[Git][security-tracker-team/security-tracker][master] new python-asyncssh issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0b0baa4b by Moritz Muehlenhoff at 2026-09-18T17:17:03+02:00
new python-asyncssh issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3498,7 +3498,11 @@ CVE-2026-63225 (Redocly CLI makes OpenAPI validation, linting, and documentation
 CVE-2026-62997 (Kedro-Datasets provides data connectors for Kedro. From version 5.0.0  ...)
 	TODO: check
 CVE-2026-62949 (AsyncSSH is a Python package which provides an asynchronous client and ...)
-	TODO: check
+	- python-asyncssh <unfixed>
+	NOTE: https://github.com/ronf/asyncssh/security/advisories/GHSA-rw4j-r22c-9gc3
+	NOTE: https://github.com/ronf/asyncssh/commit/9c354270c009285525e126721e8ed5fbed1f8a67 (v2.24.0)
+	NOTE: https://github.com/ronf/asyncssh/commit/756cbae5350789ce9735f15f704bae9b5a3608b8
+	NOTE: Followup commit not in 2.24, should be included when fixing the issue
 CVE-2026-61599 (djust provides Phoenix LiveView-style reactive server-side rendering f ...)
 	NOT-FOR-US: djust
 CVE-2026-61597 (djust provides Phoenix LiveView-style reactive server-side rendering f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b0baa4b48a4a504b31294cc15bc7ab49936f7d6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b0baa4b48a4a504b31294cc15bc7ab49936f7d6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260918/6a1bbf4b/attachment.htm>