[Git][security-tracker-team/security-tracker][master] 2 commits: Add information around introducing issue for CVE-2019-19118
Salvatore Bonaccorso
carnil at debian.org
Mon Dec 2 20:48:46 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9f3203e7 by Salvatore Bonaccorso at 2019-12-02T20:45:25Z
Add information around introducing issue for CVE-2019-19118
Only after 2.1 the issue was introduced, cf. [1].
[1] https://www.djangoproject.com/weblog/2019/dec/02/security-releases/
- - - - -
f8f6cd32 by Salvatore Bonaccorso at 2019-12-02T20:47:23Z
Mark buster and stretch as not-affected for CVE-2019-19118/python-django
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1387,7 +1387,10 @@ CVE-2019-19119
RESERVED
CVE-2019-19118 (Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model ...)
- python-django 2:2.2.8-1 (bug #946011)
+ [buster] - python-django <not-affected> (Vulnerable code introduced later)
+ [stretch] - python-django <not-affected> (Vulnerable code introduced later)
NOTE: https://www.djangoproject.com/weblog/2019/dec/02/security-releases/
+ NOTE: Introduced after https://github.com/django/django/commit/825f0beda804e48e9197fcf3b0d909f9f548aa47 (2.1a1)
NOTE: https://github.com/django/django/commit/11c5e0609bcc0db93809de2a08e0dc3d70b393e4 (master)
NOTE: https://github.com/django/django/commit/092cd66cf3c3e175acce698d6ca2012068d878fa (3.0 branch)
NOTE: https://github.com/django/django/commit/36f580a17f0b3cb087deadf3b65eea024f479c21 (2.2 branch)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/30513df45b9b52e01c032a2c813654846958a7ca...f8f6cd3247a1742c0fbbea48777a9c973a3bc0c9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/30513df45b9b52e01c032a2c813654846958a7ca...f8f6cd3247a1742c0fbbea48777a9c973a3bc0c9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191202/94cbcd25/attachment.html>
More information about the debian-security-tracker-commits
mailing list