[Git][security-tracker-team/security-tracker][master] CVE-2025-1795

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
28140538 by Bastien Roucariès at 2025-03-09T16:51:03+00:00
CVE-2025-1795

Add regression

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2359,10 +2359,13 @@ CVE-2025-1795 (During an address list folding when a separating comma ends up on
 	- python3.11 <removed>
 	- python3.9 <removed>
 	NOTE: https://github.com/python/cpython/issues/100884
+	NOTE: Regression issue: https://github.com/python/cpython/issues/118643
 	NOTE: https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/
 	NOTE: Fixed by: https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48 (v3.13.0a5)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74 (v3.12.3)
+	NOTE: Regression fixed by: https://github.com/python/cpython/commit/8c96850161da23ad2b37551d2a89c7d4716fe024 (v3.12.4)
 	NOTE: Fixed by: https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593 (v3.11.9)
+	NOTE: Regression Fixed by: https://github.com/python/cpython/commit/4762b365406a8cf026a4a4ddcae34c28a41c3de9 (v3.11.10)
 	NOTE: Introduced by: https://github.com/python/cpython/commit/0b6f6c82b51b7071d88f48abb3192bf3dc2a2d24 (v3.3.0a4)
 CVE-2025-1776 (Cross-Site Scripting (XSS) vulnerability in Soteshop, versions prior t ...)
 	NOT-FOR-US: Soteshop



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/281405386f4209d562274544ca0121678f655c71

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/281405386f4209d562274544ca0121678f655c71
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250309/390e4b94/attachment.htm>