[Git][security-tracker-team/security-tracker][master] new python-oauthlib issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c558b1d8 by Moritz Muehlenhoff at 2026-10-14T15:34:07+02:00
new python-oauthlib issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4053,9 +4053,15 @@ CVE-2026-52394 (DeepSeek V4 is vulnerable to Incorrect Access Control via a craf
 CVE-2026-4869 (A potential privilege escalation issue was identified in InstallShield ...)
 	NOT-FOR-US: InstallShield
 CVE-2026-49265 (OAuthLib is an implementation of the OAuth request-signing logic for P ...)
-	TODO: check
+	- python-oauthlib <unfixed>
+	NOTE: https://github.com/oauthlib/oauthlib/security/advisories/GHSA-xpv3-w29h-x7cv
+	NOTE: https://github.com/oauthlib/oauthlib/pull/963
+	NOTE: https://github.com/oauthlib/oauthlib/commit/74664d3fe037a354e180e305135c6bab1747a6b0 (v4.0.0)
 CVE-2026-49264 (OAuthLib is an implementation of the OAuth request-signing logic for P ...)
-	TODO: check
+	- python-oauthlib <unfixed>
+	NOTE: https://github.com/oauthlib/oauthlib/security/advisories/GHSA-hj66-6f7g-4r5v
+	NOTE: https://github.com/oauthlib/oauthlib/pull/951
+	NOTE: https://github.com/oauthlib/oauthlib/commit/c888359f3c42bec235b2c5caab2069c9ed62457c (v4.0.0)
 CVE-2026-44415 (Affected systems do not properly restrict access to internal APIs and  ...)
 	NOT-FOR-US: Siemens
 CVE-2026-44414 (A vulnerability has been identified in Industrial Edge Cloud Device (I ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c558b1d8d74c50c48131d8374a65bc7c04ddc9e0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c558b1d8d74c50c48131d8374a65bc7c04ddc9e0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/b0bed398/attachment.htm>