[Git][security-tracker-team/security-tracker][master] Add CVE-2021-3177/python
Salvatore Bonaccorso
carnil at debian.org
Wed Jan 20 20:44:08 GMT 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5839d7c0 by Salvatore Bonaccorso at 2021-01-20T21:43:43+01:00
Add CVE-2021-3177/python
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -687,7 +687,19 @@ CVE-2021-3178 (** DISPUTED ** fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10
NOTE: https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652@fieldses.org/
NOTE: Disputed/mild security relevance/impact
CVE-2021-3177 (Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctyp ...)
- TODO: check
+ - python3.9 <unfixed>
+ - python3.8 <unfixed>
+ - python3.7 <removed>
+ - python3.5 <removed>
+ - python2.7 <unfixed>
+ NOTE: https://bugs.python.org/issue42938
+ NOTE: https://github.com/python/cpython/pull/24239
+ NOTE: https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html
+ NOTE: https://github.com/python/cpython/commit/916610ef90a0d0761f08747f7b0905541f0977c7 (master)
+ NOTE: https://github.com/python/cpython/commit/c347cbe694743cee120457aa6626712f7799a932 (3.9)
+ NOTE: https://github.com/python/cpython/commit/ece5dfd403dac211f8d3c72701fe7ba7b7aa5b5f (3.8)
+ NOTE: https://github.com/python/cpython/commit/d9b8f138b7df3b455b54653ca59f491b4840d6fa (3.7)
+ NOTE: https://github.com/python/cpython/commit/34df10a9a16b38d54421eeeaf73ec89828563be7 (3.6)
CVE-2021-3176
RESERVED
CVE-2021-3175
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5839d7c0e86ef0e49e343b4aae2da5cd944d3747
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5839d7c0e86ef0e49e343b4aae2da5cd944d3747
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210120/4668893f/attachment.html>
More information about the debian-security-tracker-commits
mailing list