[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-19553 and CVE-2026-19445

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b4a2f7d0 by Salvatore Bonaccorso at 2026-10-02T06:39:36+02:00
Update status for CVE-2026-19553 and CVE-2026-19445

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3025,7 +3025,7 @@ CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <= 4.13.
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname argument  ...)
 	- python3.15 <unfixed>
-	- python3.14 <unfixed>
+	- python3.14 3.14.8-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
@@ -3034,8 +3034,8 @@ CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname arg
 	NOTE: https://github.com/python/cpython/issues/156793
 	NOTE: https://github.com/python/cpython/pull/158503
 	NOTE: https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082 (3.15 branch)
-	NOTE: https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced (3.14 branch)
-	NOTE: https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062 (3.13 branch)
+	NOTE: https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced (v3.14.8)
+	NOTE: https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062 (v3.13.16)
 	NOTE: https://github.com/python/cpython/pull/158516 (3.11)
 CVE-2026-18783 (Missing authentication for critical function vulnerability in Trex Dig ...)
 	NOT-FOR-US: Trex MES
@@ -3332,7 +3332,7 @@ CVE-2025-14564 (The Viable URL Media Uploader plugin for WordPress is vulnerable
 	NOT-FOR-US: WordPress plugin
 CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or call t ...)
 	- python3.15 <unfixed>
-	- python3.14 <unfixed>
+	- python3.14 3.14.8-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
 	- python3.11 <removed>
@@ -3341,8 +3341,8 @@ CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or
 	NOTE: https://github.com/python/cpython/issues/156293
 	NOTE: https://github.com/python/cpython/pull/158504
 	NOTE: https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7 (3.15 branch)
-	NOTE: https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698 (3.14 branch)
-	NOTE: https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c (3.13 branch)
+	NOTE: https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698 (v3.14.8)
+	NOTE: https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c (v3.13.16)
 	NOTE: https://github.com/python/cpython/pull/158523 (3.11)
 CVE-2026-80490 (Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the hay ...)
 	NOT-FOR-US: Algorithm::AhoCorasick::XS Perl module



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a2f7d027800c05216f2d90a595348643382856

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a2f7d027800c05216f2d90a595348643382856
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/69348191/attachment.htm>