[Git][security-tracker-team/security-tracker][master] Track fixes for two python3.15 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
92a6d723 by Salvatore Bonaccorso at 2026-10-03T14:57:35+02:00
Track fixes for two python3.15 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4438,7 +4438,7 @@ CVE-2026-27371 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.
 CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 ver ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname argument  ...)
-	- python3.15 <unfixed>
+	- python3.15 3.15.0~rc3-1
 	- python3.14 3.14.8-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
@@ -4447,7 +4447,7 @@ CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname arg
 	[trixie] - pypy3 <no-dsa> (Minor issue)
 	NOTE: https://github.com/python/cpython/issues/156793
 	NOTE: https://github.com/python/cpython/pull/158503
-	NOTE: https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082 (3.15 branch)
+	NOTE: https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082 (v3.15.0rc3)
 	NOTE: https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced (v3.14.8)
 	NOTE: https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062 (v3.13.16)
 	NOTE: https://github.com/python/cpython/pull/158516 (3.11)
@@ -4747,7 +4747,7 @@ CVE-2026-100253 (In JetBrains TeamCity before 2026.2,  2026.1.4,  2025.11.8 sand
 CVE-2025-14564 (The Viable URL Media Uploader plugin for WordPress is vulnerable to St ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or call t ...)
-	- python3.15 <unfixed>
+	- python3.15 3.15.0~rc3-1
 	- python3.14 3.14.8-1
 	- python3.13 <unfixed>
 	[trixie] - python3.13 <no-dsa> (Minor issue)
@@ -4756,7 +4756,7 @@ CVE-2026-19445 (A remote, unauthenticated TLS client can make a server crash or
 	[trixie] - pypy3 <no-dsa> (Minor issue)
 	NOTE: https://github.com/python/cpython/issues/156293
 	NOTE: https://github.com/python/cpython/pull/158504
-	NOTE: https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7 (3.15 branch)
+	NOTE: https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7 (v3.15.0rc3)
 	NOTE: https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698 (v3.14.8)
 	NOTE: https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c (v3.13.16)
 	NOTE: https://github.com/python/cpython/pull/158523 (3.11)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92a6d723dbefc75120ebc6ff9fdf2fca0b14634a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/92a6d723dbefc75120ebc6ff9fdf2fca0b14634a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/7f4443aa/attachment.htm>