[Git][security-tracker-team/security-tracker][master] Track fixes for python-filelock via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 4 15:16:59 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fcdd20ea by Salvatore Bonaccorso at 2026-11-04T16:15:13+01:00
Track fixes for python-filelock via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21966,22 +21966,22 @@ CVE-2026-112943 (launch-editor allows users to open files with line numbers in e
CVE-2026-112942 (launch-editor allows users to open files with line numbers in editor f ...)
NOT-FOR-US: Node launch-editor
CVE-2026-112941 (filelock is a platform-independent file lock for Python. From 4.1.0 un ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-wfhq-q4j2-c37m
NOTE: https://github.com/tox-dev/filelock/pull/842
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03 (4.2.1)
CVE-2026-112940 (filelock is a platform-independent file lock for Python. From 3.20.4 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-v4x8-3wr5-3wq8
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d (4.2.1)
CVE-2026-112939 (filelock is a platform-independent file lock for Python. From 3.22.0 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-rfpc-qcw5-3pc4
NOTE: https://github.com/tox-dev/filelock/pull/836
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/eeceaa846cbe4df72718d94c8371ca1ab8f5b3cc (4.2.1)
CVE-2026-112937 (filelock is a platform-independent file lock for Python. From 4.1.0 un ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-jqc4-5cvw-7w85
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d (4.2.1)
@@ -21990,42 +21990,42 @@ CVE-2026-112936 (filelock is a platform-independent file lock for Python. From 3
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-j8f7-rjxc-mr56
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/4d45e83caf7e31f9a12fb44526bdc07f70114f04 (4.0.9)
CVE-2026-112935 (filelock is a platform-independent file lock for Python. From 3.22.0 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-fq56-3cx3-fjxp
NOTE: https://github.com/tox-dev/filelock/pull/843
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b (4.2.1)
CVE-2026-112934 (filelock is a platform-independent file lock for Python. From 4.0.0 un ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-fj95-fr6c-h845
NOTE: https://github.com/tox-dev/filelock/pull/842
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03 (4.2.1)
CVE-2026-112915 (filelock is a platform-independent file lock for Python. From 3.20.4 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-cwqr-hh33-gh44
NOTE: https://github.com/tox-dev/filelock/pull/834
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d (4.2.1)
CVE-2026-112914 (filelock is a platform-independent file lock for Python. From 4.1.0 un ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-crv4-6mhj-j5jh
NOTE: https://github.com/tox-dev/filelock/pull/843
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b (4.2.1)
CVE-2026-112912 (filelock is a platform-independent file lock for Python. From 3.32.6 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-9j6q-wvj5-jgjg
NOTE: https://github.com/tox-dev/filelock/pull/835
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/e1e825b1992f69fb6b346dc395d5ae4893536c0a (4.2.1)
CVE-2026-112911 (filelock is a platform-independent file lock for Python. From 3.30.0 u ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-9c4x-gm8v-wgc4
NOTE: https://github.com/tox-dev/filelock/pull/839
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/bfa066d65a1ba9106f86ee9d027f7588b9c77e03 (4.2.1)
CVE-2026-112909 (filelock is a platform-independent file lock for Python. Prior to 4.2. ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-69hj-f68j-2879
NOTE: https://github.com/tox-dev/filelock/pull/835
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/e1e825b1992f69fb6b346dc395d5ae4893536c0a (4.2.1)
CVE-2026-112906 (filelock is a platform-independent file lock for Python. From 4.1.0 un ...)
- - python-filelock <unfixed> (bug #1151686)
+ - python-filelock 4.2.8-1 (bug #1151686)
NOTE: https://github.com/tox-dev/filelock/security/advisories/GHSA-2g95-wg33-c5x2
NOTE: Fixed by: https://github.com/tox-dev/filelock/commit/740ff666b62a88496c8d7394e4e6230605e4d62b (4.2.1)
CVE-2026-112861 (Authorization Bypass Through User-Controlled Key vulnerability in xnau ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcdd20ea524ea455d75fe04a04ecbbfb3490fc1c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fcdd20ea524ea455d75fe04a04ecbbfb3490fc1c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/126ffb79/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list