Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
06ceede0 by Salvatore Bonaccorso at 2026-09-30T21:21:30+02:00
Add CVE-2026-19553/python
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -601,7 +601,17 @@ CVE-2026-27371 (Unauthenticated Cross Site Scripting (XSS)
in WPFunnels <= 3.13.
CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <=
4.13.12 ver ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname
argument ...)
- TODO: check
+ - python3.15 <unfixed>
+ - python3.14 <unfixed>
+ - python3.13 <unfixed>
+ - python3.11 <removed>
+ - pypy3 <unfixed>
+ NOTE: https://github.com/python/cpython/issues/156793
+ NOTE: https://github.com/python/cpython/pull/158503
+ NOTE:
https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082
(3.15 branch)
+ NOTE:
https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced
(3.14 branch)
+ NOTE:
https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062
(3.13 branch)
+ NOTE: https://github.com/python/cpython/pull/158516 (3.11)
CVE-2026-18783 (Missing authentication for critical function vulnerability in
Trex Dig ...)
TODO: check
CVE-2026-18782 (Improper neutralization of special elements used in an SQL
command ('S ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ceede09de10a951ae9f5efe462f43547431b8b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ceede09de10a951ae9f5efe462f43547431b8b
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
