[Git][security-tracker-team/security-tracker][master] Update fixed version for python3.7 for CVE-2019-9947

Salvatore Bonaccorso carnil at debian.org
Mon Jul 8 21:08:45 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
959fa949 by Salvatore Bonaccorso at 2019-07-08T20:08:12Z
Update fixed version for python3.7 for CVE-2019-9947

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8772,7 +8772,7 @@ CVE-2019-9948 (urllib in Python 2.x through 2.7.16 supports the local_file: sche
 	NOTE: https://github.com/python/cpython/commit/942c31dffbe886ff02e25a319cc3891220b8c641 (2.7)
 CVE-2019-9947 (An issue was discovered in urllib2 in Python 2.x through 2.7.16 and ur ...)
 	{DLA-1835-1 DLA-1834-1}
-	- python3.7 <unfixed>
+	- python3.7 3.7.4~rc2-2
 	[buster] - python3.7 <no-dsa> (Minor issue)
 	- python3.6 <removed>
 	- python3.5 <removed>
@@ -8782,6 +8782,7 @@ CVE-2019-9947 (An issue was discovered in urllib2 in Python 2.x through 2.7.16 a
 	[stretch] - python2.7 <no-dsa> (Minor issue)
 	NOTE: https://bugs.python.org/issue35906
 	NOTE: Introduced by: https://github.com/python/cpython/commit/cc54c1c0d2d05fe7404ba64c53df4b1352ed2262
+	NOTE: CVE-2019-9947 issue fixed with same fix as for CVE-2019-9740
 CVE-2019-9946 (Cloud Native Computing Foundation (CNCF) CNI (Container Networking Int ...)
 	- kubernetes <undetermined>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1692712



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/959fa9492f2747d03f41bcc734d842f436e77d7f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/959fa9492f2747d03f41bcc734d842f436e77d7f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190708/99554077/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list