[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-110859: Add commit link.

[Emmanuel Arias (@eamanu)]

Emmanuel Arias pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5c3c86ab by Emmanuel Arias at 2026-10-17T13:44:52-03:00
CVE-2026-110859: Add commit link.

- - - - -
3b8aed27 by Emmanuel Arias at 2026-10-17T13:47:59-03:00
CVE-2026-110860: Add commit link.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2382,11 +2382,13 @@ CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from 1
 CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw i ...)
 	- python-git <unfixed>
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/fb7e089ee0a3394c67057c11bb7f92682ac7960d (3.2.0)
 CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection vulnerability in ...)
 	- python-git <unfixed>
 	[trixie] - python-git <not-affected> (Incomplete fix for CVE-2026-78679 not applied)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
 	NOTE: CVE exists because of an incomplete fir for CVE-2026-78679
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dcb6b14a9f6af9ece60d014b84c154f83f6906c8 (3.2.0)
 CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execution vu ...)
 	- python-git <unfixed>
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b6b88b54022b8d808de5e7e5bfbb19c0d1d49b8d...3b8aed279b84b98b41205b8ba5146511191098f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b6b88b54022b8d808de5e7e5bfbb19c0d1d49b8d...3b8aed279b84b98b41205b8ba5146511191098f0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/0679a585/attachment.htm>