[Git][security-tracker-team/security-tracker][cpython-cves] Update Python 3.14 CVEs

[Stefano Rivera (@stefanor)]

Stefano Rivera pushed to branch cpython-cves at Debian Security Tracker / security-tracker


Commits:
31569e21 by Stefano Rivera at 2026-10-27T17:58:36+02:00
Update Python 3.14 CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -40758,7 +40758,7 @@ CVE-2026-15390 (Das U-Bootwith CONFIG_IP_DEFRAG=y parameter fails to clear IP re
 	NOTE: Fixed by: https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa (v2026.07)
 CVE-2026-12345 (The cleanup of tempfile.TemporaryDirectory is vulnerable to a race con ...)
 	- python3.15 3.15.0~rc3-1
-	- python3.14 <unfixed>
+	- python3.14 3.14.9-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
@@ -67287,7 +67287,7 @@ CVE-2026-87983 (An arbitrary file read vulnerability in Mistral Vibe, introduced
 	NOT-FOR-US: Mistral Vibe
 CVE-2026-87910 (When tarfile extracts a link on a system that doesn't support links, i ...)
 	- python3.15 3.15.0~rc3-1
-	- python3.14 <unfixed>
+	- python3.14 3.14.9-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <not-affected> (extraction filters (PEP 706) absent in 3.11.2)
@@ -158357,7 +158357,7 @@ CVE-2026-12289 (Privilege escalation in the Graphics: WebRender component. This
 CVE-2026-12225 (syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitb ...)
 	NOT-FOR-US: syracom AG Secure Login (2FA) for Atlassian
 CVE-2026-12003 (To allow builds of Python to be run from an in-tree layout (rather tha ...)
-	- python3.14 <unfixed> (unimportant)
+	- python3.14 3.14.9-1 (unimportant)
 	- python3.13 <unfixed> (unimportant)
 	- python3.11 <removed> (unimportant)
 	- python3.9 <removed> (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31569e21862a66b5c0f17da29543481e5a3f7f5e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/31569e21862a66b5c0f17da29543481e5a3f7f5e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/ed8b6c23/attachment-0001.htm>