Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f2453382 by Sylvain Beucler at 2026-07-14T18:07:33+02:00
CVE-2026-3054/sogo: bookworm postponed
Not sure why it wasn't part of DLA-4657-1, anyway, no new DLA just for this.
- - - - -
fc8ab072 by Sylvain Beucler at 2026-07-14T18:17:55+02:00
lts: reference python-authlib updates-task (low pri)
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -86887,7 +86887,8 @@ CVE-2026-3057 (A security flaw has been discovered in
a54552239 pearProjectApi u
CVE-2026-3054 (A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4.
This impa ...)
{DSA-6366-1}
- sogo 5.12.6-1 (bug #1130878)
- [bullseye] - sogo <postponed> (minor issue)
+ [bookworm] - sogo <postponed> (Minor issue, XSS)
+ [bullseye] - sogo <postponed> (Minor issue, XSS)
NOTE: Fixed by:
https://github.com/Alinto/sogo/commit/e821b20f87d1a9757f1d0aff7d1e31703f97054b
(SOGo-5.12.5)
CVE-2026-3053 (A vulnerability was determined in DataLinkDC dinky up to 1.2.5.
This a ...)
NOT-FOR-US: DataLinkDC dinky
=====================================
data/dla-needed.txt
=====================================
@@ -583,6 +583,7 @@ python-aiohttp (dleidert)
python-authlib (andrewsh)
NOTE: 20260709: Added by Front-Desk (utkarsh)
NOTE: 20260709: CVE-2026-41479 (<1.6.10) + CVE-2026-44681 (<=1.6.11); Debian
0.15.4/1.2.0 in range.
+ NOTE: 20260709: See also
https://salsa.debian.org/lts-team/lts-updates-tasks/-/work_items/330
--
python-httplib2
NOTE: 20260709: Added by Front-Desk (utkarsh)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e044ae3366be4c102c74dcdf59c8472611cd19a5...fc8ab07233cca9a3389d590eec6a85ed98777482
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/e044ae3366be4c102c74dcdf59c8472611cd19a5...fc8ab07233cca9a3389d590eec6a85ed98777482
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
