Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
453d1d6b by Salvatore Bonaccorso at 2025-01-27T22:36:59+01:00
Track fixed version for two restrictedpython issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1045,7 +1045,7 @@ CVE-2025-22768 (Cross-Site Request Forgery (CSRF)
vulnerability in Qwerty23 Rock
CVE-2025-22264 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin
CVE-2025-22153 (RestrictedPython is a tool that helps to define a subset of
the Python ...)
- - restrictedpython <unfixed> (bug #1094026)
+ - restrictedpython 8.0-1 (bug #1094026)
[bookworm] - restrictedpython <not-affected> (Vulnerable code
introduced later)
[bullseye] - restrictedpython <not-affected> (Vulnerable code
introduced later)
NOTE:
https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2
@@ -34864,7 +34864,7 @@ CVE-2024-47641 (Improper Neutralization of Input During
Web Page Generation (XSS
CVE-2024-47536 (Citizen is a MediaWiki skin that makes extensions part of the
cohesive ...)
NOT-FOR-US: MediaWiki skin
CVE-2024-47532 (RestrictedPython is a restricted execution environment for
Python to r ...)
- - restrictedpython <unfixed> (bug #1084057)
+ - restrictedpython 8.0-1 (bug #1084057)
[bookworm] - restrictedpython <no-dsa> (Minor issue)
[bullseye] - restrictedpython <postponed> (Minor issue; can be fixed in
next update)
NOTE:
https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-5rfv-66g4-jr8h
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/453d1d6b9dbd1f922f1a829d69bd76200ee6ed37
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
