Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
366143a8 by Sylvain Beucler at 2026-02-07T21:35:53+01:00
CVE-2025-15366,CVE-2025-15367/python3.*: reference potential regression
upstream doesn't backport to release branches for now
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6998,6 +6998,7 @@ CVE-2025-15367 (The poplib module, when passed a
user-controlled command, can ha
NOTE: https://github.com/python/cpython/pull/143924
NOTE:
https://mail.python.org/archives/list/[email protected]/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/
NOTE:
https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7
(main)
+ NOTE: Potential regression:
https://github.com/python/cpython/pull/143924#issuecomment-3774869691
CVE-2025-15366 (The imaplib module, when passed a user-controlled command, can
have ad ...)
{DLA-4455-1}
- python3.14 <unfixed>
@@ -7018,6 +7019,7 @@ CVE-2025-15366 (The imaplib module, when passed a
user-controlled command, can h
NOTE: https://github.com/python/cpython/pull/143922
NOTE:
https://mail.python.org/archives/list/[email protected]/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/
NOTE:
https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45
(main)
+ NOTE: Potential regression:
https://github.com/python/cpython/pull/143922#issuecomment-3774866549
CVE-2025-15282 (User-controlled data URLs parsed by urllib.request.DataHandler
allow i ...)
{DLA-4455-1}
- python3.14 3.14.3-1 (bug #1126779)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/366143a8ddbc906fd7b1b1225b3f8f0f9f33f852
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/366143a8ddbc906fd7b1b1225b3f8f0f9f33f852
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
