[Git][security-tracker-team/security-tracker][master] Add CVE-2020-36242/python-cryptography

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5e78baa by Salvatore Bonaccorso at 2021-02-08T09:13:52+01:00
Add CVE-2020-36242/python-cryptography

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,7 +21,8 @@ CVE-2021-26843 (An issue was discovered in sthttpd through 2.27.1. On systems wh
 CVE-2020-36243 (The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injecti ...)
 	TODO: check
 CVE-2020-36242 (In the cryptography package before 3.3.2 for Python, certain sequences ...)
-	TODO: check
+	- python-cryptography <unfixed>
+	NOTE: https://github.com/pyca/cryptography/issues/5615
 CVE-2021-21299 [hyper: Multiple Transfer-Encoding headers misinterprets request payload]
 	RESERVED
 	- rust-hyper <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5e78baae3da8be15cb6273cdbf6899b208d6cf4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5e78baae3da8be15cb6273cdbf6899b208d6cf4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210208/ada140bd/attachment.html>