[Git][security-tracker-team/security-tracker][master] Add CVE-2026-6879/python

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
35eeee82 by Salvatore Bonaccorso at 2026-07-29T07:08:47+02:00
Add CVE-2026-6879/python

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31,7 +31,17 @@ CVE-2026-7362 (IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.
 CVE-2026-7187 (Missing authentication for critical function vulnerability in Universa ...)
 	NOT-FOR-US: UKBS
 CVE-2026-6879 (`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O ...)
-	TODO: check
+	- python3.14 <unfixed>
+	- python3.13 <unfixed>
+	[trixie] - python3.13 <no-dsa> (Minor issue)
+	- python3.11 <removed>
+	- python3.9 <removed>
+	- python2.7 <removed>
+	- pypy3 <unfixed>
+	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/
+	NOTE: https://github.com/python/cpython/issues/152674
+	NOTE: https://github.com/python/cpython/pull/152676
+	NOTE: https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0 (main)
 CVE-2026-67185 (TinyWeb through 0.0.8 contains a path traversal vulnerability that all ...)
 	NOT-FOR-US: TinyWeb
 CVE-2026-67184 (TinyWeb through 0.0.8 contains a null pointer dereference vulnerabilit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/35eeee8283132e0cb42f214cb70b95d334474a08

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/35eeee8283132e0cb42f214cb70b95d334474a08
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/1e1bbc67/attachment.htm>