[Git][security-tracker-team/security-tracker][master] Where possible link directly to the single commit

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
55a54fd0 by Salvatore Bonaccorso at 2026-10-18T07:31:25+02:00
Where possible link directly to the single commit

Tracking was already right, some of the merges for the fixes contained
only one commit, so reference that one directly instead of the merge
commit. Keep the merge commit for those which contained multiple
commits.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2530,8 +2530,8 @@ CVE-2026-110859 (GitPython before 3.2.0 contains an argument injection vulnerabi
 	- python-git 3.2.1-1
 	[trixie] - python-git <not-affected> (Incomplete fix for CVE-2026-78679 not applied)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8da65080849a56a2fc9f3e7817bbf0524e8397d5 (3.2.0)
 	NOTE: CVE exists because of an incomplete fix for CVE-2026-78679
-	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/dcb6b14a9f6af9ece60d014b84c154f83f6906c8 (3.2.0)
 CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execution vu ...)
 	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
@@ -2539,15 +2539,15 @@ CVE-2026-110858 (GitPython from 3.1.30 before 3.2.0 contains a remote code execu
 CVE-2026-110857 (GitPython before 3.2.0 contains a remote code execution vulnerability  ...)
 	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
-	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/73a72c969504bb5a781d8d11dde5ac775ebb17a0 (3.2.0)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b (3.2.0)
 CVE-2026-110856 (GitPython before 3.2.0 contains a regular expression denial of service ...)
 	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
-	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/71b954501c0de6e769d2e18a42de0d07484091cc (3.2.0)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15 (3.2.0)
 CVE-2026-110855 (GitPython before 3.2.0 contains an information disclosure vulnerabilit ...)
 	- python-git 3.2.1-1
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fx3j-rwgx-fr94
-	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/93f11925ad7c40e710e9ac0b4735f82792b1877f (3.2.0)
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/9349ff58ee00c9fb14d515c8e693f33b2144b238 (3.2.0)
 CVE-2026-110854 (Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not ha ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-110853 (n8n before 1.123.83 contains an authorization bypass vulnerability tha ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/55a54fd0dc9a660b6556ba74913d07937c43a536

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/55a54fd0dc9a660b6556ba74913d07937c43a536
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/3f08e99a/attachment-0001.htm>