[Git][security-tracker-team/security-tracker][master] 2 commits: Details for CVE-2026-116672

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4c81a3ca by Stefano Rivera at 2026-10-28T10:41:05+02:00
Details for CVE-2026-116672

- - - - -
46a0452f by Salvatore Bonaccorso at 2026-10-28T09:58:21+01:00
Merge branch 'authlib' into 'master'

Details for CVE-2026-116672

See merge request security-tracker-team/security-tracker!337
- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2061,7 +2061,9 @@ CVE-2026-116674 (systeminformation is a System and OS information library for no
 CVE-2026-116673 (systeminformation is a System and OS information library for node.js.  ...)
 	TODO: check
 CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID Connect serv ...)
-	TODO: check
+	- python-authlib <unfixed>
+	NOTE: https://github.com/authlib/authlib/security/advisories/GHSA-c73q-w75p-j82v
+	NOTE: Fixed by: https://github.com/authlib/authlib/commit/1bd2a313492ce0a4d0571c150730907aa3fc91ff (v1.9.1)
 CVE-2026-116662 (Tanium addressed a compression bomb vulnerability in Enforce.)
 	NOT-FOR-US: Tanium
 CVE-2026-116660 (Tanium addressed an improper access controls vulnerability in Enforce.)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/2a7b60aa9dbb40ad06eb6be7022ca1be757692fe...46a0452fdb7747dc4913748c5f48f6e9eb260ada

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/2a7b60aa9dbb40ad06eb6be7022ca1be757692fe...46a0452fdb7747dc4913748c5f48f6e9eb260ada
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/1a460f0b/attachment.htm>