Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f655d956 by Moritz Mühlenhoff at 2025-10-14T23:02:26+02:00
Remove pagure from dsa-needed
When testing a backport is turned out that the package in
bookworm is broken and cannot be used, instead it will
be removed in the next point release.
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -97777,18 +97777,22 @@ CVE-2024-53961 (ColdFusion versions 2023.11, 2021.17
and earlier are affected by
NOT-FOR-US: Adobe
CVE-2024-4982 (A directory traversal vulnerability was discovered in Pagure
server. I ...)
- pagure 5.14.1+dfsg-1 (bug #1091383)
+ [bookworm] - pagure <ignored> (Pagure in Bookworm is non-functional)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2280726
NOTE: Fixed by:
https://pagure.io/pagure/c/c43844d23c919133fc983fe8c0f1dfb3b86e67d0 (5.14.1)
CVE-2024-4981 (A vulnerability was discovered in Pagure server. If a malicious
user w ...)
- pagure 5.14.1+dfsg-1 (bug #1091383)
+ [bookworm] - pagure <ignored> (Pagure in Bookworm is non-functional)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2280723
NOTE: Fixed by:
https://pagure.io/pagure/c/454f2677bc50d7176f07da9784882eb2176537f4 (5.14.1)
CVE-2024-47516 (A vulnerability was found in Pagure. An argument injection in
Git duri ...)
- pagure 5.14.1+dfsg-1 (bug #1091383)
+ [bookworm] - pagure <ignored> (Pagure in Bookworm is non-functional)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2315805
NOTE: Fixed by:
https://pagure.io/pagure/c/1db796dd0fa85c5f30f1e7123638e237f73bc92d (5.14.1)
CVE-2024-47515 (A vulnerability was found in Pagure. Support of symbolic links
during ...)
- pagure 5.14.1+dfsg-1 (bug #1091383)
+ [bookworm] - pagure <ignored> (Pagure in Bookworm is non-functional)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2315806
NOTE: Fixed by:
https://pagure.io/pagure/c/9b715170008bdc1dd273f7c28debe782a8f7969e (5.14.1)
CVE-2024-41887 (Team ENVY, a Security Research TEAM has found a flaw that
allows for a ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -55,8 +55,6 @@ netty
opennds/oldstable
pinged maintainer, but no reply yet. should most probably be bumped to 10.x
--
-pagure/oldstable (jmm)
---
php-laravel-framework/oldstable
--
python-django
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f655d9560b69aaa8314f9245905aa0d8a7083718
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f655d9560b69aaa8314f9245905aa0d8a7083718
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
