Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
301f5de6 by Salvatore Bonaccorso at 2025-12-25T23:07:17+01:00
Update status for CVE-2025-50182/python-urllib3
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -64675,10 +64675,11 @@ CVE-2025-50183 (OpenList Frontend is a UI component
for OpenList. Prior to versi
NOT-FOR-US: OpenList Frontend
CVE-2025-50182 (urllib3 is a user-friendly HTTP client library for Python.
Starting in ...)
- python-urllib3 2.3.0-3 (bug #1108077)
- [bookworm] - python-urllib3 <no-dsa> (Minor issue)
+ [bookworm] - python-urllib3 <not-affected> (Vulnerable code introduced
later)
[bullseye] - python-urllib3 <not-affected> (Vulnerable code introduced
later)
NOTE:
https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5
- NOTE:
https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f
(2.5.0)
+ NOTE: Introduced with:
https://github.com/urllib3/urllib3/commit/1812eac7115b3a4e9a5feece5fae0c9cffe8c585
(2.2.0
+ NOTE: Fixed by:
https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f
(2.5.0)
CVE-2025-50181 (urllib3 is a user-friendly HTTP client library for Python.
Prior to 2. ...)
- python-urllib3 2.3.0-3 (bug #1108076)
[bookworm] - python-urllib3 <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301f5de6e624366982776bae1ffa80c338881b00
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/301f5de6e624366982776bae1ffa80c338881b00
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits