mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-03 06:04:53 +00:00
Code Issues Releases Activity

- Document multiple vulnerabilities of python38

Browse Source 
- Fix 2 typos in my last commit
This commit is contained in:
Wen Heping 2020-07-20 08:10:53 +00:00
parent 5249457bdd
commit 0752463731
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=542617
1 changed files with 31 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
security/vuxml/vuln.xml
View File

@ -58,6 +58,35 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="a9eeb3a3-ca5e-11ea-930b-080027846a02">
<topic>Python -- multiple vulnerabilities</topic>
<affects>
<package>
<name>python38</name>
<range><lt>3.8.4</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Python reports:</p>
<blockquote cite="https://docs.python.org/3/whatsnew/changelog.html#python-3-8-4-final">
<p>bpo-41162:Audit hooks are now cleared later during finalization to avoid missing
events.</p>
<p>bpo-29778:Ensure python3.dll is loaded from correct locations when Python is
embedded.</p>
</blockquote>
</body>
</description>
<references>
<url>https://docs.python.org/3/whatsnew/changelog.html#python-3-8-4-final</url>
<cvename>CVE-2020-15523</cvename>
</references>
<dates>
<discovery>2020-06-29</discovery>
<entry>2020-07-20</entry>
</dates>
</vuln>
<vuln vid="1e7b316b-c6a8-11ea-a7d5-001999f8d30b">
<topic>VirtualBox -- Multiple vulnerabilities</topic>
<affects>
@ -610,13 +639,13 @@ Notes:
<topic>Python -- multiple vulnerabilities</topic>
<affects>
<package>
<name>ipython37</name>
<name>python37</name>
<range><lt>3.7.8</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Pytrhon reports:</p>
<p>Python reports:</p>
<blockquote cite="https://docs.python.org/3.7/whatsnew/changelog.html#changelog">
<p>The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient
regular expression which can be exploited by an attacker to cause a denial of service.