[Git][security-tracker-team/security-tracker][master] Add CVE-2023-33595/python*

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e7139a67 by Salvatore Bonaccorso at 2023-06-08T22:43:38+02:00
Add CVE-2023-33595/python*

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -104,7 +104,14 @@ CVE-2023-34109 (zxcvbn-ts is an open source password strength estimator written
 CVE-2023-34108 (mailcow is a mail server suite based on Dovecot, Postfix and other ope ...)
 	NOT-FOR-US: mailcow
 CVE-2023-33595 (CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-fre ...)
-	TODO: check
+	- python3.11 <not-affected> (Vulnerable code not present)
+	- python3.10 <not-affected> (Vulnerable code not present)
+	- python3.9 <not-affected> (Vulnerable code not present)
+	- python3.7 <not-affected> (Vulnerable code not present)
+	- python2.7 <not-affected> (Vulnerable code not present)
+	NOTE: https://github.com/python/cpython/issues/103824
+	NOTE: Introduced by: https://github.com/python/cpython/commit/1ef61cf71a218c71860ff6aecf0fd51edb8b65dc (v3.12.0b1)
+	NOTE: Fixed by: https://github.com/python/cpython/commit/d5a97074d24cd14cb2a35a2b1ad3074863cde264 (v3.12.0b1)
 CVE-2023-33556 (TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a com ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2023-33553 (An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attacker ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7139a67da71e5e8bb2590f5bdf41127ce61fecd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7139a67da71e5e8bb2590f5bdf41127ce61fecd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230608/f8fd5a85/attachment.htm>