Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
031d9cc4 by Moritz Muehlenhoff at 2026-10-02T20:05:19+02:00
python-engineio fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -70869,16 +70869,17 @@ CVE-2026-50058 (A vulnerability has been identified
in Solid Edge SE2025 (All ve
CVE-2026-49179 (Improper neutralization of special elements used in a command
('comman ...)
NOT-FOR-US: Microsoft
CVE-2026-48809 (python-engineio is a Python implementation of the Engine.IO
realtime c ...)
- - python-engineio <unfixed> (bug #1144516)
+ - python-engineio 4.14.0-1 (bug #1144516)
[trixie] - python-engineio <no-dsa> (Minor issue)
[bookworm] - python-engineio <postponed> (Minor issue)
NOTE:
https://github.com/miguelgrinberg/python-engineio/security/advisories/GHSA-m9gh-vj53-gvh9
- TODO: checking upstream commit fixing issue, confusing infomation
advisory claims both 4.13.2 and 4.13.5 to fix issue
+ NOTE:
https://github.com/miguelgrinberg/python-engineio/commit/fc5e2f07f78a47f6442ae1ec64795ff8b6242784
(v4.13.5)
CVE-2026-48802 (python-engineio is a Python implementation of the Engine.IO
realtime c ...)
- - python-engineio <unfixed> (bug #1144517)
+ - python-engineio 4.14.0-1 (bug #1144517)
[trixie] - python-engineio <no-dsa> (Minor issue)
[bookworm] - python-engineio <postponed> (Minor issue)
NOTE:
https://github.com/miguelgrinberg/python-engineio/security/advisories/GHSA-cgwc-pv48-fhj5
+ NOTE:
https://github.com/miguelgrinberg/python-engineio/commit/ceeeb5eae3ce070f4c5e313ea9a1f91307fe5e2b
(v4.13.2)
CVE-2026-48790 (Turso CLI is the command line interface (CLI) to the
open-source datab ...)
NOT-FOR-US: Turso CLI
CVE-2026-48771 (ishankportfolio is a portfolio website. Prior to version
1.0.1, contac ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/031d9cc442bf49a8230faa0036eaa81a9fe0f356
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/031d9cc442bf49a8230faa0036eaa81a9fe0f356
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
