Summary: | <dev-python/oauth2-1.9.0_p1: two vulnerabilities (CVE-2013-{4346,4347}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | python |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.openwall.com/lists/oss-security/2013/09/12/5 | ||
Whiteboard: | B3 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
Agostino Sarubbo
2013-09-13 18:55:32 UTC
Upstream claims to have this fixed. https://github.com/joestump/python-oauth2/issues/129#issuecomment-125934274 https://github.com/joestump/python-oauth2/commit/82dd2cdd4954cd7b8983d5d64c0dfd9072bf4650 (In reply to Manuel Rüger from comment #1) > Upstream claims to have this fixed. > https://github.com/joestump/python-oauth2/issues/129#issuecomment-125934274 > > > https://github.com/joestump/python-oauth2/commit/ > 82dd2cdd4954cd7b8983d5d64c0dfd9072bf4650 I only see CVE-2013-4346 referenced. Please clarify if 4347 is also fixed. CVE-2013-4347 was fixed via https://github.com/joestump/python-oauth2/commit/82dd2cdd4954cd7b8983d5d64c0dfd9072bf4650 which was first released as part of v1.9 by upstream. @ Arches, please test and mark stable: =dev-python/oauth2-1.9.0_p1 amd64 stable x86 stable. Maintainer(s), please cleanup. Security, please vote. GLSA Vote: No |