[Git][security-tracker-team/security-tracker][master] Add upstream tag references for some python CVEs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3e4236f0 by Salvatore Bonaccorso at 2026-10-31T16:57:42+01:00
Add upstream tag references for some python CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11954,8 +11954,8 @@ CVE-2026-114583 (tarfile.tar_filter could be bypassed using crafted link entries
 	NOTE: https://github.com/python/cpython/issues/160097
 	NOTE: https://github.com/python/cpython/pull/160098
 	NOTE: https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5 (main)
-	NOTE: https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477 (3.15 branch)
-	NOTE: https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b (3.14 branch)
+	NOTE: https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477 (v3.15.2)
+	NOTE: https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b (v3.14.10)
 	NOTE: https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d (v3.13.18)
 	NOTE: https://github.com/python/cpython/pull/160341 (3.13)
 	NOTE: https://github.com/python/cpython/pull/160343 (3.11)
@@ -95614,7 +95614,7 @@ CVE-2026-15310 (When decompressing crafted zip files using the bzip/LZMA/Zstanda
 	NOTE: https://github.com/python/cpython/pull/156003
 	NOTE: https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4 (main)
 	NOTE: https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8 (v3.15.0rc2)
-	NOTE: https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89 (3.14)
+	NOTE: https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89 (v3.14.8)
 	NOTE: https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1 (v3.13.16)
 CVE-2026-13478 (The Zephyr ext2 filesystem driver validates the on-disk block bitmap i ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
@@ -104393,7 +104393,7 @@ CVE-2026-17084 (The "stringprep" module didn't process characters from RFC 3454
 	NOTE: https://github.com/python/cpython/pull/155293
 	NOTE: Fixed by: https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc (main)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7 (v3.15.0rc2)
-	NOTE: Fixed by: https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae (3.14)
+	NOTE: Fixed by: https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae (v3.14.8)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296 (v3.13.16)
 CVE-2026-16309 (Authorization bypass through User-Controlled key vulnerability in Neti ...)
 	NOT-FOR-US: EdoWEB



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e4236f0185aad1fa1bda0bbfe6cd82c85bd9580

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e4236f0185aad1fa1bda0bbfe6cd82c85bd9580
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/3f591a28/attachment.htm>