[Git][security-tracker-team/security-tracker][master] new py7zr

Moritz Muehlenhoff (@jmm) jmm at debian.org
Fri Jun 26 12:34:28 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
98df00e9 by Moritz Muehlenhoff at 2026-06-26T13:34:05+02:00
new py7zr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1735,7 +1735,8 @@ CVE-2026-27708 (FOSSBilling is a free, open-source billing and client management
 CVE-2026-25119 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, when  ...)
 	NOT-FOR-US: Go Git Service
 CVE-2026-23879 (py7zr is a Python-based library and utility to support 7zip archive co ...)
-	TODO: check
+	- py7zr 1.1.2+dfsg-1
+	NOTE: https://github.com/miurahr/py7zr/security/advisories/GHSA-q6rc-2cgv-63h7
 CVE-2026-1840 (The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized ...)
 	NOT-FOR-US: Aclara Metrum Cellular Web Interface
 CVE-2026-1606 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98df00e9769d7d7958757a8d8945f2b078244ae6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/98df00e9769d7d7958757a8d8945f2b078244ae6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260626/93781925/attachment.htm>


More information about the debian-security-tracker-commits mailing list