ libsoup2.4 (Sean Whitton) NOTE: 20250519: Back to work on this now. NOTE: 20250519: Asked ah to take a look at CVE-2024-46421. (spwhitton) -- -libstring-compare-constanttime-perl (guilhem) +libstring-compare-constanttime-perl NOTE: 20250412: Added by Front-Desk (Beuc) NOTE: 20250412: Upstream has been dormant, but there's a patch proposal from RedHat. NOTE: 20250412: Coordinate with them? @@ -231,6 +231,8 @@ mina2 mongo-c-driver (roberto) NOTE: 20250331: Added by Front-Desk (apo) NOTE: 20250418: submitted to bookworm-pu, https://bugs.debian.org/1103557 (roberto) + NOTE: 20250519: PU was accepted 20250426 and went into bookworm 12.11 (roberto) + NOTE: 20250519: WIP, but nearly done with backporting the patches (roberto) -- musl NOTE: 20250217: Added by Front-Desk (Beuc) @@ -315,7 +317,7 @@ pagure pgagent NOTE: 20250117: Added by Front-Desk (rouca) -- -pgbouncer (lee) +pgbouncer NOTE: 20250422: Added by Front-Desk (rouca) -- php-horde-css-parser @@ -396,7 +398,7 @@ trafficserver twitter-bootstrap3 NOTE: 20250519: Added by Front-Desk (apo) -- -u-boot (dleidert) +u-boot NOTE: 20250219: Added by Front-Desk (Beuc) NOTE: 20250219: New CVEs, plus it's time to fix all the no-dsa&postponed CVEs (Beuc/front-desk) NOTE: 20250501: DLA released; will do another round for remaining two issues (dleidert) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fa88c38a129f5d305f57c98eaa574dc62a1ed41...38e0634d18f40429fcfdd44b9181d5fdce45463c -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0fa88c38a129f5d305f57c98eaa574dc62a1ed41...38e0634d18f40429fcfdd44b9181d5fdce45463c You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
