Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3a4ce214 by Moritz Muehlenhoff at 2026-06-19T17:17:17+02:00
trixie triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1256,6 +1256,7 @@ CVE-2026-48781 (Postiz is an AI social media scheduling
tool. In versions prior
NOT-FOR-US: Postiz
CVE-2026-48779 (ws is an open source WebSocket client and server for Node.js.
All vers ...)
- node-ws <unfixed>
+ [trixie] - node-ws <no-dsa> (Minor issue)
NOTE:
https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p
CVE-2026-48777 (FileBrowser Quantum is a free, self-hosted, web-based file
manager. Ve ...)
NOT-FOR-US: FileBrowser Quantum
@@ -2665,10 +2666,12 @@ CVE-2024-22447 (Dell Peripheral Manager, versions prior
to 1.7.3, contain an unc
NOT-FOR-US: Dell / EMC
CVE-2026-XXXX [ToUnicode read-out-bounds]
- libidn 1.44-1
+ [trixie] - libidn <no-dsa> (Minor issue)
NOTE:
https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.html
NOTE:
https://lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.html
CVE-2026-46448 (In OpenStack Nova before 33.0.2, the server create API does
not strip ...)
- nova <unfixed> (bug #1140149)
+ [trixie] - nova <no-dsa> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/06/16/5
NOTE: https://launchpad.net/bugs/2151252
CVE-2026-10649 (A flaw was found in Pacemaker. An unauthenticated remote
attacker can ...)
@@ -4259,9 +4262,11 @@ CVE-2026-28742 (Naxclow devices use a uniform
request-signing scheme based on a
NOT-FOR-US: Naxclow
CVE-2026-1836 (The system stores the username and password from the login form
after ...)
- redmine <unfixed>
+ [trixie] - redmine <no-dsa> (Minor issue)
NOTE:
https://www.incibe.es/en/incibe-cert/notices/aviso/stored-credentials-redmine
CVE-2026-12143 (form-data is a library for creating readable
multipart/form-data strea ...)
- node-form-data <unfixed> (bug #1139959)
+ [trixie] - node-form-data <no-dsa> (Minor issue)
NOTE:
https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx
CVE-2026-12066 (A security flaw has been discovered in PbootCMS up to 3.2.12.
This vul ...)
NOT-FOR-US: PbootCMS
=====================================
data/dsa-needed.txt
=====================================
@@ -81,6 +81,8 @@ pdfminer (carnil)
perl (carnil)
Comment from maintainer: I'd prefer to wait until upstream gets the point
releases out
--
+pillow (jmm)
+--
prometheus
--
python-urllib3 (jmm)
@@ -103,9 +105,7 @@ shaarli
sogo
Peter Wienemann proposed debdiff for review
--
-squid
---
-thunderbird (jmm)
+squid (jmm)
--
util-linux
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a4ce214572a719bd0dae4ba7298e7fbad1decd4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3a4ce214572a719bd0dae4ba7298e7fbad1decd4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
