Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
301f5de6 by Salvatore Bonaccorso at 2025-12-25T23:07:17+01:00
Update status for CVE-2025-50182/python-urllib3

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -64675,10 +64675,11 @@ CVE-2025-50183 (OpenList Frontend is a UI component 
for OpenList. Prior to versi
        NOT-FOR-US: OpenList Frontend
 CVE-2025-50182 (urllib3 is a user-friendly HTTP client library for Python. 
Starting in ...)
        - python-urllib3 2.3.0-3 (bug #1108077)
-       [bookworm] - python-urllib3 <no-dsa> (Minor issue)
+       [bookworm] - python-urllib3 <not-affected> (Vulnerable code introduced 
later)
        [bullseye] - python-urllib3 <not-affected> (Vulnerable code introduced 
later)
        NOTE: 
https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5
-       NOTE: 
https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f
 (2.5.0)
+       NOTE: Introduced with: 
https://github.com/urllib3/urllib3/commit/1812eac7115b3a4e9a5feece5fae0c9cffe8c585
 (2.2.0
+       NOTE: Fixed by: 
https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f
 (2.5.0)
 CVE-2025-50181 (urllib3 is a user-friendly HTTP client library for Python. 
Prior to 2. ...)
        - python-urllib3 2.3.0-3 (bug #1108076)
        [bookworm] - python-urllib3 <no-dsa> (Minor issue)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301f5de6e624366982776bae1ffa80c338881b00

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301f5de6e624366982776bae1ffa80c338881b00
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to