[Git][security-tracker-team/security-tracker][master] Add Debian bug references for python-django CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60420732 by Salvatore Bonaccorso at 2026-02-03T22:46:58+01:00
Add Debian bug references for python-django CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -400,27 +400,27 @@ CVE-2019-25263 (Zendesk SweetHawk Survey 1.6 contains a persistent cross-site sc
 CVE-2019-25261 (AnyDesk 5.4.0 contains an unquoted service path vulnerability in its W ...)
 	NOT-FOR-US: AnyDesk
 CVE-2026-1312 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/90f5b10784ba5bf369caed87640e2b4394ea3314 (4.2.28)
 CVE-2026-1287 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/f75f8f3597e1ce351d5ac08b6ba7ebd9dadd9b5d (4.2.28)
 CVE-2026-1285 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/b40cfc6052ced26dcd8166a58ea6f841d0d2cac8 (4.2.28)
 CVE-2026-1207 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/a14363102d98fa29b8cced578eb3a0fadaa5bcb7 (4.2.28)
 CVE-2025-14550 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/f578acc8c54530fffabd52d2db654c8669b011af (4.2.28)
 CVE-2025-13473 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed>
+	- python-django <unfixed> (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/6dc23508f3395e1254c315084c7334ef81c4c09a (4.2.28)
 CVE-2026-25228 (Signal K Server is a server application that runs on a central hub in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60420732897f5eea85b3e58ebcfd49574fd11fe4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60420732897f5eea85b3e58ebcfd49574fd11fe4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260203/4c3d7421/attachment.htm>