[Git][security-tracker-team/security-tracker][master] two older python issues fixed in 3.14

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dadd7781 by Moritz Muehlenhoff at 2026-10-16T14:47:06+02:00
two older python issues fixed in 3.14

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -224337,7 +224337,7 @@ CVE-2025-13465 (The _.unset and _.omit functions in Lodash are vulnerable to pro
 	[trixie] - node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9+deb13u1
 	NOTE: https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
 CVE-2025-12781 (When passing data to the b64decode(), standard_b64decode(), and urlsaf ...)
-	- python3.14 <unfixed>
+	- python3.14 3.14.2-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <ignored> (Not backported to older Python releases due to compat concerns)
 	- python3.11 <removed>
@@ -224765,7 +224765,7 @@ CVE-2025-15367 (The poplib module, when passed a user-controlled command, can ha
 	NOTE: https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7 (main)
 	NOTE: Potential regression: https://github.com/python/cpython/pull/143924#issuecomment-3774869691
 CVE-2025-15366 (The imaplib module, when passed a user-controlled command, can have ad ...)
-	- python3.14 <unfixed>
+	- python3.14 3.14.7-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <ignored> (Not backported to older Python releases due to compat concerns)
 	- python3.11 <removed>
@@ -224786,6 +224786,7 @@ CVE-2025-15366 (The imaplib module, when passed a user-controlled command, can h
 	NOTE: https://github.com/python/cpython/pull/143922
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/
 	NOTE: https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45 (main)
+	NOTE: https://github.com/python/cpython/commit/298182272a740ce2016aee2f54acbd0bba1944c1 (v3.14.7)
 	NOTE: Potential regression: https://github.com/python/cpython/pull/143922#issuecomment-3774866549
 CVE-2025-15282 (User-controlled data URLs parsed by urllib.request.DataHandler allow i ...)
 	{DLA-4455-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dadd778125bacba746442d20bdc3d19a97422248

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dadd778125bacba746442d20bdc3d19a97422248
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/d2b3523c/attachment-0001.htm>