[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-12345/python3.11: mark as postponed in bookworm

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50c07b41 by Carlos Henrique Lima Melara at 2026-10-13T13:28:31-03:00
CVE-2026-12345/python3.11: mark as postponed in bookworm

Follow secteam triage, require local access to trigger the
vulnerability.

- - - - -
f96a83dc by Carlos Henrique Lima Melara at 2026-10-13T13:29:26-03:00
LTS: add firefox-esr to dla-needed.txt and assign to pochu as requested

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -16288,6 +16288,7 @@ CVE-2026-12345 (The cleanup of tempfile.TemporaryDirectory is vulnerable to a ra
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
+	[bookworm] - python3.11 <postponed> (Minor issue)
 	- pypy3 <unfixed> (bug #1150804)
 	[trixie] - pypy3 <no-dsa> (Minor issue)
 	[bookworm] - pypy3 <postponed> (Minor issue)


=====================================
data/dla-needed.txt
=====================================
@@ -209,6 +209,9 @@ firebird3.0
   NOTE: 20260418: Added by Front-Desk (rouca)
   NOTE: 20260702: Upcoming DSA (dleidert/front-desk)
 --
+firefox-esr (pochu)
+  NOTE: 20261013: Added by Front-Desk (charles)
+--
 flatpak
   NOTE: 20260413: Added by Front-Desk (rouca)
   NOTE: 20260811: A bunch of new vulnerabilities were released that can be



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d03449b8939ac0fd10de72f73b4270d310ffbaf7...f96a83dc4e835cf1e3342c3635720a1768a0b2bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d03449b8939ac0fd10de72f73b4270d310ffbaf7...f96a83dc4e835cf1e3342c3635720a1768a0b2bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/eba414bd/attachment-0001.htm>