kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

security/vuxml: Update CVE-2019-18348 and CVE-2020-8492 entries

Browse source 
CVE-2019-18348:	Add missing Python packages range
CVE-2020-8492:	Fix Python 3.7 entrie, it's currently affected.

After committing fixes, we'll need to change ranges again.

PR:		246984
This commit is contained in:
Danilo G. Baio 2020-06-07 02:20:40 +00:00
parent 843e295cf3
commit 4da3978e17
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=538142
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
security/vuxml/vuln.xml
View file

@ -1549,6 +1549,18 @@ Workaround:
<name>python38</name>
<range><lt>3.8.3</lt></range>
</package>
<package>
<name>python37</name>
<range><lt>3.7.8</lt></range>
</package>
<package>
<name>python36</name>
<range><lt>3.6.11</lt></range>
</package>
<package>
<name>python35</name>
<range><lt>3.5.10</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
@ -1569,6 +1581,7 @@ Workaround:
<dates>
<discovery>2019-10-24</discovery>
<entry>2020-05-09</entry>
<modified>2020-06-07</modified>
</dates>
</vuln>
@ -2288,7 +2301,7 @@ If successful, a malicious third party could trigger either a crash of VLC or an
</package>
<package>
<name>python37</name>
<range><lt>3.7.7</lt></range>
<range><lt>3.7.8</lt></range>
</package>
<package>
<name>python36</name>
@ -2324,6 +2337,7 @@ If successful, a malicious third party could trigger either a crash of VLC or an
<dates>
<discovery>2019-11-17</discovery>
<entry>2020-04-23</entry>
<modified>2020-06-07</modified>
</dates>
</vuln>