Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5d585e1a by Adrian Bunk at 2025-09-08T16:17:04+03:00
Reserve DLA-4295-1 for libhtp
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -102933,7 +102933,6 @@ CVE-2024-45844 (BIG-IP monitor functionality may
allow an attacker to bypass acc
CVE-2024-45797 (LibHTP is a security-aware parser for the HTTP protocol and
the relate ...)
- libhtp 1:0.5.49-1
[bookworm] - libhtp <no-dsa> (Minor issue)
- [bullseye] - libhtp <postponed> (Minor issue; can be fixed in next
update)
NOTE:
https://github.com/OISF/libhtp/security/advisories/GHSA-rqqp-24ch-248f
NOTE: https://redmine.openinfosecfoundation.org/issues/7191
CVE-2024-45796 (Suricata is a network Intrusion Detection System, Intrusion
Prevention ...)
@@ -169790,7 +169789,6 @@ CVE-2024-23839 (Suricata is a network Intrusion
Detection System, Intrusion Prev
CVE-2024-23837 (LibHTP is a security-aware parser for the HTTP protocol.
Crafted traff ...)
- libhtp 1:0.5.46-1
[bookworm] - libhtp <no-dsa> (Minor issue)
- [bullseye] - libhtp <no-dsa> (Minor issue)
[buster] - libhtp <no-dsa> (Minor issue)
NOTE:
https://github.com/OISF/libhtp/security/advisories/GHSA-f9wf-rrjj-qx8m
NOTE:
https://github.com/OISF/libhtp/commit/20ac301d801cdf01b3f021cca08a22a87f477c4a
(0.5.46)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Sep 2025] DLA-4295-1 libhtp - security update
+ {CVE-2024-23837 CVE-2024-45797}
+ [bullseye] - libhtp 1:0.5.36-1+deb11u1
[07 Sep 2025] DLA-4294-1 modsecurity-apache - security update
{CVE-2025-54571}
[bullseye] - modsecurity-apache 2.9.3-3+deb11u5
=====================================
data/dla-needed.txt
=====================================
@@ -203,10 +203,6 @@ lemonldap-ng
NOTE: 20250813: Added by Front-Desk (lamby)
NOTE: 20250813: CVE-2024-52948 was marked as <postponed>, but fixed in
bookworm. (lamby)
--
-libhtp (bunk)
- NOTE: 20250805: Added by Front-Desk (rouca)
- NOTE: 20250825: still fixing issues (bunk)
---
libphp-adodb (abhijith)
NOTE: 20250807: Added by Front-Desk (rouca)
NOTE: 20250807: Fix other CVEs and try to propose a PU (rouca)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d585e1a7f638b17e23233277f254b03b22070f8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d585e1a7f638b17e23233277f254b03b22070f8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
