[Git][security-tracker-team/security-tracker][master] python-git fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
551aebb8 by Moritz Muehlenhoff at 2026-10-17T23:49:25+02:00
python-git fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2516,29 +2516,29 @@ CVE-2026-110862 (Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authent
 CVE-2026-110861 (Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 b ...)
 	NOT-FOR-US: Better Auth
 CVE-2026-110860 (GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw i ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-gq48-pqfc-9p58
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/fb7e089ee0a3394c67057c11bb7f92682ac7960d (3.2.0)
 CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection vulnerability in ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	[trixie] - python-git <not-affected> (Incomplete fix for CVE-2026-78679 not applied)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
 	NOTE: CVE exists because of an incomplete fix for CVE-2026-78679
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dcb6b14a9f6af9ece60d014b84c154f83f6906c8 (3.2.0)
 CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execution vu ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dafafff7e5438879d0167c17008342231f7af314 (3.2.0)
 CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution vulnerability  ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/73a72c969504bb5a781d8d11dde5ac775ebb17a0 (3.2.0)
 CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial of service ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/71b954501c0de6e769d2e18a42de0d07484091cc (3.2.0)
 CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure vulnerabilit ...)
-	- python-git <unfixed>
+	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
 	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/93f11925ad7c40e710e9ac0b4735f82792b1877f (3.2.0)
 CVE-2026-110854 (Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not ha ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/551aebb864b006e86081284e204d59bd2350511f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/551aebb864b006e86081284e204d59bd2350511f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/354109fd/attachment-0001.htm>