[Git][security-tracker-team/security-tracker][master] Add patch link for CVE-2025-6966/python-apt

Daniel Leidert (@dleidert) dleidert at debian.org
Tue Dec 9 23:18:27 GMT 2025



Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e91ba7ad by Daniel Leidert at 2025-12-10T00:17:59+01:00
Add patch link for CVE-2025-6966/python-apt

Should soon appear on salsa.d.o as well. But it doesn't hurt to have it.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2524,6 +2524,7 @@ CVE-2025-6966 (NULL pointer dereference in TagSection.keys() in python-apt on AP
 	[trixie] - python-apt <no-dsa> (Minor issue)
 	[bookworm] - python-apt <no-dsa> (Minor issue)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865
+	NOTE: https://git.launchpad.net/ubuntu/+source/python-apt/commit/?h=ubuntu/jammy-updates&id=f6886ae90818c043a2348ba552c29adfb0236c66
 CVE-2025-66644 (Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as  ...)
 	NOT-FOR-US: Array Networks ArrayOS AG
 CVE-2025-66624 (BACnet Protocol Stack library provides a BACnet application layer, net ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e91ba7ad208f3aec9da236db211c762123c4d90e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e91ba7ad208f3aec9da236db211c762123c4d90e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251209/103a5a96/attachment.htm>


More information about the debian-security-tracker-commits mailing list