[Git][security-tracker-team/security-tracker][master] Directly reference commits for CVE-2026-44243

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d494cc60 by Salvatore Bonaccorso at 2026-10-11T20:52:11+02:00
Directly reference commits for CVE-2026-44243

Previous one was as well fine, as referenced the merge commit. But as
the merge contains only two commits we can directly reference it for
easier cherry-picking the changes.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -159224,7 +159224,8 @@ CVE-2026-44243 (GitPython is a python library used to interact with Git reposito
 	[trixie] - python-git <no-dsa> (Minor issue)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24
 	NOTE: https://github.com/gitpython-developers/GitPython/pull/2134
-	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dbfa26476445169cdc9d64a539ba6959fd0a2643 (3.1.48)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/25ba54dd3fb374b8fade7de4be1ac2ac84722190 (3.1.48)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/4af8463cca31c2369312fcaa5309dfc30756c7b6 (3.1.48)
 CVE-2026-42285 (GoBGP is an open source Border Gateway Protocol (BGP) implementation i ...)
 	- gobgp 4.5.0-1 (bug #1136049)
 	[trixie] - gobgp <not-affected> (Vulnerable code not present, introduced in 4.4.0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494cc600b7c969e7ffa2e344d07865171805896

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d494cc600b7c969e7ffa2e344d07865171805896
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261011/9b9dcc70/attachment.htm>