Re: Reporting CVE as fixed back to authority

From	Daniel Leidert <daniel.leidert@wgdd.de>
Newsgroups	linux.debian.security
Subject	Re: Reporting CVE as fixed back to authority
Date	2026-09-10 07:40 +0200
Message-ID	<NBFFT-ghZu-3@gated-at.bofh.it> (permalink)
References	<NBmjT-g7zq-1@gated-at.bofh.it> <NBEJP-ghwY-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Am Donnerstag, dem 10.09.2026 um 06:35 +0200 schrieb Salvatore
Bonaccorso:
> On Wed, Sep 09, 2026 at 11:50:37AM +0300, Alexandru Mihail wrote:

[..]
> > All users still using the server are using the Debian codebase, or
> > derivatives.
> 
> I'm not completely sure if I understand what you are aiming for. In
> Debian itself we track it as
> https://security-tracker.debian.org/tracker/CVE-2026-68005
> 
> I assume you wanted to add a note that in Debian the CVE is referenced
> by https://bugs.debian.org/1144953 ? Then you can via
> https://cveform.mitre.org ask to update references and add a reference
> to the Debian bug as well.

My understanding is that the OP states that the Debian package source
is the de-facto "upstream" source for anybody still using this software
and they seek advice on how to add information to the original CVE that
the issue has been fixed.

Regards, Daniel

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Reporting CVE as fixed back to authority Alexandru Mihail <alexandru.mihail2897@gmail.com> - 2026-09-09 11:00 +0200
  Re: Reporting CVE as fixed back to authority Salvatore Bonaccorso <carnil@debian.org> - 2026-09-10 06:40 +0200
    Re: Reporting CVE as fixed back to authority Daniel Leidert <daniel.leidert@wgdd.de> - 2026-09-10 07:40 +0200

csiph-web