[Git][security-tracker-team/security-tracker][master] Add CVE-2020-14422/python

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ed31c770 by Salvatore Bonaccorso at 2020-06-19T17:01:08+02:00
Add CVE-2020-14422/python

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -366,7 +366,12 @@ CVE-2020-14424
 CVE-2020-14423 (Convos before 4.20 does not properly generate a random secret in Core/ ...)
 	NOT-FOR-US: Convos
 CVE-2020-14422 (Lib/ipaddress.py in Python through 3.8.3 improperly computes hash valu ...)
-	TODO: check
+	- python3.8 <unfixed>
+	- python3.7 <removed>
+	- python3.5 <removed>
+	- python3.4 <removed>
+	NOTE: https://bugs.python.org/issue41004
+	NOTE: https://github.com/python/cpython/pull/20956
 CVE-2020-14421 (aaPanel through 6.6.6 allows remote authenticated users to execute arb ...)
 	NOT-FOR-US: aaPanel
 CVE-2020-14420



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ed31c770de8b02ca54610810b6d8f6905f6abe49

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ed31c770de8b02ca54610810b6d8f6905f6abe49
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200619/3942ac95/attachment.html>