[Git][security-tracker-team/security-tracker][master] python3.9 removed from sid

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Jan 11 08:50:50 GMT 2023



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
15cda1a0 by Moritz Muehlenhoff at 2023-01-11T09:50:24+01:00
python3.9 removed from sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13272,7 +13272,7 @@ CVE-2022-45062 (In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, t
 CVE-2022-45061 (An issue was discovered in Python before 3.11.1. An unnecessary quadra ...)
 	- python3.11 3.11.1-1
 	- python3.10 3.10.9-1
-	- python3.9 <unfixed>
+	- python3.9 <removed>
 	[bullseye] - python3.9 <no-dsa> (Minor issue)
 	- python3.7 <removed>
 	[buster] - python3.7 <postponed> (Minor issue; fix along with next DLA)
@@ -21794,7 +21794,7 @@ CVE-2022-3504 (A vulnerability was found in SourceCodester Sanitization Manageme
 CVE-2022-42919 (Python 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege ...)
 	- python3.11 3.11.0-2
 	- python3.10 3.10.8-2
-	- python3.9 <unfixed>
+	- python3.9 <removed>
 	[bullseye] - python3.9 <no-dsa> (Minor issue)
 	- python3.7 <removed>
 	[buster] - python3.7 <not-affected> (Vulnerable functionality backported later in 3.7.8)
@@ -36195,7 +36195,7 @@ CVE-2022-37454 (The Keccak XKCP SHA-3 reference implementation before fdc6fef ha
 	- php7.4 <removed>
 	- php7.3 <removed>
 	- python3.10 3.10.9-1 (unimportant)
-	- python3.9 <unfixed> (unimportant)
+	- python3.9 <removed> (unimportant)
 	- python3.7 <removed>
 	- pysha3 <removed> (bug #1023030)
 	- pypy3 7.3.9+dfsg-5
@@ -59681,7 +59681,7 @@ CVE-2022-1333 (Mattermost Playbooks plugin v1.24.0 and earlier fails to properly
 	NOT-FOR-US: Mattermost Playbooks plugin
 CVE-2015-20107 (In Python (aka CPython) up to 3.10.8, the mailcap module does not add  ...)
 	- python3.10 3.10.6-1
-	- python3.9 <unfixed>
+	- python3.9 <removed>
 	[bullseye] - python3.9 <no-dsa> (Minor issue)
 	- python3.7 <removed>
 	[buster] - python3.7 <no-dsa> (Minor issue)
@@ -131504,7 +131504,7 @@ CVE-2021-28862
 CVE-2021-28861 (** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnera ...)
 	- python3.11 3.11.0~b4-1 (unimportant)
 	- python3.10 3.10.6-1 (unimportant)
-	- python3.9 <unfixed> (unimportant)
+	- python3.9 <removed> (unimportant)
 	- python3.7 <removed> (unimportant)
 	NOTE: https://bugs.python.org/issue43223
 	NOTE: https://github.com/python/cpython/pull/93879
@@ -166584,7 +166584,7 @@ CVE-2020-27621 (The FileImporter extension in MediaWiki through 1.35.0 was not p
 CVE-2020-27620 (The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because Me ...)
 	NOT-FOR-US: MediaWiki extension
 CVE-2020-27619 (In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK  ...)
-	- python3.9 <unfixed> (unimportant)
+	- python3.9 <removed> (unimportant)
 	- python3.8 <removed> (unimportant)
 	- python3.7 <removed> (unimportant)
 	NOTE: https://python-security.readthedocs.io/vuln/cjk-codec-download-eval.html
@@ -208335,7 +208335,7 @@ CVE-2020-10736 (An authorization bypass vulnerability was found in Ceph versions
 CVE-2020-10735 (A flaw was found in python. In algorithms with quadratic time complexi ...)
 	- python3.11 3.11.0~rc2-1
 	- python3.10 3.10.7-1
-	- python3.9 <unfixed>
+	- python3.9 <removed>
 	[bullseye] - python3.9 <no-dsa> (Minor issue)
 	- python3.7 <removed>
 	[buster] - python3.7 <postponed> (Minor issue, CPU DoS)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15cda1a0f1af11b02281148a098da9d31dee0225

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/15cda1a0f1af11b02281148a098da9d31dee0225
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230111/23017713/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list