Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
54aa94fb by Salvatore Bonaccorso at 2025-03-06T22:43:54+01:00
Add fixed version for CVE-2025-26699/python-django via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3090,7 +3090,7 @@ CVE-2024-49570 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2025-26925 (Cross-Site Request Forgery (CSRF) vulnerability in Required
Admin Menu ...)
NOT-FOR-US: WordPress plugin
CVE-2025-26699 (An issue was discovered in Django 5.1 before 5.1.7, 5.0 before
5.0.13, ...)
- - python-django <unfixed> (bug #1099682)
+ - python-django 3:4.2.20-1 (bug #1099682)
NOTE:
https://www.djangoproject.com/weblog/2025/mar/06/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/e88f7376fe68dbf4ebaf11fad1513ce700b45860
(4.2.20)
CVE-2025-26698 (Incorrect resource transfer between spheres issue exists in
RevoWorks ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54aa94fbbe0656e34ca1cb162461324976748b8d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54aa94fbbe0656e34ca1cb162461324976748b8d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
