[Git][security-tracker-team/security-tracker][master] Track fixed version for two restrictedpython issues via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Jan 27 21:37:25 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
453d1d6b by Salvatore Bonaccorso at 2025-01-27T22:36:59+01:00
Track fixed version for two restrictedpython issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1045,7 +1045,7 @@ CVE-2025-22768 (Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rock
CVE-2025-22264 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin
CVE-2025-22153 (RestrictedPython is a tool that helps to define a subset of the Python ...)
- - restrictedpython <unfixed> (bug #1094026)
+ - restrictedpython 8.0-1 (bug #1094026)
[bookworm] - restrictedpython <not-affected> (Vulnerable code introduced later)
[bullseye] - restrictedpython <not-affected> (Vulnerable code introduced later)
NOTE: https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2
@@ -34864,7 +34864,7 @@ CVE-2024-47641 (Improper Neutralization of Input During Web Page Generation (XSS
CVE-2024-47536 (Citizen is a MediaWiki skin that makes extensions part of the cohesive ...)
NOT-FOR-US: MediaWiki skin
CVE-2024-47532 (RestrictedPython is a restricted execution environment for Python to r ...)
- - restrictedpython <unfixed> (bug #1084057)
+ - restrictedpython 8.0-1 (bug #1084057)
[bookworm] - restrictedpython <no-dsa> (Minor issue)
[bullseye] - restrictedpython <postponed> (Minor issue; can be fixed in next update)
NOTE: https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-5rfv-66g4-jr8h
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250127/0be76d41/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list