[Git][security-tracker-team/security-tracker][master] Track fixed version for python-django issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Feb 5 21:35:16 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
02a6415f by Salvatore Bonaccorso at 2026-02-05T22:34:32+01:00
Track fixed version for python-django issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1405,27 +1405,27 @@ CVE-2019-25263 (Zendesk SweetHawk Survey 1.6 contains a persistent cross-site sc
 CVE-2019-25261 (AnyDesk 5.4.0 contains an unquoted service path vulnerability in its W ...)
 	NOT-FOR-US: AnyDesk
 CVE-2026-1312 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/90f5b10784ba5bf369caed87640e2b4394ea3314 (4.2.28)
 CVE-2026-1287 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/f75f8f3597e1ce351d5ac08b6ba7ebd9dadd9b5d (4.2.28)
 CVE-2026-1285 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/b40cfc6052ced26dcd8166a58ea6f841d0d2cac8 (4.2.28)
 CVE-2026-1207 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/a14363102d98fa29b8cced578eb3a0fadaa5bcb7 (4.2.28)
 CVE-2025-14550 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/f578acc8c54530fffabd52d2db654c8669b011af (4.2.28)
 CVE-2025-13473 (An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4. ...)
-	- python-django <unfixed> (bug #1126914)
+	- python-django 3:4.2.28-1 (bug #1126914)
 	NOTE: https://www.djangoproject.com/weblog/2026/feb/03/security-releases/
 	NOTE: Fixed by: https://github.com/django/django/commit/6dc23508f3395e1254c315084c7334ef81c4c09a (4.2.28)
 CVE-2026-25228 (Signal K Server is a server application that runs on a central hub in  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02a6415f7a59864fefdc71471caacccdfb0a9f67

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02a6415f7a59864fefdc71471caacccdfb0a9f67
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260205/1eec386c/attachment.htm>


More information about the debian-security-tracker-commits mailing list