[Git][security-tracker-team/security-tracker][master] new Python issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2492fbd by Moritz Muehlenhoff at 2026-01-22T14:04:23+01:00
new Python issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -469,7 +469,15 @@ CVE-2025-15282 (User-controlled data URLs parsed by urllib.request.DataHandler a
 CVE-2025-14559 (A flaw was found in the keycloak-services component of Keycloak. This  ...)
 	- keycloak <itp> (bug #1088287)
 CVE-2025-11468 (When folding a long comment in an email header containing exclusively  ...)
-	TODO: check
+	- python3.14 <unfixed>
+	- python3.13 <unfixed>
+	- python3.11 <removed>
+	- python3.9 <removed>
+	- python2.7 <removed>
+	- pypy3 <unfixed>
+	- jython <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/python/cpython/issues/143935
+	NOTE: Fixed by: https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2 (main)
 CVE-2026-24061 (telnetd in GNU Inetutils through 2.7 allows remote authentication bypa ...)
 	- inetutils 2:2.7-2 (bug #1126047)
 	NOTE: https://lists.gnu.org/archive/html/bug-inetutils/2026-01/msg00004.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2492fbd00f3fe58075636a2e9e9a1b9b27e21b1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2492fbd00f3fe58075636a2e9e9a1b9b27e21b1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260122/e9e7fef8/attachment.htm>