debian-security-tracker-commits  

Messages by Thread

• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-61154/libredwg, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-24097/check-mk Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3082/gst-plugins-bad1.0 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4501-1 for wireless-regdb Ben Hutchings (@benh)
• [Git][security-tracker-team/security-tracker][master] Reserve DLA-4500-1 for gimp Thorsten Alteholz (@alteholz)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for cairosvg issue Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for lexbor issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] golang-github-in-toto-go-witness is in the archive now Moritz Muehlenhoff (@jmm)
• Processing 928c4bf9276f52622d701942e3a31391c7769e32 failed security tracker role
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for inetutils issues Salvatore Bonaccorso (@carnil)
• Processing 4533111f64cba717324dd5999a2348d09ed1e49e failed security tracker role
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-27940/llama.cpp Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new lexbor issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-2859/check-mk, removed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-30853/calibre Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new issues in sftpgo, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31814/rust-yamux Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31899/cairosvg Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32141/node-flatted Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32314/rust-yamux Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32627/cpp-httplib Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32640/simpleeval Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32772/inetutils Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Remove some notes on CVEs which got rejected (issued in error) Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32746/inetutils Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-4111/libarchive Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Only reference rust-quinn-proto for CVE-2026-31812 issue Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-31812: Remove commit related to addition to fuzz_targets Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-32597/pyjwt Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-32249/vim Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-32274/black Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-2673/openssl Debian bug reference Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-31826/pypdf Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-3950/libheif Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Use full commit hash for commit for CVE-2026-2673 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-3950/libheif Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-3949/libheif Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-4105 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] new systemd issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] track second source package for CVE-2026-31812 Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new rust-quinn issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new openssl issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new node-undici issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-3497/openssh Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Reserve DLA-4498-1 for linux Ben Hutchings (@benh)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32597/pyjwt Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] glances fixed in sid Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new chromium issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new capnproto issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32249/vim Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32259/imagemagick Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-32274/black Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new gpac issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two NFUs Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3497/openssh Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] lts: mark CVE-2026-1965,CVE-2026-3783,CVE-2026-3784/curl as postponed Daniel Leidert (@dleidert)
• [Git][security-tracker-team/security-tracker][master] 4 commits: dla-needed: add note about python-aiohttp Daniel Leidert (@dleidert)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update (bookworm) Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA number for linux update (trixie) Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31826/pypdf Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] multipart DSA Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31853/imagemagick Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31900/black Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] dla-needed.txt: Update asterisk status @slyon
• [Git][security-tracker-team/security-tracker][master] Add multipart to dsa-needed list Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-28356/multipart Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] new libheif issues Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-31958/python-tornado Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for glances issues Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Add Debian bug references for glances issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-31870/cpp-httplib issue Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for libsoup3 issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for zookeeper issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-23868/giflib Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Associate one issue to itp'ed entry for quickjs-ng Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] node-yauzl n/a Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] libsixel fixed in sid Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for some openexr issues fixed via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] mold non issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new pdfbox non issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] curl fixed in sid Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new chromium issues Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] new chromium issues Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new giflib issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-2436/libsoup Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Mark CVE-2024-29025,netty as fixed in bookworm Markus Koschany (@apo)
• [Git][security-tracker-team/security-tracker][master] Reserve DSA-6160-1 for netty Markus Koschany (@apo)
• [Git][security-tracker-team/security-tracker][master] Add a note about imagemagick DLA @rouca
• [Git][security-tracker-team/security-tracker][master] DLA-4497-1 @rouca
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29777/traefik, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31852/jellyfin, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31870/cpp-httplib Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31958/python-tornado Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3848/gitlab Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] IM triage Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] IM triage Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-3904/glibc Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3904/glibc Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Claim postgresql-13 Jochen Sprickerhof (@jspricke)
• [Git][security-tracker-team/security-tracker][master] sylpheed spu/ospu Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-21619/rebar3 via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3805/curl Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3784/curl Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3783/curl Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-1965/curl Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new glances issues Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Add two new glances issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for firefox issues from mfsa2026-19 via unstable upload Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for various imagemagick issues fixed via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] imagemagick triage Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] imagemagick triage Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] imagemagick triage Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] fix typo Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] imagemagick DSA Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] imagemagick DSA Moritz Muehlenhoff (@jmm)
  • [Git][security-tracker-team/security-tracker][master] imagemagick DSA Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Process new NFUs Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add new firefox issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-3606/ettercap Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track upstream commit for CVE-2026-3606/ettercap Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-31802/node-tar Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Track ntopng as removed from unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] 2 commits: Fix typo in source package name for thunderbird Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add spip to dsa-needed list Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-25934/golang-github-go-git-go-git Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Note that Utkarsh Gupta will prepare updates for ruby-rack Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-25960/vllm, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-26982/ghostty, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add new batch of imagemagick issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add new set of gstreamer related CVEs Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-21620/erlang via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-27606/node-rollup via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixes for two ruby-rack issues fixed via unstable upload Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-31802/node-tar Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new quickjs issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new zookeeper issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add two new freshrss issues, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2025-70050/lesspass, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-0846/nltk Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-30838/php-league-commonmark Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add reservation for imagemagick update Salvatore Bonaccorso (@carnil)
• Processing 73e2ae7eb5bfb068677f33fd608bb2e49bbbfcff failed security tracker role
• [Git][security-tracker-team/security-tracker][master] golang-github-open-policy-agent-opa n/a Moritz Muehlenhoff (@jmm)
• Processing 2be7afd40c7d7ee6f5392eb87fba24b86e9c1359 failed security tracker role
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for cpp-httplib issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for CVE-2025-12801/nfs-utils Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] embedded-code-copies: reference lzma embedded in 7zip Sylvain Beucler (@beuc)
• [Git][security-tracker-team/security-tracker][master] Add reference to related issue for CVE-2026-3634 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-3731/libssh Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] new libssh issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new xgrammar issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for vim issues fixed via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream issue references for CVE-2026-363{2,3,4}/libsoup Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] new zabbix issue Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] new libsoup issues Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-29063/node-immutable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-63938/tinyproxy via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add upstream tag for upstream fix for CVE-2025-63938 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2025-57352/node-min-document via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for python-multipart via trixie-pu Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-21619/{erlang-hex,rebar3} Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update status for nodejs for dsa-needed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for one node-dottie issue fixed via unstable Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] curl spu Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] requests spu Moritz Muehlenhoff (@jmm)
• [Git][security-tracker-team/security-tracker][master] Add two new caddy issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two node-tar issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3706/dropbear Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-3713/libpng1.6 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for embeded code copy change/tracking for cryfs Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] cryfs in <= trixie embeds libcrypto++ Adrian Bunk (@bunk)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for golang-1.25 issues via unstable upload Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29076/cpp-httplib Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29778/pyload Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29784/ghost, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-30910 as NFU Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-30909/libcrypt-nacl-sodium-perl, itp'ed Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-25989 @rouca
• [Git][security-tracker-team/security-tracker][master] Add CVE-2026-29786/node-tar Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
  • [Git][security-tracker-team/security-tracker][master] Process some new NFUs Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] CVE-2026-25982 @rouca
• [Git][security-tracker-team/security-tracker][master] Reference commits for CVE-2025-12801 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug references for pypdf issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-27982/django-allauth Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-27622/openexr Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track fixed version for two lxml-html-clean issues Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Track proposed update for civetweb via trixie-pu Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Update commit reference for CVE-2026-25967 Salvatore Bonaccorso (@carnil)
• [Git][security-tracker-team/security-tracker][master] Triage CVE-2026-2659, CVE-2026-2661, CVE-2026-3388 & CVE-2026-3389 in squirrel3 for bullseye LTS. Chris Lamb (@lamby)

• Earlier messages
• Later messages