[Git][security-tracker-team/security-tracker][master] CVE-2026-76220: Add commit link

[Emmanuel Arias (@eamanu)]

Emmanuel Arias pushed to branch master at Debian Security Tracker / security-tracker


Commits:
51fb578b by Emmanuel Arias at 2026-09-18T17:24:35-03:00
CVE-2026-76220: Add commit link

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38056,6 +38056,7 @@ CVE-2026-76221 (GitPython before 3.1.58 contains a config-name injection vulnera
 CVE-2026-76220 (GitPython before 3.1.58 contains a command execution vulnerability in  ...)
 	- python-git 3.1.61-1 (bug #1144929)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541 (3.1.58)
 CVE-2026-76219 (GitPython versions before 3.1.58 contain an arbitrary file overwrite v ...)
 	- python-git 3.1.61-1 (bug #1144929)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51fb578b0c46c8d771503cb1f3060a5b372998e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/51fb578b0c46c8d771503cb1f3060a5b372998e3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/cd8bdca8/attachment.htm>