Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
11a3790f by Moritz Muehlenhoff at 2025-09-17T11:02:39+02:00
bookworm/trixie triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -189,6 +189,7 @@ CVE-2025-52044 (In Frappe ERPNext v15.57.5, the function
get_stock_balance() at
NOT-FOR-US: Frappe ERPNext
CVE-2025-4953 (A flaw was found in Podman. In a Containerfile or Podman, data
written ...)
- podman <unfixed>
+ [trixie] - podman <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2367235
TODO: check details
CVE-2025-4688 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
@@ -30187,6 +30188,7 @@ CVE-2025-48988 (Allocation of Resources Without Limits
or Throttling vulnerabili
CVE-2025-48976 (Allocation of resources for multipart headers with
insufficient limits ...)
{DLA-4245-1 DLA-4244-1}
- libcommons-fileupload-java <unfixed> (bug #1108120)
+ [trixie] - libcommons-fileupload-java <no-dsa> (Minor issue)
[bookworm] - libcommons-fileupload-java <no-dsa> (Minor issue)
- tomcat11 <unfixed> (bug #1108118)
- tomcat10 <unfixed> (bug #1108119)
=====================================
data/dsa-needed.txt
=====================================
@@ -25,6 +25,8 @@ frr/oldstable
cpp-httplib
Maintainer preparing updates, waiting for feedback on bookworm status
--
+ffmpeg/stable (jmm)
+--
gh/oldstable
Santiago Vila might work on preparing an update
--
@@ -33,10 +35,10 @@ intel-microcode (carnil)
--
jackson-core
--
-jetty9
+jetty9 (jmm)
Adrian Bunk sent debdiffs for review
--
-jetty12/stable
+jetty12/stable (jmm)
Adrian Bunk sent debdiffs for review
--
libreswan/oldstable
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11a3790fa5ba3c08515f4072cc8dba2b6f7f8fbd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11a3790fa5ba3c08515f4072cc8dba2b6f7f8fbd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
