Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4253d969 by Salvatore Bonaccorso at 2023-07-14T23:18:52+02:00
Add CVE-2023-38325/python-cryptography
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,7 +9,11 @@ CVE-2023-3434 (Improper Input Validation in the hyperlink
interpretation inSavoi
CVE-2023-3433 (The "nickname" field within Savoir-faire Linux's Jami
application is s ...)
TODO: check
CVE-2023-38325 (The cryptography package before 41.0.2 for Python mishandles
SSH certi ...)
- TODO: check
+ - python-cryptography <unfixed>
+ NOTE: https://github.com/pyca/cryptography/issues/9207
+ NOTE: https://github.com/pyca/cryptography/pull/9208
+ NOTE: Fixed by:
https://github.com/pyca/cryptography/commit/1ca7adc97b76a9dfbd3d850628b613eb93b78fc3
(main)
+ NOTE: Fixed by:
https://github.com/pyca/cryptography/commit/e190ef190525999d1f599cf8c3aef5cb7f3a8bc4
(41.0.2)
CVE-2023-38253 (An out-of-bounds read flaw was found in w3m, in the
growbuf_to_Str fun ...)
- w3m <unfixed>
NOTE: https://github.com/tats/w3m/issues/271
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4253d969ed4a31d83828388330889c3054c90568
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4253d969ed4a31d83828388330889c3054c90568
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
