Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
90a6f973 by Salvatore Bonaccorso at 2026-08-21T23:18:00+02:00
Add CVE-2026-49825/lxml
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1173,7 +1173,12 @@ CVE-2026-53424 (Authentication Bypass by Capture-replay
vulnerability in dropbox
CVE-2026-49996 (SecureDrop Client is a desktop app for journalists to securely
communi ...)
NOT-FOR-US: SecureDrop Client
CVE-2026-49825 (lxml is a library for processing XML and HTML in the Python
language. ...)
- TODO: check
+ - lxml <unfixed>
+ - lxml-html-clean <unfixed>
+ NOTE:
https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f
+ NOTE: Fixed by:
https://github.com/lxml/lxml/commit/5927a6d5e851845140975d99b65461e255caaab0
(lxml-6.1.1)
+ NOTE: lxml-html-clean was split out of lxml in 5.2.0
+ NOTE: Code fix in src:lxml, lxml-html-clean will require bumped
dependency on lxml >= 6.1.1
CVE-2026-46537
REJECTED
CVE-2026-46536
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90a6f97323e7ec07211210d3903e405da27b8f6b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90a6f97323e7ec07211210d3903e405da27b8f6b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
