[Git][security-tracker-team/security-tracker][master] Add more information on CVE-2019-9948/python* versions

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80316478 by Salvatore Bonaccorso at 2019-07-08T19:59:32Z
Add more information on CVE-2019-9948/python* versions

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8758,10 +8758,18 @@ CVE-2019-9949 (Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, E
 	NOT-FOR-US: Western Digital
 CVE-2019-9948 (urllib in Python 2.x through 2.7.16 supports the local_file: scheme, w ...)
 	{DLA-1834-1}
+	- python3.7 3.7.4~rc2-2
+	- python3.6 <removed>
+	- python3.5 <removed>
+	- python3.4 <removed>
 	- python2.7 2.7.16-2
 	[stretch] - python2.7 <no-dsa> (Minor issue)
 	NOTE: https://bugs.python.org/issue35907
 	NOTE: https://github.com/python/cpython/pull/11842
+	NOTE: https://github.com/python/cpython/commit/34bab215596671d0dec2066ae7d7450cd73f638b (3.7)
+	NOTE: https://github.com/python/cpython/commit/4f06dae5d8d4400ba38d8502da620f07d4a5696e (3.6)
+	NOTE: https://github.com/python/cpython/commit/b15bde8058e821b383d81fcae68b335a752083ca (2.7)
+	NOTE: https://github.com/python/cpython/commit/942c31dffbe886ff02e25a319cc3891220b8c641 (2.7)
 CVE-2019-9947 (An issue was discovered in urllib2 in Python 2.x through 2.7.16 and ur ...)
 	{DLA-1835-1 DLA-1834-1}
 	- python3.7 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/80316478d31ddcdfaaf5966a802d2821525bcca7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/80316478d31ddcdfaaf5966a802d2821525bcca7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190708/0d37bcc9/attachment.html>