Bug#1088969: bookworm-pu: package openssh/1:9.2p1-2+deb12u4

2024-12-07 Thread Colin Watson
On Sat, Dec 07, 2024 at 07:06:03PM +0100, Cyril Brulebois wrote: > Jonathan Wiltshire (2024-12-06): > > On Tue, Dec 03, 2024 at 03:13:28PM +, Colin Watson wrote: > > > I have a set of OpenSSH fixes that I think are worth including in the > > > next stable update, all of which fix regressions f

Bug#1089279: bookworm-pu: package intel-microcode/3.20241112.1~deb12u1

2024-12-07 Thread Henrique de Moraes Holschuh
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu [ Reason ] As requested by the security team, I would like to bring the microcode update level for Intel processors in Bookworm to match what we have in Sid and Trixie. This fixe

Bug#1089299: bookworm-pu: package gsl/2.7.1+dfsg-5+deb12u1

2024-12-07 Thread Adrian Bunk
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: secur...@debian.org, Dirk Eddelbuettel * CVE-2020-35357: buffer overflow when calculating the quantile value (Closes: #1052655) diffstat for gsl-2.7.1+dfsg gsl

Bug#1088969: bookworm-pu: package openssh/1:9.2p1-2+deb12u4

2024-12-07 Thread Cyril Brulebois
Jonathan Wiltshire (2024-12-06): > Control: tag -1 confirmed d-i > > On Tue, Dec 03, 2024 at 03:13:28PM +, Colin Watson wrote: > > I have a set of OpenSSH fixes that I think are worth including in the > > next stable update, all of which fix regressions from bullseye: > > > > * Minor securi

binNMUs for broken udebs (was Bug#1086735: libx11-6: buggy shlibs, libx11-xcb1 vs. libx11-6-udeb)

2024-12-07 Thread Cyril Brulebois
Hi, Cyril Brulebois (2024-11-04): > Package: libx11-6 > Version: 2:1.8.10-1 > Severity: serious > Tags: d-i > Justification: broken shlibs, breaks udebs, etc. > X-Debbugs-Cc: debian-b...@lists.debian.org > > [ Now turning the initial mail ping into a proper bug report. ] > > Spotted via dose's

Bug#1089079: bookworm-pu: package python-werkzeug/2.2.2-3+deb12u1

2024-12-07 Thread Sean Whitton
Hello, On Fri 06 Dec 2024 at 01:35pm GMT, Jonathan Wiltshire wrote: > Control: tag -1 confirmed > > I prefer a little more detail in the changelog about *what* these are, > rather than bare CVE numbers. But I see descriptions in the headers so it's > not the end of the world. Please go ahead. Th