Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6d4f0997 by Chris Lamb at 2026-09-29T12:50:16-07:00
Reserve DLA-4802-1 for python-django
- - - - -
2 changed files:
- data/CVE/list
- data/DLA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -99303,7 +99303,6 @@ CVE-2026-53877 (An issue was discovered in Django 6.0
before 6.0.7 and 5.2 befor
CVE-2026-48588 (An issue was discovered in Django 6.0 before 6.0.7 and 5.2
before 5.2. ...)
- python-django 3:5.2.16-1 (bug #1141629)
[trixie] - python-django <no-dsa> (Minor issue)
- [bookworm] - python-django <postponed> (Minor issue)
[bullseye] - python-django <postponed> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2026/jul/07/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/721685aa7799cc9327bd202cd1f70bd012ca95a7
(5.2.16)
@@ -124853,7 +124852,6 @@ CVE-2026-48019 (Laravel is a web application
framework. Prior to versions 12.60.
CVE-2026-48587 (An issue was discovered in Django 5.2 before 5.2.15 and 6.0
before 6.0 ...)
- python-django 3:5.2.15-1 (bug #1138775)
[trixie] - python-django <no-dsa> (Minor issue)
- [bookworm] - python-django <no-dsa> (Minor issue)
[bullseye] - python-django <postponed> (Minor issue)
NOTE:
https://www.djangoproject.com/weblog/2026/jun/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/9b62b0af71a14c657d19d95371630ba839e83d9a
(5.2.15)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Sep 2026] DLA-4802-1 python-django - security update
+ {CVE-2026-48587 CVE-2026-48588}
+ [bookworm] - python-django 3:3.2.25-0+deb12u5
[29 Sep 2026] DLA-4801-1 swift - security update
{CVE-2026-71191 CVE-2026-97149}
[bookworm] - swift 2.30.1-0+deb12u3
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d4f0997ac7a8f1b2482696b037234bc95506507
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d4f0997ac7a8f1b2482696b037234bc95506507
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
