[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2026-114583/python3.15 via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
37003490 by Salvatore Bonaccorso at 2026-10-23T22:12:58+02:00
Track fixed version for CVE-2026-114583/python3.15 via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1557,7 +1557,7 @@ CVE-2026-114603 (OpenTelemetry Python provides the Python API and SDK for OpenTe
 	NOTE: https://github.com/open-telemetry/opentelemetry-python/pull/5749
 	NOTE: Fixed by: https://github.com/open-telemetry/opentelemetry-python/commit/d5224bf4ffdf2aee1b592ad238dcc32ca957f26b (v1.45.1)
 CVE-2026-114583 (tarfile.tar_filter could be bypassed using crafted link entries, inclu ...)
-	- python3.15 <unfixed>
+	- python3.15 3.15.1-1
 	- python3.14 3.14.9-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/370034901cc38c7864ec37076e7db33a7ffa536c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/370034901cc38c7864ec37076e7db33a7ffa536c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/d39d9c56/attachment-0001.htm>