Simon Quigley pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6480791e by Simon Quigley at 2026-09-30T08:10:57-05:00
Reserve DLA-4803-1 for ruby-oj
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[30 Sep 2026] DLA-4803-1 ruby-oj - security update
+ {CVE-2026-54500 CVE-2026-54502 CVE-2026-54592 CVE-2026-54896
CVE-2026-54897 CVE-2026-54898 CVE-2026-54899 CVE-2026-54900 CVE-2026-54901
CVE-2026-54902 CVE-2026-54903}
+ [bookworm] - ruby-oj 3.14.2-1+deb12u1
[29 Sep 2026] DLA-4802-1 python-django - security update
{CVE-2026-48587 CVE-2026-48588}
[bookworm] - python-django 3:3.2.25-0+deb12u5
=====================================
data/dla-needed.txt
=====================================
@@ -659,10 +659,6 @@ rsyslog
ruby-oauth2
NOTE: 20260805: Added by Front-Desk (rouca)
--
-ruby-oj (Simon Quigley)
- NOTE: 20260709: Added by Front-Desk (utkarsh)
- NOTE: 20260709: Oj JSON parser memory-safety batch CVE-2026-54500..54903
(GHSA); affects 2.17-3.14.
---
ruby3.1
NOTE: 20260713: Added by Front-Desk (Beuc)
NOTE: 20260523: Bumping to new upstream rejected by SRM, do backport patches:
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6480791e98cd9782a38f276206ed812b0ec481c6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6480791e98cd9782a38f276206ed812b0ec481c6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
