[Git][security-tracker-team/security-tracker][master] Update information on CVE-2026-10142/python-kafka

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ebbb777e by Salvatore Bonaccorso at 2026-09-18T06:33:54+02:00
Update information on CVE-2026-10142/python-kafka

The 2.0.2-12 upload did not fix the CVE-2026-10142 part and got a
followup now.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -103757,13 +103757,14 @@ CVE-2026-10795 (The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPre
 CVE-2026-10733 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-10142 (kafka-python prior to 2.3.2 contains a denial-of-service vulnerability ...)
-	- python-kafka 2.0.2-12 (bug #1139878)
+	- python-kafka 2.0.2-13 (bug #1139878)
 	[trixie] - python-kafka <no-dsa> (Minor issue)
 	[bookworm] - python-kafka <postponed> (Minor issue)
 	[bullseye] - python-kafka <postponed> (Minor issue)
 	NOTE: https://github.com/dpkp/kafka-python/pull/3019
 	NOTE: https://github.com/dpkp/kafka-python/pull/3026
-	NOTE: Fixed by: https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b (3.0.0)
+	NOTE: Fixed by: https://github.com/dpkp/kafka-python/commit/bdb46ab1fe4f090dd8bf710c7ddb778993bbc16b (3.0.0)
+	NOTE: Fixed by: https://github.com/dpkp/kafka-python/commit/7250337f54ee60695f2a7faedd1ec2758fc7ac29 (3.0.0)
 CVE-2026-10087 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-0274 (An improper validation of credentials vulnerability in the CommvaultSe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebbb777eeed7b2872e99cbd86ee396b9d2ac76c4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebbb777eeed7b2872e99cbd86ee396b9d2ac76c4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/daf41b9b/attachment-0001.htm>