[Git][security-tracker-team/security-tracker][master] 2 commits: add python-bottle
Thorsten Alteholz
alteholz at debian.org
Sat Jan 23 16:12:13 GMT 2021
Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits:
02301b0e by Thorsten Alteholz at 2021-01-23T16:58:06+01:00
add python-bottle
- - - - -
019eeb90 by Thorsten Alteholz at 2021-01-23T17:08:56+01:00
mark CVE-2021-3177 as no-dsa for Stretch
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1715,6 +1715,7 @@ CVE-2021-3177 (Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in
- python2.7 <unfixed>
[bullseye] - python2.7 <ignored> (Python 2 not covered by security support)
[buster] - python2.7 <no-dsa> (Minor issue)
+ [stretch] - python2.7 <no-dsa> (Minor issue)
NOTE: https://bugs.python.org/issue42938
NOTE: https://github.com/python/cpython/pull/24239
NOTE: https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html
=====================================
data/dla-needed.txt
=====================================
@@ -84,6 +84,8 @@ openjpeg2 (Thorsten Alteholz)
NOTE: 20201220: more CVEs appeared
NOTE: 20210117: testing package
--
+python-bottle
+--
python-pysaml2
--
ruby-actionpack-page-caching (Brian May)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/af0e8b364c0e4384d80aaf742cf0b92e98e4a3ef...019eeb90613f3d8ebf39f99ae061ee301ea7716a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/af0e8b364c0e4384d80aaf742cf0b92e98e4a3ef...019eeb90613f3d8ebf39f99ae061ee301ea7716a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210123/68f089ec/attachment.html>
More information about the debian-security-tracker-commits
mailing list