[Git][security-tracker-team/security-tracker][master] AddCVE-2026-19672/python

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f359072d by Salvatore Bonaccorso at 2026-08-22T14:34:04+02:00
AddCVE-2026-19672/python

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2992,7 +2992,14 @@ CVE-2026-20030 (As part of Cisco's ongoing commitment to proactive security and
 CVE-2026-19875 (IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to ...)
 	NOT-FOR-US: IBM
 CVE-2026-19672 (The tarfile module's tar and data  extraction filters created director ...)
-	TODO: check
+	- python3.15 <unfixed>
+	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/
+	NOTE: https://github.com/python/cpython/issues/155999
+	NOTE: https://github.com/python/cpython/pull/156000
+	NOTE: https://github.com/python/cpython/pull/156040 (3.15)
+	NOTE: https://github.com/python/cpython/commit/16dea1e887ec7dfbed735beedd476b21dcc91a79 (3.14 branch)
+	NOTE: https://github.com/python/cpython/commit/c7979f3a819011a3222bd16e671264b1e34282cb (3.13 branch)
+	NOTE: https://github.com/python/cpython/commit/a5bfd964c71de4e8dfec59d28060bff1402baa21 (3.12 branch)
 CVE-2026-19653 (IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local atta ...)
 	NOT-FOR-US: IBM
 CVE-2026-19490 (Vulnerability in NetScaler ADC and NetScaler Gateway.  This issue affe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f359072d8350a7f916a3cc1120a538e156b1f982

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f359072d8350a7f916a3cc1120a538e156b1f982
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260822/c3266b21/attachment.htm>