[Git][security-tracker-team/security-tracker][master] Add CVE-2023-49083/python-cryptography

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1cd21518 by Salvatore Bonaccorso at 2023-11-29T22:21:26+01:00
Add CVE-2023-49083/python-cryptography

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12,7 +12,11 @@ CVE-2023-49091 (Cosmos provides users the ability self-host a home server by act
 CVE-2023-49090 (CarrierWave is a solution for file uploads for Rails, Sinatra and othe ...)
 	NOT-FOR-US: CarrierWave
 CVE-2023-49083 (cryptography is a package designed to expose cryptographic primitives  ...)
-	TODO: check
+	- python-cryptography <unfixed>
+	NOTE: https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97
+	NOTE: https://github.com/pyca/cryptography/pull/9926
+	NOTE: https://github.com/pyca/cryptography/commit/1e7b4d074e14c4e694d3ce69ad6754a6039fd6ff (main)
+	NOTE: https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a (41.0.6)
 CVE-2023-49079 (Misskey is an open source, decentralized social media platform. Misske ...)
 	TODO: check
 CVE-2023-48882 (A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UT ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1cd21518bd5803ebb43ba21e7bd2307c5242cc42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1cd21518bd5803ebb43ba21e7bd2307c5242cc42
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231129/d92947cb/attachment-0001.htm>