Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b4a2f7d0 by Salvatore Bonaccorso at 2026-10-02T06:39:36+02:00
Update status for CVE-2026-19553 and CVE-2026-19445
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3025,7 +3025,7 @@ CVE-2026-27085 (Shop manager Content Injection in Astra
WordPress Theme <= 4.13.
NOT-FOR-US: WordPress plugin or theme
CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname
argument ...)
- python3.15 <unfixed>
- - python3.14 <unfixed>
+ - python3.14 3.14.8-1
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
@@ -3034,8 +3034,8 @@ CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require
the server_hostname arg
NOTE: https://github.com/python/cpython/issues/156793
NOTE: https://github.com/python/cpython/pull/158503
NOTE:
https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082
(3.15 branch)
- NOTE:
https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced
(3.14 branch)
- NOTE:
https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062
(3.13 branch)
+ NOTE:
https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced
(v3.14.8)
+ NOTE:
https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062
(v3.13.16)
NOTE: https://github.com/python/cpython/pull/158516 (3.11)
CVE-2026-18783 (Missing authentication for critical function vulnerability in
Trex Dig ...)
NOT-FOR-US: Trex MES
@@ -3332,7 +3332,7 @@ CVE-2025-14564 (The Viable URL Media Uploader plugin for
WordPress is vulnerable
NOT-FOR-US: WordPress plugin
CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash
or call t ...)
- python3.15 <unfixed>
- - python3.14 <unfixed>
+ - python3.14 3.14.8-1
- python3.13 <unfixed>
[trixie] - python3.13 <no-dsa> (Minor issue)
- python3.11 <removed>
@@ -3341,8 +3341,8 @@ CVE-2026-19445 (A remote, unauthenticated TLS client can
make a server crash or
NOTE: https://github.com/python/cpython/issues/156293
NOTE: https://github.com/python/cpython/pull/158504
NOTE:
https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7
(3.15 branch)
- NOTE:
https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698
(3.14 branch)
- NOTE:
https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c
(3.13 branch)
+ NOTE:
https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698
(v3.14.8)
+ NOTE:
https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c
(v3.13.16)
NOTE: https://github.com/python/cpython/pull/158523 (3.11)
CVE-2026-80490 (Algorithm::AhoCorasick::XS versions through 0.04 for Perl read
the hay ...)
NOT-FOR-US: Algorithm::AhoCorasick::XS Perl module
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a2f7d027800c05216f2d90a595348643382856
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a2f7d027800c05216f2d90a595348643382856
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
