Groups > linux.debian.bugs.dist > #1307570

Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4

From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel.release
Subject	Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4
Date	2026-09-02 22:50 +0200
Message-ID	<Nz049-eOSe-3@gated-at.bofh.it> (permalink)
References	<Nxsed-dYIL-7@gated-at.bofh.it> <Nxsed-dYIL-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Hi David,

On Sat, Aug 29, 2026 at 04:19:16PM +0200, David Prévot wrote:
> Package: release.debian.org
> Severity: normal
> Tags: trixie
> X-Debbugs-Cc: composer@packages.debian.org, Debian Security Team <team@security.debian.org>
> Control: affects -1 + src:composer
> User: release.debian.org@packages.debian.org
> Usertags: pu
> 
> Hi,
> 
> I’d like to fix five security issues that are not worth a DSA in the
> next point release (four are marked as no-dsa, the fifth one has no CVE
> assigned).

The fifth one (GHSA-rvx4-ffvw-m9q3), now has as well a CVE, it is
CVE-2026-84361.

Regards,
Salvatore

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4 Salvatore Bonaccorso <carnil@debian.org> - 2026-09-02 22:50 +0200
  Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2026-09-04 13:20 +0200

csiph-web