[Git][security-tracker-team/security-tracker][master] Track fixed version for two restrictedpython issues via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
453d1d6b by Salvatore Bonaccorso at 2025-01-27T22:36:59+01:00
Track fixed version for two restrictedpython issues via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1045,7 +1045,7 @@ CVE-2025-22768 (Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rock
 CVE-2025-22264 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-22153 (RestrictedPython is a tool that helps to define a subset of the Python ...)
-	- restrictedpython <unfixed> (bug #1094026)
+	- restrictedpython 8.0-1 (bug #1094026)
 	[bookworm] - restrictedpython <not-affected> (Vulnerable code introduced later)
 	[bullseye] - restrictedpython <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2
@@ -34864,7 +34864,7 @@ CVE-2024-47641 (Improper Neutralization of Input During Web Page Generation (XSS
 CVE-2024-47536 (Citizen is a MediaWiki skin that makes extensions part of the cohesive ...)
 	NOT-FOR-US: MediaWiki skin
 CVE-2024-47532 (RestrictedPython is a restricted execution environment for Python to r ...)
-	- restrictedpython <unfixed> (bug #1084057)
+	- restrictedpython 8.0-1 (bug #1084057)
 	[bookworm] - restrictedpython <no-dsa> (Minor issue)
 	[bullseye] - restrictedpython <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-5rfv-66g4-jr8h



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250127/0be76d41/attachment-0001.htm>