Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1307570 > unrolled thread

Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4 Salvatore Bonaccorso <carnil@debian.org> - 2026-09-02 22:50 +0200
    Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2026-09-04 13:20 +0200

#1307570 — Bug#1146066: trixie-pu: package composer/2.8.8-1+deb13u4

Hi David,

On Sat, Aug 29, 2026 at 04:19:16PM +0200, David Prévot wrote:
> Package: release.debian.org
> Severity: normal
> Tags: trixie
> X-Debbugs-Cc: composer@packages.debian.org, Debian Security Team <team@security.debian.org>
> Control: affects -1 + src:composer
> User: release.debian.org@packages.debian.org
> Usertags: pu
> 
> Hi,
> 
> I’d like to fix five security issues that are not worth a DSA in the
> next point release (four are marked as no-dsa, the fifth one has no CVE
> assigned).

The fifth one (GHSA-rvx4-ffvw-m9q3), now has as well a CVE, it is
CVE-2026-84361.

Regards,
Salvatore

[toc] | [next] | [standalone]

#1307782

Control: tags -1 + confirmed

On Wed, 2026-09-02 at 22:40 +0200, Salvatore Bonaccorso wrote:
> Hi David,
> 
> On Sat, Aug 29, 2026 at 04:19:16PM +0200, David Prévot wrote:
> 
[...]
> > I’d like to fix five security issues that are not worth a DSA in
> > the
> > next point release (four are marked as no-dsa, the fifth one has no
> > CVE
> > assigned).
> 
> The fifth one (GHSA-rvx4-ffvw-m9q3), now has as well a CVE, it is
> CVE-2026-84361.

Please go ahead.

Regards,

Adam

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web