Debian alert DLA-4387-1 (tryton-server)

From:
             
 
Santiago Ruano Rincón <santiagorr@riseup.net>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4387-1] tryton-server security update
Date:
             
 
Fri, 28 Nov 2025 17:40:28 -0300
Message-ID:
             
 
<aSoIvEJbm6DmJGHW@voleno>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4387-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Santiago Ruano Rincón
November 28, 2025                             https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : tryton-server
Version        : 5.0.33-2+deb11u4
CVE ID         : not yet available
Debian Bug     : 1121242 1121243

Several security vulnerabilities were discovered in the server of the
Tryton application platform, which could lead to information disclosure.

For Debian 11 bullseye, these problems have been fixed in version
5.0.33-2+deb11u4.

We recommend that you upgrade your tryton-server packages.

For the detailed security status of tryton-server please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tryton-server

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCaSoItwAKCRAn3j1FEEiG
76NNAQDh11dotLMxc+so6tTwAW4KZg3+o7P00W/OfpCYCtw6TgEA5Y0GquJslIm1
4X2ROSZqsbS6h7qNkrko/c+wvbtdBQg=
=WVb1
-----END PGP SIGNATURE-----