[Git][security-tracker-team/security-tracker][master] Add new python-django issue: CVE-2025-26699

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
14686bcb by Salvatore Bonaccorso at 2025-03-06T21:04:04+01:00
Add new python-django issue: CVE-2025-26699

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2986,6 +2986,10 @@ CVE-2024-49570 (In the Linux kernel, the following vulnerability has been resolv
 	NOTE: https://git.kernel.org/linus/07089083a526ea19daa72a1edf9d6e209615b77c (6.14-rc1)
 CVE-2025-26925 (Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu ...)
 	NOT-FOR-US: WordPress plugin
+CVE-2025-26699 [Potential denial-of-service in django.utils.text.wrap()]
+	- python-django <unfixed> (bug #1099682)
+	NOTE: https://www.djangoproject.com/weblog/2025/mar/06/security-releases/
+	NOTE: Fixed by: https://github.com/django/django/commit/e88f7376fe68dbf4ebaf11fad1513ce700b45860 (4.2.20)
 CVE-2025-26698 (Incorrect resource transfer between spheres issue exists in RevoWorks  ...)
 	NOT-FOR-US: RevoWorks
 CVE-2025-25827 (A Server-Side Request Forgery (SSRF) in the component sort.php of Emlo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14686bcb78e7c91728fe56b79490ebbbe32cb94f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/14686bcb78e7c91728fe56b79490ebbbe32cb94f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250306/5c1ae2b2/attachment.htm>