Daniel Leidert pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7450a2ac by Daniel Leidert at 2025-07-27T02:12:34+02:00
Reserve DLA-4252-1 for snapcast
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[27 Jul 2025] DLA-4252-1 snapcast - security update
+ {CVE-2023-36177}
+ [bullseye] - snapcast 0.23.0+dfsg1-1+deb11u1
[26 Jul 2025] DLA-4251-1 libxml2 - security update
{CVE-2024-34459 CVE-2025-6021 CVE-2025-6170 CVE-2025-49794
CVE-2025-49796}
[bullseye] - libxml2 2.9.10+dfsg-6.7+deb11u8
=====================================
data/dla-needed.txt
=====================================
@@ -352,13 +352,6 @@ rails
ruby-graphql (Utkarsh)
NOTE: 20250422: Added by Front-Desk (rouca)
--
-snapcast (dleidert)
- NOTE: 20250118: Added by Front-Desk (rouca)
- NOTE: 20250119: Upstream just re-added a secured Stream.AddStream
functionality to fix CVE-2023-36177, but hasn't released it yet (dleidert)
- NOTE: 20250119: That seems to be a better fix than just removing the
functionality as done in the initial patch (dleidert)
- NOTE: 20250119: Returning to pool until this has been tested and released
into Sid/Trixie (dleidert)
- NOTE: 20250106: Fixed in Sid/Trxie via version 0.31 (dleidert)
---
sogo
NOTE: 20240922: Added by Front-Desk (apo)
NOTE: 20240922: See also postponed issues.
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7450a2ac56fcdaba2db3abd65994b08a58ff6c40
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7450a2ac56fcdaba2db3abd65994b08a58ff6c40
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
