[Git][security-tracker-team/security-tracker][master] Add CVE-2024-27306/python-aiohttp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
386f713d by Salvatore Bonaccorso at 2024-04-19T22:42:16+02:00
Add CVE-2024-27306/python-aiohttp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -410,7 +410,10 @@ CVE-2024-28185 (Judge0 is an open-source online code execution system. The appli
 CVE-2024-28076 (The SolarWinds Platform was susceptible to a Arbitrary Open Redirectio ...)
 	NOT-FOR-US: SolarWinds
 CVE-2024-27306 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
-	TODO: check
+	- python-aiohttp <unfixed>
+	NOTE: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-7gpw-8wmc-pm8g
+	NOTE: https://github.com/aio-libs/aiohttp/pull/8319
+	NOTE: https://github.com/aio-libs/aiohttp/commit/28335525d1eac015a7e7584137678cbb6ff19397 (v3.9.4)
 CVE-2024-24910 (A local attacker can escalate privileges on affected Check Point ZoneA ...)
 	NOT-FOR-US: Check Point
 CVE-2024-23557 (HCL Connections contains a user enumeration vulnerability. Certain act ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/386f713d82a007cac6bd29b085e9919abeda9c8e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/386f713d82a007cac6bd29b085e9919abeda9c8e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240419/d8b1076f/attachment.htm>