#1142351 trixie-pu: package libnfs/5.0.2-1+deb13u1

Package:
release.debian.org
Source:
release.debian.org
Submitter:
Thorsten Alteholz
Date:
2026-09-12 10:31:02 UTC
Severity:
normal
Tags:
#1142351#5
Date:
2026-07-18 11:59:00 UTC
From:
To:
The attached debdiff for libnfs fixes CVE-2026-53689. This CVE is marked
as no-dsa by the security team.
Nevertheless Mitre evaluated a score of 7.1 for this CVE, which is
categorized as "high".

The same patch has been uploaded to unstable some day ago as well (same
version as in Trixie) and nobody complained yet.

    Thorsten
#1142351#10
Date:
2026-07-18 23:08:41 UTC
From:
To:
Hi,

Please go ahead.

Thanks,
#1142351#17
Date:
2026-07-19 07:10:04 UTC
From:
To:
great, thanks ...

... and uploaded.

   Thorsten
#1142351#22
Date:
2026-09-12 10:28:11 UTC
From:
To:
Version: 13.7

It looks like the bug number was typoed in the metadata when accepting
this, so while it was included in 13.7 this morning, the bug wasn't
closed along with the remaining updates; doing so now.

Thanks,

Adam