[Git][security-tracker-team/security-tracker][master] CVE-2025-15366,CVE-2025-15367/python3.*: reference potential regression

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
366143a8 by Sylvain Beucler at 2026-02-07T21:35:53+01:00
CVE-2025-15366,CVE-2025-15367/python3.*: reference potential regression

upstream doesn't backport to release branches for now

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6998,6 +6998,7 @@ CVE-2025-15367 (The poplib module, when passed a user-controlled command, can ha
 	NOTE: https://github.com/python/cpython/pull/143924
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/
 	NOTE: https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7 (main)
+	NOTE: Potential regression: https://github.com/python/cpython/pull/143924#issuecomment-3774869691
 CVE-2025-15366 (The imaplib module, when passed a user-controlled command, can have ad ...)
 	{DLA-4455-1}
 	- python3.14 <unfixed>
@@ -7018,6 +7019,7 @@ CVE-2025-15366 (The imaplib module, when passed a user-controlled command, can h
 	NOTE: https://github.com/python/cpython/pull/143922
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/
 	NOTE: https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45 (main)
+	NOTE: Potential regression: https://github.com/python/cpython/pull/143922#issuecomment-3774866549
 CVE-2025-15282 (User-controlled data URLs parsed by urllib.request.DataHandler allow i ...)
 	{DLA-4455-1}
 	- python3.14 3.14.3-1 (bug #1126779)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/366143a8ddbc906fd7b1b1225b3f8f0f9f33f852

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/366143a8ddbc906fd7b1b1225b3f8f0f9f33f852
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260207/c0e52cab/attachment.htm>