Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d494cc60 by Salvatore Bonaccorso at 2026-10-11T20:52:11+02:00
Directly reference commits for CVE-2026-44243
Previous one was as well fine, as referenced the merge commit. But as
the merge contains only two commits we can directly reference it for
easier cherry-picking the changes.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -159224,7 +159224,8 @@ CVE-2026-44243 (GitPython is a python library used to
interact with Git reposito
[trixie] - python-git <no-dsa> (Minor issue)
NOTE:
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24
NOTE: https://github.com/gitpython-developers/GitPython/pull/2134
- NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/dbfa26476445169cdc9d64a539ba6959fd0a2643
(3.1.48)
+ NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/25ba54dd3fb374b8fade7de4be1ac2ac84722190
(3.1.48)
+ NOTE: Fixed by:
https://github.com/gitpython-developers/GitPython/commit/4af8463cca31c2369312fcaa5309dfc30756c7b6
(3.1.48)
CVE-2026-42285 (GoBGP is an open source Border Gateway Protocol (BGP)
implementation i ...)
- gobgp 4.5.0-1 (bug #1136049)
[trixie] - gobgp <not-affected> (Vulnerable code not present,
introduced in 4.4.0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494cc600b7c969e7ffa2e344d07865171805896
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494cc600b7c969e7ffa2e344d07865171805896
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
