Arnaud Rebillout pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cb704e62 by Arnaud Rebillout at 2026-05-15T11:30:52+07:00
Reserve DLA-4583-1 for python3.9
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[15 May 2026] DLA-4583-1 python3.9 - security update
+ {CVE-2025-13462 CVE-2026-0672 CVE-2026-2297 CVE-2026-3644 CVE-2026-4224
CVE-2026-4519}
+ [bullseye] - python3.9 3.9.2-1+deb11u7
[14 May 2026] DLA-4582-1 thunderbird - security update
{CVE-2026-8090 CVE-2026-8092 CVE-2026-8094}
[bullseye] - thunderbird 1:140.10.2esr-1~deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -442,16 +442,6 @@ python-flask-httpauth (eamanu)
NOTE: 20260419: Added by Front-Desk (rouca)
NOTE: 20260423: Fix already created for all releases. NMU to fix in
unstable. All coordinated with maintainer.
--
-python3.9 (arnaudr)
- NOTE: 20260307: Added by Front-Desk (lamby)
- NOTE: 20260307: Added re. CVE-2025-69534 but please also check
CVE-2026-2297. (lamby)
- NOTE: 20260320: Did the work to fix 4 CVEs, however we need to tidy up
bookworm first, cf.
- NOTE: 20260320:
https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/308 (arnaudr)
- NOTE: 20260320: I pinged andrewsh to ask if I should hand it over to him, or
if I keep going (arnaudr)
- NOTE: 20260402: Pushed some work in progress on the packaging branch,
addressing most CVEs,
- NOTE: 20260402: now we need to wait for upstream to apply those patches (PRs
are not merged yet),
- NOTE: 20260402: and then for Debian (old)stable to follow suit (arnaudr)
---
rabbitmq-server
NOTE: 20260504: Added by coordinator (santiago)
NOTE: 20260504: Added to address out-standing minor issues
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb704e62a2fb03f5006c9da45fa02b6632f20efd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb704e62a2fb03f5006c9da45fa02b6632f20efd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
