[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2026-78676: Add commit link

[Emmanuel Arias (@eamanu)]

Emmanuel Arias pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e81c5718 by Emmanuel Arias at 2026-09-18T17:42:59-03:00
CVE-2026-78676: Add commit link

- - - - -
d7b410b1 by Emmanuel Arias at 2026-09-18T17:43:01-03:00
CVE-2026-78677: Add commit link

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -33547,9 +33547,11 @@ CVE-2026-78678 (GitPython versions before 3.1.59 contain an incomplete denylist
 CVE-2026-78677 (GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone ...)
 	- python-git 3.1.61-1 (bug #1145672)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d (3.1.59)
 CVE-2026-78676 (GitPython before 3.1.59 fails to safely re-serialize multi-line git-co ...)
 	- python-git 3.1.61-1 (bug #1145672)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w
+	NOTE: Fixed by: https://github.com/gitpython-developers/GitPython/commit/4b4e47fc1224e23b0c8ee7220a7192818f2e4abb (3.1.59)
 CVE-2026-78675 (GitPython before 3.1.59 fails to disable merge_includes when parsing . ...)
 	- python-git 3.1.61-1 (bug #1145672)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a89b132e38f4808dec14f8f41f06e5df04716bcb...d7b410b1f929d7234ab843e0092d26a243fc10dd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a89b132e38f4808dec14f8f41f06e5df04716bcb...d7b410b1f929d7234ab843e0092d26a243fc10dd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/04730e84/attachment.htm>