[Git][security-tracker-team/security-tracker][master] 2 commits: dla: python3.9 status update

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ad259e8d by Sylvain Beucler at 2024-11-21T17:26:52+01:00
dla: python3.9 status update

- - - - -
7d1494e5 by Sylvain Beucler at 2024-11-21T17:26:54+01:00
CVE-2023-27043,CVE-2024-7592/python: update postponed reason, fix merged

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -24318,7 +24318,7 @@ CVE-2024-7592 (There is a LOW severity vulnerability affecting CPython, specific
 	- python3.11 <removed>
 	[bookworm] - python3.11 <postponed> (Minor issue, wait until merged into 3.11 branch)
 	- python3.9 <removed>
-	[bullseye] - python3.9 <postponed> (Minor issue, wait until merged into 3.9 branch)
+	[bullseye] - python3.9 <postponed> (Minor issue)
 	NOTE: https://github.com/python/cpython/pull/123075
 	NOTE: https://github.com/python/cpython/issues/123067
 	NOTE: https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621 (v3.13.0rc2)
@@ -138258,16 +138258,16 @@ CVE-2023-27043 (The email module of Python through 3.11.3 incorrectly parses e-m
 	[bookworm] - python3.11 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
 	- python3.10 <removed>
 	- python3.9 <removed>
-	[bullseye] - python3.9 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
+	[bullseye] - python3.9 <postponed> (Minor issue)
 	- python3.7 <removed>
-	[buster] - python3.7 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
+	[buster] - python3.7 <postponed> (Minor issue)
 	- python2.7 <removed>
 	[bullseye] - python2.7 <ignored> (Unsupported in Bullseye, only included to build a few applications)
-	[buster] - python2.7 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
+	[buster] - python2.7 <postponed> (Minor issue)
 	- pypy3 <unfixed> (bug #1072179)
 	[bookworm] - pypy3 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
-	[bullseye] - pypy3 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
-	[buster] - pypy3 <postponed> (Minor issue, wait until upstream has decided whether to backport to older branches)
+	[bullseye] - pypy3 <postponed> (Minor issue)
+	[buster] - pypy3 <postponed> (Minor issue)
 	NOTE: https://github.com/python/cpython/issues/102988
 	NOTE: https://github.com/python/cpython/commit/15068242bd4405475f70a81805a8895ca309a310 (v3.12.6)
 	NOTE: https://github.com/python/cpython/commit/bc4a703a934a59657ecd018320ef990bc5542803 (v3.11.10)


=====================================
data/dla-needed.txt
=====================================
@@ -177,6 +177,7 @@ python-werkzeug (dleidert)
 --
 python3.9 (Adrian Bunk)
   NOTE: 20240906: Added by Front-Desk (lamby)
+  NOTE: 20241121: Also follow fixes from bookworm 12.8 (CVE-2024-6232 + CVE-2024-8088 regression) (Beuc/front-desk)
 --
 qemu
   NOTE: 20240815: Added by Front-Desk (Beuc)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ab3e040b4de9b95ff610bf2c4899ed107eda33e3...7d1494e5db4786af446ad9582ba7411c64a4b756

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/ab3e040b4de9b95ff610bf2c4899ed107eda33e3...7d1494e5db4786af446ad9582ba7411c64a4b756
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241121/2c2777d2/attachment.htm>