[Git][security-tracker-team/security-tracker][master] new urllib3 issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
90ac297b by Moritz Muehlenhoff at 2026-09-21T20:51:40+02:00
new urllib3 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,14 @@
+CVE-2026-XXXX [HTTPS proxy TLS configuration may be ignored or overridden]
+	- python-urllib3 2.8.0-1
+	NOTE: https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77
+CVE-2026-XXXX [HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory]
+	- python-urllib3 2.8.0-1
+	NOTE: https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw
+CVE-2026-XXXX [Chunked Deflate streaming can enter an infinite loop]
+	- python-urllib3 2.8.0-1
+	[trixie] - python-urllib3 <not-affected> (Vulnerable code not present, introduced in 2.6.2)
+	[bookworm] - python-urllib3 <not-affected> (Vulnerable code not present, introduced in 2.6.2)
+	NOTE: https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g
 CVE-2026-94218 (A flaw was found in the authentication session management of Keycloak, ...)
 	- keycloak <itp> (bug #1088287)
 CVE-2026-94217 (A flaw was found in the User-Managed Access (UMA) implementation of Ke ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90ac297be296ad6fa47b80a3f94025941bf55851

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/90ac297be296ad6fa47b80a3f94025941bf55851
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/3ad62949/attachment.htm>