[Git][security-tracker-team/security-tracker][master] Track fixed version for python-aiohttp upload via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
840a7a63 by Salvatore Bonaccorso at 2024-06-16T17:18:57+02:00
Track fixed version for python-aiohttp upload via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16609,7 +16609,7 @@ CVE-2024-4140 (An excessive memory use issue (CWE-770) exists in Email-MIME, bef
 CVE-2024-4029 (A vulnerability was found in Wildfly\u2019s management interface. Due  ...)
 	- wildfly <itp> (bug #752018)
 CVE-2024-30251 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
-	- python-aiohttp <unfixed> (bug #1070364)
+	- python-aiohttp 3.9.5-1 (bug #1070364)
 	[buster] - python-aiohttp <postponed> (Minor issue)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/05/02/4
 	NOTE: https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5m98-qgg9-wh84
@@ -20161,7 +20161,7 @@ CVE-2024-28185 (Judge0 is an open-source online code execution system. The appli
 CVE-2024-28076 (The SolarWinds Platform was susceptible to a Arbitrary Open Redirectio ...)
 	NOT-FOR-US: SolarWinds
 CVE-2024-27306 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
-	- python-aiohttp <unfixed> (bug #1070665)
+	- python-aiohttp 3.9.5-1 (bug #1070665)
 	[bookworm] - python-aiohttp <no-dsa> (Minor issue)
 	[bullseye] - python-aiohttp <no-dsa> (Minor issue)
 	[buster] - python-aiohttp <postponed> (Minor issue)
@@ -42770,7 +42770,7 @@ CVE-2023-6780 (An integer overflow was found in the __vsyslog_internal function
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2024-0003;hb=HEAD
 	NOTE: https://sourceware.org/cgit/glibc/tree/advisories/GLIBC-SA-2024-0003
 CVE-2024-23829 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
-	- python-aiohttp <unfixed> (bug #1062708)
+	- python-aiohttp 3.9.5-1 (bug #1062708)
 	[bookworm] - python-aiohttp <no-dsa> (Minor issue)
 	[bullseye] - python-aiohttp <no-dsa> (Minor issue)
 	[buster] - python-aiohttp <no-dsa> (Minor issue)
@@ -42779,7 +42779,7 @@ CVE-2024-23829 (aiohttp is an asynchronous HTTP client/server framework for asyn
 	NOTE: https://github.com/aio-libs/aiohttp/commit/33ccdfb0a12690af5bb49bda2319ec0907fa7827 (master)
 	NOTE: https://github.com/aio-libs/aiohttp/commit/d33bc21414e283c9e6fe7f6caf69e2ed60d66c82 (v3.9.2)
 CVE-2024-23334 (aiohttp is an asynchronous HTTP client/server framework for asyncio an ...)
-	- python-aiohttp <unfixed> (bug #1062709)
+	- python-aiohttp 3.9.5-1 (bug #1062709)
 	[bookworm] - python-aiohttp <no-dsa> (Minor issue)
 	[bullseye] - python-aiohttp <no-dsa> (Minor issue)
 	[buster] - python-aiohttp <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/840a7a6332a697b8ff4c9e531cdc1781998255b4

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/840a7a6332a697b8ff4c9e531cdc1781998255b4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240616/3c225ff5/attachment.htm>