[Git][security-tracker-team/security-tracker][master] 2 commits: Update Python 3.14 CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
31569e21 by Stefano Rivera at 2026-10-27T17:58:36+02:00
Update Python 3.14 CVEs

- - - - -
ca648b98 by Salvatore Bonaccorso at 2026-10-27T17:35:34+01:00
Merge branch 'cpython-cves' into 'master'

cPython CVEs

See merge request security-tracker-team/security-tracker!334
- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -40813,7 +40813,7 @@ CVE-2026-15390 (Das U-Bootwith CONFIG_IP_DEFRAG=y parameter fails to clear IP re
 	NOTE: Fixed by: https://source.denx.de/u-boot/u-boot/-/commit/b1aec609bb5e0d08c25c888c91935287ab4ee5fa (v2026.07)
 CVE-2026-12345 (The cleanup of tempfile.TemporaryDirectory is vulnerable to a race con ...)
 	- python3.15 3.15.0~rc3-1
-	- python3.14 <unfixed>
+	- python3.14 3.14.9-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
@@ -67377,7 +67377,7 @@ CVE-2026-87983 (An arbitrary file read vulnerability in Mistral Vibe, introduced
 	NOT-FOR-US: Mistral Vibe
 CVE-2026-87910 (When tarfile extracts a link on a system that doesn't support links, i ...)
 	- python3.15 3.15.0~rc3-1
-	- python3.14 <unfixed>
+	- python3.14 3.14.9-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <not-affected> (extraction filters (PEP 706) absent in 3.11.2)
@@ -158449,7 +158449,7 @@ CVE-2026-12289 (Privilege escalation in the Graphics: WebRender component. This
 CVE-2026-12225 (syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitb ...)
 	NOT-FOR-US: syracom AG Secure Login (2FA) for Atlassian
 CVE-2026-12003 (To allow builds of Python to be run from an in-tree layout (rather tha ...)
-	- python3.14 <unfixed> (unimportant)
+	- python3.14 3.14.9-1 (unimportant)
 	- python3.13 <unfixed> (unimportant)
 	- python3.11 <removed> (unimportant)
 	- python3.9 <removed> (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d3dcf0f93557415b1a49c5552977f9c71a93c4f7...ca648b98a73ffb40a247c0268d64182f2a06d409

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/d3dcf0f93557415b1a49c5552977f9c71a93c4f7...ca648b98a73ffb40a247c0268d64182f2a06d409
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/76171d1b/attachment.htm>