Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
83ebfc91 by Moritz Muehlenhoff at 2026-06-23T17:52:55+02:00
trixie triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -385,21 +385,23 @@ CVE-2026-53550 (js-yaml is a JavaScript YAML parser and
dumper. Prior to 4.2.0,
TODO: check
CVE-2026-53540 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- python-multipart <unfixed>
+ [trixie] - python-multipart <no-dsa> (Minor issue)
NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-v9pg-7xvm-68hf
NOTE: https://github.com/Kludex/python-multipart/pull/297
NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/c814948acf509cef7881fa75c969969b19239bbf
(0.0.31)
CVE-2026-53539 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- python-multipart <unfixed>
+ [trixie] - python-multipart <no-dsa> (Minor issue)
NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-5rvq-cxj2-64vf
NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/d69df35cd2cad9c72794c2c340db646afae957d8
(0.0.30)
- TODO: check correctness commit
CVE-2026-53538 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- python-multipart <unfixed>
+ [trixie] - python-multipart <no-dsa> (Minor issue)
NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-6jv3-5f52-599m
NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/d69df35cd2cad9c72794c2c340db646afae957d8
(0.0.30)
- TODO: check correctness commit
CVE-2026-53537 (Python-Multipart is a streaming multipart parser for Python.
Prior to ...)
- python-multipart <unfixed>
+ [trixie] - python-multipart <no-dsa> (Minor issue)
NOTE:
https://github.com/Kludex/python-multipart/security/advisories/GHSA-vffw-93wf-4j4q
NOTE: Fixed by:
https://github.com/Kludex/python-multipart/commit/3506c15ce99cb62faf2d5ceb3c4c1e5800cb843d
(0.0.30)
CVE-2026-52725 (Angular is a development platform for building mobile and
desktop web ...)
@@ -21178,16 +21180,19 @@ CVE-2026-28444 (Typebot is a chatbot builder tool. In
versions 3.15.2 and prior,
NOT-FOR-US: TypeBot
CVE-2026-27136 (Parsing arbitrary HTML which is then rendered using Render can
result ...)
- golang-golang-x-net 1:0.55.0-1
+ [trixie] - golang-golang-x-net <no-dsa> (Minor issue)
[bullseye] - golang-golang-x-net <postponed> (Limited support, minor
issue)
NOTE: https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8
NOTE: https://github.com/golang/go/issues/79575
CVE-2026-25681 (Parsing arbitrary HTML which is then rendered using Render can
result ...)
- golang-golang-x-net 1:0.55.0-1
+ [trixie] - golang-golang-x-net <no-dsa> (Minor issue)
[bullseye] - golang-golang-x-net <postponed> (Limited support, minor
issue)
NOTE: https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8
NOTE: https://github.com/golang/go/issues/79574
CVE-2026-25680 (Parsing arbitrary HTML can consume excessive CPU time,
possibly leadin ...)
- golang-golang-x-net 1:0.55.0-1
+ [trixie] - golang-golang-x-net <no-dsa> (Minor issue)
[bullseye] - golang-golang-x-net <postponed> (Limited support, minor
issue)
NOTE: https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8
NOTE: https://github.com/golang/go/issues/79573
@@ -62561,12 +62566,14 @@ CVE-2026-32242 (Parse Server is an open source
backend that can be deployed to a
CVE-2026-32240 (Cap'n Proto is a data interchange format and capability-based
RPC syst ...)
[experimental] - capnproto 1.4.0-1
- capnproto 1.4.0-2 (bug #1130877)
+ [trixie] - capnproto <no-dsa> (Minor issue)
[bullseye] - capnproto <postponed> (minor issue)
NOTE:
https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm
NOTE: Fixed by:
https://github.com/capnproto/capnproto/commit/2744b3c012b4aa3c31cefb61ec656829fa5c0e36
(v1.4.0)
CVE-2026-32239 (Cap'n Proto is a data interchange format and capability-based
RPC syst ...)
[experimental] - capnproto 1.4.0-1
- capnproto 1.4.0-2 (bug #1130877)
+ [trixie] - capnproto <no-dsa> (Minor issue)
[bullseye] - capnproto <postponed> (minor issue)
NOTE:
https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm
NOTE: Fixed by:
https://github.com/capnproto/capnproto/commit/2744b3c012b4aa3c31cefb61ec656829fa5c0e36
(v1.4.0)
=====================================
data/dsa-needed.txt
=====================================
@@ -90,7 +90,7 @@ rust-wasmtime
--
shaarli
--
-sogo
+sogo (jmm)
Peter Wienemann proposed debdiff for review
--
util-linux
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ebfc914a0fc17c55493ef329207c5d00595a67
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ebfc914a0fc17c55493ef329207c5d00595a67
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
