[Git][security-tracker-team/security-tracker][master] Add CVE-2026-19553/python

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
06ceede0 by Salvatore Bonaccorso at 2026-09-30T21:21:30+02:00
Add CVE-2026-19553/python

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -601,7 +601,17 @@ CVE-2026-27371 (Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.
 CVE-2026-27085 (Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 ver ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-19553 (ssl.SSLContext.wrap_bio() didn't require the server_hostname argument  ...)
-	TODO: check
+	- python3.15 <unfixed>
+	- python3.14 <unfixed>
+	- python3.13 <unfixed>
+	- python3.11 <removed>
+	- pypy3 <unfixed>
+	NOTE: https://github.com/python/cpython/issues/156793
+	NOTE: https://github.com/python/cpython/pull/158503
+	NOTE: https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082 (3.15 branch)
+	NOTE: https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced (3.14 branch)
+	NOTE: https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062 (3.13 branch)
+	NOTE: https://github.com/python/cpython/pull/158516 (3.11)
 CVE-2026-18783 (Missing authentication for critical function vulnerability in Trex Dig ...)
 	TODO: check
 CVE-2026-18782 (Improper neutralization of special elements used in an SQL command ('S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ceede09de10a951ae9f5efe462f43547431b8b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06ceede09de10a951ae9f5efe462f43547431b8b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/b73df5c3/attachment.htm>