Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits: f05be437 by Sylvain Beucler at 2026-07-13T11:38:37+02:00 lts: add freerdp2/bookworm - - - - - 0b023903 by Sylvain Beucler at 2026-07-13T11:50:49+02:00 CVE-2026-34743/xz-utils: fix bookworm version Error from initial OSPU, cf. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140801#57 - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -68265,7 +68265,7 @@ CVE-2026-5292 (Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7 CVE-2026-34743 (XZ Utils provide a general-purpose data-compression library plus comma ...) - xz-utils 5.8.3-1 (bug #1132497) [trixie] - xz-utils 5.8.1-1+deb13u1 - [bookworm] - xz-utils 5.4.1-2+deb12u1 + [bookworm] - xz-utils 5.4.1-1+deb12u1 [bullseye] - xz-utils <postponed> (Minor issue) NOTE: https://tukaani.org/xz/index-append-overflow.html NOTE: Fixed by: https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87 (v5.8.3) ===================================== data/dla-needed.txt ===================================== @@ -179,9 +179,10 @@ flatpak/bullseye fontforge/bullseye NOTE: 20260216: Added by Front-Desk (rouca) -- -freerdp2/bullseye +freerdp2 NOTE: 20260127: Added by Front-Desk (Beuc) NOTE: 20260127: Many CVEs fixed in 3.20.1 and 3.21, but missing fix commits (Beuc/front-desk) + NOTE: 20260713: Also add for bookworm-lts (Beuc/front-desk) -- frr/bullseye NOTE: 20251102: Added by Front-Desk (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3251abe0549eac0ed8ea1b11f122e3195ea08643...0b023903790d4fad6e5815c4e21a9f292ff9b423 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/3251abe0549eac0ed8ea1b11f122e3195ea08643...0b023903790d4fad6e5815c4e21a9f292ff9b423 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
