Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d2492fbd by Moritz Muehlenhoff at 2026-01-22T14:04:23+01:00
new Python issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -469,7 +469,15 @@ CVE-2025-15282 (User-controlled data URLs parsed by
urllib.request.DataHandler a
CVE-2025-14559 (A flaw was found in the keycloak-services component of
Keycloak. This ...)
- keycloak <itp> (bug #1088287)
CVE-2025-11468 (When folding a long comment in an email header containing
exclusively ...)
- TODO: check
+ - python3.14 <unfixed>
+ - python3.13 <unfixed>
+ - python3.11 <removed>
+ - python3.9 <removed>
+ - python2.7 <removed>
+ - pypy3 <unfixed>
+ - jython <not-affected> (Vulnerable code not present)
+ NOTE: https://github.com/python/cpython/issues/143935
+ NOTE: Fixed by:
https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2
(main)
CVE-2026-24061 (telnetd in GNU Inetutils through 2.7 allows remote
authentication bypa ...)
- inetutils 2:2.7-2 (bug #1126047)
NOTE:
https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2492fbd00f3fe58075636a2e9e9a1b9b27e21b1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2492fbd00f3fe58075636a2e9e9a1b9b27e21b1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
