Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c3abf971 by Salvatore Bonaccorso at 2020-09-29T22:35:23+02:00
Add CVE-2020-26137/python-urllib3
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22,7 +22,11 @@ CVE-2020-26139
CVE-2020-26138
RESERVED
CVE-2020-26137 (urllib3 before 1.25.9 allows CRLF injection if the attacker
controls t ...)
- TODO: check
+ - python-urllib3 1.25.9-1
+ [buster] - python-urllib3 <no-dsa> (Minor issue)
+ NOTE: https://bugs.python.org/issue39603
+ NOTE:
https://github.com/urllib3/urllib3/commit/1dd69c5c5982fae7c87a620d487c2ebf7a6b436b
(1.25.9)
+ NOTE: https://github.com/urllib3/urllib3/pull/1800
CVE-2020-26136
RESERVED
CVE-2020-26135
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3abf971f28e99238408e38cfc7dcf1adbf97ea7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c3abf971f28e99238408e38cfc7dcf1adbf97ea7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
