Bug#1085026: bookworm-pu: package docker.io/20.10.24+dfsg1+deb12u1

[Bastien Roucariès]

Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: ***@packages.debian.org, ***@debian.org
Control: affects -1 + src:docker.io
User: ***@packages.debian.org
Usertags: pu
Control: tags -1 + security


[ Reason ]
CVE-2024-41110

[ Impact ]
Authentification bypass

[ Tests ]
Yes added to test suite

[ Risks ]
Low code is tested. Patch is official

[ Checklist ]
[X] *all* changes are documented in the d/changelog
[X] I reviewed all changes and I approve them
[X] attach debdiff against the package in (old)stable
[X] the issue is verified as fixed in unstable

[ Changes ]
- Fix CVE-2024-41110
- Fix of salsaCI to bookworm

[ Other info ]
May be worth a DSA due to popcon

[Jonathan Wiltshire]

Control: tag -1 confirmed

Unless the security team want to handle it as a DSA, please go ahead (with
a fixed distribution in debian/changelog).

Thanks,

[Moritz Mühlenhoff]

Post by Jonathan Wiltshire
Control: tag -1 confirmed
Unless the security team want to handle it as a DSA, please go ahead (with
a fixed distribution in debian/changelog).

spu is fine, thanks!

Cheers,
Moritz