[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 736c6dd3 by Anton Gladky at 2023-05-08T06:37:55+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -144,6 +144,7 @@ nvidia-graphics-drivers-legacy-390xx (tobi) openimageio (gladk) NOTE: 20230406: Programming language: C. NOTE: 20230406: VCS: https://salsa.debian.org/lts-team/packages/openimageio.git + NOTE: 20230508: WIP -- openjdk-11 (Emilio) NOTE: 20230419: Programming language: Java. @@ -236,6 +237,7 @@ sqlparse (guilhem) sssd (gladk) NOTE: 20230131: Programming language: C. NOTE: 20230205: VCS: https://salsa.debian.org/lts-team/packages/sssd.git + NOTE: 20230508: WIP -- webkit2gtk (Emilio) NOTE: 20230503: Programming language: C++. View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/736c6dd358bc522f22d220848f635e54cdc4983a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/736c6dd358bc522f22d220848f635e54cdc4983a You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update, reclaim abcm2ps, libxml2 (git push failed before....)
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: fa399d91 by Anton Gladky at 2022-04-05T06:16:46+02:00 LTS: status update, reclaim abcm2ps, libxml2 (git push failed before) - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -13,7 +13,8 @@ To make it easier to see the entire history of an update, please append notes rather than remove/replace existing ones. -- -abcm2ps +abcm2ps (Anton) + NOTE: 20220403: https://salsa.debian.org/lts-team/packages/abcm2ps -- ansible NOTE: 20210411: As discussed with the maintainer I will update Buster first and @@ -80,7 +81,8 @@ libpgjava -- libvirt (Thorsten Alteholz) -- -libxml2 +libxml2 (Anton) + NOTE: 20220403: https://salsa.debian.org/lts-team/packages/libxml2 -- libz-mingw-w64 NOTE: 20220231: upcoming DSA (Beuc) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa399d91e4a52fc443374de7c6119ae93dcbd9e6 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa399d91e4a52fc443374de7c6119ae93dcbd9e6 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 23950630 by Anton Gladky at 2022-02-27T12:02:31+01:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -47,6 +47,7 @@ gif2apng (Anton) NOTE: 20220114: orphaned package with inactive upstream, maybe coordinate with Debian QA to write our own patches (Beuc) NOTE: 20220114: CVEs unrelated to apng2gif's (Beuc) NOTE: 20220221: WIP (Anton) + NOTE: 20220221: CVE-2021-45909 is fixed. (Anton) -- gpac (Roberto C. Sánchez) NOTE: 20211101: coordinating with secteam for s-p-u since stretch/buster versions match (roberto) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2395063015ca64bf6341fe534ab787e5335b0d75 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2395063015ca64bf6341fe534ab787e5335b0d75 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 2568fb02 by Anton Gladky at 2022-02-06T21:30:55+01:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -76,7 +76,7 @@ pjproject (Abhijith PA) -- python2.7 (Anton) NOTE: 20220112: 3 postponed CVEs (Beuc) - NOTE: 20220124: WIP + NOTE: 20220206: WIP https://salsa.debian.org/lts-team/packages/python2.7/ (Anton) -- samba (Utkarsh Gupta) NOTE: 20211128: WIP https://salsa.debian.org/lts-team/packages/samba/ @@ -86,6 +86,7 @@ samba (Utkarsh Gupta) -- ujson (Anton) NOTE: 20220121: please reheck, at least the mentioned function is available in Stretch + NOTE: 20220206: https://salsa.debian.org/lts-team/packages/ujson Investigating, whether affected or not (Anton) -- varnish NOTE: 20220130: also fix no-dsa issues. (utkarsh) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2568fb027e557c1abb4f6fd95ee8f0f14e2acbf6 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2568fb027e557c1abb4f6fd95ee8f0f14e2acbf6 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: Status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 4c501aa2 by Anton Gladky at 2022-01-03T20:25:23+01:00 LTS: Status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -113,4 +113,5 @@ vim (Anton) NOTE: 20211203: so worth fixing in stretch, too. Co-ordinate w/ NOTE: 20211203: Emilio since he's working on it for jessie. (utkarsh) NOTE: 20211220: WIP (Anton) + NOTE: 20220103: Upload is planed this week (Anton) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c501aa28b0ba57342201ed188ce974645576d79 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4c501aa28b0ba57342201ed188ce974645576d79 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: Status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 33bf646a by Anton Gladky at 2021-12-12T20:47:47+01:00 LTS: Status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -81,6 +81,7 @@ rustc (Roberto C. Sánchez) -- samba (Anton) NOTE: 20211128: WIP https://salsa.debian.org/lts-team/packages/samba/ + NOTE: 20211212: Fix is too large, coordination with ELTS-upload -- thunderbird (Emilio) NOTE: 20211122: blocked on toolchain backports (pochu) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33bf646aa3fc603dc34fc43cf8cd56c5db150169 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33bf646aa3fc603dc34fc43cf8cd56c5db150169 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: Status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 803cf5ce by Anton Gladky at 2021-11-21T21:45:27+01:00 LTS: Status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -38,9 +38,10 @@ firmware-nonfree (Markus Koschany) NOTE: 20210828: Most CVEs are difficult to backport. Contacted Ben regarding possible "ignore" tag -- gerbv (Anton) - NOTE: 20210711: The fix has only one-line! But... be sure that the fix will help. (Anton) - NOTE: 20210711: Please take the package if you can reproduce the issue with valgrind/AddressSanitizer/Leaksanitizer (Anton) - NOTE: 20210711: The simple fix will unlikely help. (Anton) + NOTE: 20211107: The fix has only one-line! But... be sure that the fix will help. (Anton) + NOTE: 20211107: Please take the package if you can reproduce the issue with valgrind/AddressSanitizer/Leaksanitizer (Anton) + NOTE: 20211107: The simple fix will unlikely help. (Anton) + NOTE: 20211121: Still needs to be investigated with extra-tool. (Anton) -- gmp (Anton) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/803cf5ce7671144a41f12f31e44ebce2d62dcdef -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/803cf5ce7671144a41f12f31e44ebce2d62dcdef You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 738d7339 by Anton Gladky at 2021-11-01T20:59:57+01:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -21,6 +21,7 @@ ansible bind9 (Markus Koschany) -- botan1.10 (Anton Gladky) + NOTE: 20211101: almost ready to be uploaded (gladk) -- debian-archive-keyring NOTE: https://lists.debian.org/debian-lts/2021/08/msg00037.html @@ -38,6 +39,7 @@ ffmpeg (Anton Gladky) NOTE: probably wait until stuff is fixed in Buster NOTE: 20211010: WIP https://salsa.debian.org/lts-team/packages/ffmpeg NOTE: ffmpeg 3.2.16 has been released + NOTE: 20211101: preparing an update (gladk) -- firefox-esr (Emilio) -- @@ -68,6 +70,7 @@ linux (Ben Hutchings) linux-4.19 (Ben Hutchings) -- ntfs-3g (Anton Gladky) + NOTE: 20211101: too many CVEs (gladk) -- nvidia-graphics-drivers NOTE: package is in non-free but also in packages-to-support View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/738d73399ed1936d2ce10e7206e37a6f038571fa -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/738d73399ed1936d2ce10e7206e37a6f038571fa You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: f44355f6 by Anton Gladky at 2021-10-10T22:30:48+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -36,6 +36,7 @@ faad2 (Thorsten Alteholz) -- ffmpeg (Anton Gladky) NOTE: probably wait until stuff is fixed in Buster + NOTE: 20211010: WIP https://salsa.debian.org/lts-team/packages/ffmpeg -- firefox-esr (Emilio) -- @@ -57,6 +58,7 @@ mosquitto NOTE: 20210806: CVE-2021-34432 ignored in buster and stretch. Vulnerable code not accessible. (codehelp) -- nghttp2 (Anton Gladky) + NOTE: 20211010: WIP https://salsa.debian.org/lts-team/packages/nghttp2 -- ntfs-3g (Abhijith PA) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f44355f63450c7d598b3706777d2a54e9d8bcf60 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f44355f63450c7d598b3706777d2a54e9d8bcf60 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update, unclaim firmware-nonfree
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: d69713ca by Anton Gladky at 2021-08-30T13:47:11+02:00 LTS: status update, unclaim firmware-nonfree - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -23,10 +23,9 @@ btrbk (Thorsten Alteholz) cacti (Roberto C. Sánchez) NOTE: 20210829: not really sure whether affected, please recheck -- -firmware-nonfree (Anton Gladky) +firmware-nonfree NOTE: 20210731: WIP: https://salsa.debian.org/lts-team/packages/firmware-nonfree - NOTE: 20210815: Planed to be finished on CW 34/2021 - NOTE: 20210822: Work is delayed due to urgent regression fix in another package + NOTE: 20210828: Most CVEs are difficult to backport. Contacted Ben regarding possible "ignore" tag -- grilo (Thorsten Alteholz) NOTE: 20210825: ssl-use-system-ca-file is used in libsoup2.4 since version 2.38 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d69713caaf7ba99e13498bd337c4c538ad4f0002 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d69713caaf7ba99e13498bd337c4c538ad4f0002 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 86bbe58c by Anton Gladky at 2021-08-22T22:08:55+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -27,6 +27,7 @@ exiv2 (Utkarsh Gupta) firmware-nonfree (Anton Gladky) NOTE: 20210731: WIP: https://salsa.debian.org/lts-team/packages/firmware-nonfree NOTE: 20210815: Planed to be finished on CW 34/2021 + NOTE: 20210822: Work is delayed due to urgent regression fix in another package -- gpac (Thorsten Alteholz) NOTE: 20210815: WIP, almost done, still testing package View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86bbe58c8070978c22a54817f424d71b5c1c97f7 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86bbe58c8070978c22a54817f424d71b5c1c97f7 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: 7cb20d44 by Anton Gladky at 2021-08-15T23:36:07+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -26,6 +26,7 @@ exiv2 (Utkarsh Gupta) -- firmware-nonfree (Anton Gladky) NOTE: 20210731: WIP: https://salsa.debian.org/lts-team/packages/firmware-nonfree + NOTE: 20210815: Planed to be finished on CW 34/2021 -- gpac (Thorsten Alteholz) NOTE: 20210815: WIP, almost done, still testing package View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cb20d44e41a4917238fe63fcdf172fbffbfa04b -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cb20d44e41a4917238fe63fcdf172fbffbfa04b You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: c9bc882b by Anton Gladky at 2021-07-30T16:23:16+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -53,8 +53,10 @@ ffmpeg (Anton Gladky) NOTE: 20210607: won't just be dropped too, etc. etc. (lamby) NOTE: 20210719: https://salsa.debian.org/lts-team/packages/ffmpeg/-/blob/master/debian/changelog NOTE: 20210719: CVE-2020-22036 and CVE-2020-22032 are done. Many false-positive. Investigating. + NOTE: 20210730: CVE-2020-22031 and CVE-2020-22028 are done. Checking rest of patches. Try to reproduce -- firmware-nonfree (Anton Gladky) + NOTE: 20210731: WIP: https://salsa.debian.org/lts-team/packages/firmware-nonfree -- gpac (Thorsten Alteholz) NOTE: 20210719: WIP View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9bc882bd4714569b99ec41941fe3351ad858629 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c9bc882bd4714569b99ec41941fe3351ad858629 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: cab3b117 by Anton Gladky at 2021-07-04T20:43:28+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -48,7 +48,7 @@ ffmpeg (Anton Gladky) NOTE: 20210607: going forward. There is a 3.4.x release branch, for example, NOTE: 20210607: but unclear on the compatibility as well as whether this one NOTE: 20210607: won't just be dropped too, etc. etc. (lamby) - NOTE: 20210621: WIP + NOTE: 20210704: WIP -- firmware-nonfree -- @@ -118,6 +118,7 @@ salt -- scilab (Anton Gladky) NOTE: 20210615: vulnerability in embedded ezXML.(abhijith) + NOTE: 20210704: WIP -- shiro (Roberto C. Sánchez) NOTE: 20200920: WIP @@ -129,5 +130,5 @@ shiro (Roberto C. Sánchez) sogo (Anton Gladky) NOTE: 20210603: maybe mention in announcement the recommendation to invalidate user NOTE: 20210603: sessions (see upstream blog). (pochu) - NOTE: 20210621: WIP + NOTE: 20210704: WIP -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cab3b117344580b4707a3751769548affa23f302 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cab3b117344580b4707a3751769548affa23f302 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: Status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: cb4aff19 by Anton Gladky at 2021-06-21T06:54:58+02:00 LTS: Status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -47,6 +47,7 @@ ffmpeg (Anton Gladky) NOTE: 20210607: going forward. There is a 3.4.x release branch, for example, NOTE: 20210607: but unclear on the compatibility as well as whether this one NOTE: 20210607: won't just be dropped too, etc. etc. (lamby) + NOTE: 20210621: WIP -- gpac (Thorsten Alteholz) NOTE: 20210620: WIP @@ -126,6 +127,7 @@ slapi-nis (Thorsten Alteholz) sogo (Anton Gladky) NOTE: 20210603: maybe mention in announcement the recommendation to invalidate user NOTE: 20210603: sessions (see upstream blog). (pochu) + NOTE: 20210621: WIP -- xmlbeans NOTE: 20210222: Affected code changed significantly from 2.6.0 to 3.0.0 (the View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb4aff194fefa5685c0eceaf672d262552b3c6ef -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb4aff194fefa5685c0eceaf672d262552b3c6ef You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
[Git][security-tracker-team/security-tracker][master] LTS: status update
Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker Commits: ae3d76eb by Anton Gladky at 2021-05-16T18:24:28+02:00 LTS: status update - - - - - 1 changed file: - data/dla-needed.txt Changes: = data/dla-needed.txt = @@ -66,8 +66,10 @@ gsoap (Abhijith PA) imagemagick (Anton Gladky) NOTE: 20210415: Tracker records as vulnerable to CVE-2021-20312, but parts of NOTE: 20210415: patch already partly covered; needs investigation. (lamby) + NOTE: 20210516: WIP -- libwebp (Anton Gladky) + NOTE: 20210516: WIP -- linux (Ben Hutchings) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3d76eb6d2e129a0457feb8c17872d646259853 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3d76eb6d2e129a0457feb8c17872d646259853 You're receiving this email because of your account on salsa.debian.org. ___ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
