Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
60420732 by Salvatore Bonaccorso at 2026-02-03T22:46:58+01:00
Add Debian bug references for python-django CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -400,27 +400,27 @@ CVE-2019-25263 (Zendesk SweetHawk Survey 1.6 contains a
persistent cross-site sc
CVE-2019-25261 (AnyDesk 5.4.0 contains an unquoted service path vulnerability
in its W ...)
NOT-FOR-US: AnyDesk
CVE-2026-1312 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11,
and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/90f5b10784ba5bf369caed87640e2b4394ea3314
(4.2.28)
CVE-2026-1287 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11,
and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/f75f8f3597e1ce351d5ac08b6ba7ebd9dadd9b5d
(4.2.28)
CVE-2026-1285 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11,
and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/b40cfc6052ced26dcd8166a58ea6f841d0d2cac8
(4.2.28)
CVE-2026-1207 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11,
and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/a14363102d98fa29b8cced578eb3a0fadaa5bcb7
(4.2.28)
CVE-2025-14550 (An issue was discovered in 6.0 before 6.0.2, 5.2 before
5.2.11, and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/f578acc8c54530fffabd52d2db654c8669b011af
(4.2.28)
CVE-2025-13473 (An issue was discovered in 6.0 before 6.0.2, 5.2 before
5.2.11, and 4. ...)
- - python-django <unfixed>
+ - python-django <unfixed> (bug #1126914)
NOTE:
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
NOTE: Fixed by:
https://github.com/django/django/commit/6dc23508f3395e1254c315084c7334ef81c4c09a
(4.2.28)
CVE-2026-25228 (Signal K Server is a server application that runs on a central
hub in ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60420732897f5eea85b3e58ebcfd49574fd11fe4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60420732897f5eea85b3e58ebcfd49574fd11fe4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
