[Git][security-tracker-team/security-tracker][master] add python3.13 commit references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2fcba42f by Moritz Muehlenhoff at 2026-10-30T16:30:00+01:00
add python3.13 commit references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10723,6 +10723,7 @@ CVE-2026-114583 (tarfile.tar_filter could be bypassed using crafted link entries
 	NOTE: https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5 (main)
 	NOTE: https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477 (3.15 branch)
 	NOTE: https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b (3.14 branch)
+	NOTE: https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d (v3.13.18)
 	NOTE: https://github.com/python/cpython/pull/160341 (3.13)
 	NOTE: https://github.com/python/cpython/pull/160343 (3.11)
 CVE-2026-114519 (Missing Authorization (CWE-862) in the user API of Roskus Prospero Flo ...)
@@ -94331,6 +94332,7 @@ CVE-2026-15310 (When decompressing crafted zip files using the bzip/LZMA/Zstanda
 	NOTE: https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4 (main)
 	NOTE: https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8 (v3.15.0rc2)
 	NOTE: https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89 (3.14)
+	NOTE: https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1 (v3.13.16)
 CVE-2026-13478 (The Zephyr ext2 filesystem driver validates the on-disk block bitmap i ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-13217 (The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp.c reconstructs a sessi ...)
@@ -103109,6 +103111,7 @@ CVE-2026-17084 (The "stringprep" module didn't process characters from RFC 3454
 	NOTE: Fixed by: https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc (main)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7 (v3.15.0rc2)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae (3.14)
+	NOTE: Fixed by: https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296 (v3.13.16)
 CVE-2026-16309 (Authorization bypass through User-Controlled key vulnerability in Neti ...)
 	NOT-FOR-US: EdoWEB
 CVE-2026-15806 (The HTTPPasswordMgr class in the urllib.request module, along with its ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fcba42fd096df6e498cb7ea91368031956826ed

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fcba42fd096df6e498cb7ea91368031956826ed
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/a7f37a2f/attachment.htm>