[Git][security-tracker-team/security-tracker][master] Add CVE-2022-0391/python
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Jan 29 07:52:12 GMT 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ee9362ac by Salvatore Bonaccorso at 2022-01-29T08:51:44+01:00
Add CVE-2022-0391/python
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -210,8 +210,17 @@ CVE-2022-21154
RESERVED
CVE-2022-0392
RESERVED
-CVE-2022-0391
+CVE-2022-0391 [urllib.parse does not sanitize URLs containing ASCII newline and tabs]
RESERVED
+ - python3.9 3.9.7-1
+ NOTE: https://bugs.python.org/issue43882
+ NOTE: Fixed by: https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4 (v3.10.0b1)
+ NOTE: Followup for 3.10.x: https://github.com/python/cpython/commit/24f1d1a8a2c4aa58a606b4b6d5fa4305a3b91705 (v3.10.0b2)
+ NOTE: Fixed by: https://github.com/python/cpython/commit/491fde0161d5e527eeff8586dd3972d7d3a631a7 (v3.9.5)
+ NOTE: Followup for 3.9.x: https://github.com/python/cpython/commit/8a595744e696a0fb92dccc5d4e45da41571270a1 (v3.9.6)
+ NOTE: Fixed by: https://github.com/python/cpython/commit/515a7bc4e13645d0945b46a8e1d9102b918cd407 (v3.8.11)
+ NOTE: Fixed by: https://github.com/python/cpython/commit/f4dac7ec55477a6c5d965e594e74bd6bda786903 (v3.7.11)
+ NOTE: Fixed by: https://github.com/python/cpython/commit/6c472d3a1d334d4eeb4a25eba7bf3b01611bf667 (v3.6.14)
CVE-2022-0390
RESERVED
CVE-2022-0389
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee9362ac44a1edec4afced5fc40f09cecafe6ec4
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ee9362ac44a1edec4afced5fc40f09cecafe6ec4
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220129/1bc6f48d/attachment.htm>
More information about the debian-security-tracker-commits
mailing list