[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2025-26699/python-django via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
54aa94fb by Salvatore Bonaccorso at 2025-03-06T22:43:54+01:00
Add fixed version for CVE-2025-26699/python-django via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3090,7 +3090,7 @@ CVE-2024-49570 (In the Linux kernel, the following vulnerability has been resolv
 CVE-2025-26925 (Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-26699 (An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, ...)
-	- python-django <unfixed> (bug #1099682)
+	- python-django 3:4.2.20-1 (bug #1099682)
 	NOTE: https://www.djangoproject.com/weblog/2025/mar/06/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/e88f7376fe68dbf4ebaf11fad1513ce700b45860 (4.2.20)
 CVE-2025-26698 (Incorrect resource transfer between spheres issue exists in RevoWorks  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54aa94fbbe0656e34ca1cb162461324976748b8d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/54aa94fbbe0656e34ca1cb162461324976748b8d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250306/d4e00f65/attachment.htm>