[Git][security-tracker-team/security-tracker][master] python-git commit references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fb75dd14 by Moritz Muehlenhoff at 2026-10-16T13:39:15+02:00
python-git commit references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -99738,6 +99738,7 @@ CVE-2026-67327 (better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release vers
 CVE-2026-67326 (GitPython before 3.1.50 fails to validate newline characters in the se ...)
 	- python-git 3.1.50-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
+	NOTE: https://github.com/gitpython-developers/GitPython/commit/54538428f79b0c91ba52cda5229856a6edf7ac06 (3.1.50)
 CVE-2026-67325 (GitPython before 3.1.51 contains an incomplete command injection block ...)
 	- python-git 3.1.61-1 (bug #1143454)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
@@ -170067,6 +170068,8 @@ CVE-2026-44244 (GitPython is a python library used to interact with Git reposito
 	[trixie] - python-git <no-dsa> (Minor issue)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67
 	NOTE: https://github.com/gitpython-developers/GitPython/pull/2137
+	NOTE: https://github.com/gitpython-developers/GitPython/commit/c417af469f9aa3da8dfef78f996c0fb8c5d1f4c2 (3.1.49)
+	NOTE: https://github.com/gitpython-developers/GitPython/commit/8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3 (3.1.49)
 CVE-2026-44243 (GitPython is a python library used to interact with Git repositories.  ...)
 	- python-git 3.1.50-1
 	[trixie] - python-git <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb75dd14d5ecf79cf138a3ca6d64c3f95607a6b4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fb75dd14d5ecf79cf138a3ca6d64c3f95607a6b4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/c128bd9b/attachment.htm>