[Git][security-tracker-team/security-tracker][master] Track fixed version for python-aiohttp upload via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Jun 16 16:22:04 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
840a7a63 by Salvatore Bonaccorso at 2024-06-16T17:18:57+02:00
Track fixed version for python-aiohttp upload via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16609,7 +16609,7 @@ CVE-2024-4140 (An excessive memory use issue (CWE-770) exists in Email-MIME, bef
CVE-2024-4029 (A vulnerability was found in Wildfly\u2019s management interface. Due ...)
- wildfly <itp> (bug #752018)
CVE-2024-30251 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
- - python-aiohttp <unfixed> (bug #1070364)
+ - python-aiohttp 3.9.5-1 (bug #1070364)
[buster] - python-aiohttp <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2024/05/02/4
NOTE: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84
@@ -20161,7 +20161,7 @@ CVE-2024-28185 (Judge0 is an open-source online code execution system. The appli
CVE-2024-28076 (The SolarWinds Platform was susceptible to a Arbitrary Open Redirectio ...)
NOT-FOR-US: SolarWinds
CVE-2024-27306 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
- - python-aiohttp <unfixed> (bug #1070665)
+ - python-aiohttp 3.9.5-1 (bug #1070665)
[bookworm] - python-aiohttp <no-dsa> (Minor issue)
[bullseye] - python-aiohttp <no-dsa> (Minor issue)
[buster] - python-aiohttp <postponed> (Minor issue)
@@ -42770,7 +42770,7 @@ CVE-2023-6780 (An integer overflow was found in the __vsyslog_internal function
NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2024-0003;hb=HEAD
NOTE: https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2024-0003
CVE-2024-23829 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
- - python-aiohttp <unfixed> (bug #1062708)
+ - python-aiohttp 3.9.5-1 (bug #1062708)
[bookworm] - python-aiohttp <no-dsa> (Minor issue)
[bullseye] - python-aiohttp <no-dsa> (Minor issue)
[buster] - python-aiohttp <no-dsa> (Minor issue)
@@ -42779,7 +42779,7 @@ CVE-2024-23829 (aiohttp is an asynchronous HTTP client/server framework for asyn
NOTE: https://github.com/aio-libs/aiohttp/commit/33ccdfb0a12690af5bb49bda2319ec0907fa7827 (master)
NOTE: https://github.com/aio-libs/aiohttp/commit/d33bc21414e283c9e6fe7f6caf69e2ed60d66c82 (v3.9.2)
CVE-2024-23334 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
- - python-aiohttp <unfixed> (bug #1062709)
+ - python-aiohttp 3.9.5-1 (bug #1062709)
[bookworm] - python-aiohttp <no-dsa> (Minor issue)
[bullseye] - python-aiohttp <no-dsa> (Minor issue)
[buster] - python-aiohttp <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/840a7a6332a697b8ff4c9e531cdc1781998255b4
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/840a7a6332a697b8ff4c9e531cdc1781998255b4
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240616/3c225ff5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list