git: 70e53584b252 - main - security/vuxml: update lang/python31{0,1} entries for new releases

Charlie Li <[email protected]>
Newsgroups gmane.os.freebsd.devel.cvs.ports
Message-ID <[email protected]>
The branch main has been updated by vishwin:

URL: https://cgit.FreeBSD.org/ports/commit/?id=70e53584b252356b76878cd5dd6674ec824898b3

commit 70e53584b252356b76878cd5dd6674ec824898b3
Author:     Charlie Li <[email protected]>
AuthorDate: 2026-08-15 03:12:13 +0000
Commit:     Charlie Li <[email protected]>
CommitDate: 2026-08-15 03:12:13 +0000

    security/vuxml: update lang/python31{0,1} entries for new releases
---
 security/vuxml/vuln/2026.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index 5b0a69c87a72..b38bb684ee14 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -14639,8 +14639,8 @@ affected.</p>
   <vuln vid="30bda1c3-369b-11f1-b51c-6dd25bec137b">
     <topic>Python -- HTTP proxy CONNECT tunnel does not sanitize CR/LF</topic>
     <affects>
-      <package><name>python310</name><range><ge>0</ge></range></package>
-      <package><name>python311</name><range><ge>0</ge></range></package>
+      <package><name>python310</name><range><lt>3.10.21</lt></range></package>
+      <package><name>python311</name><range><lt>3.11.16</lt></range></package>
       <package><name>python312</name><range><lt>3.12.13_3</lt></range></package>
       <package><name>python313</name><range><lt>3.13.14</lt></range></package>
       <package><name>python313t</name><range><lt>3.13.14</lt></range></package>
@@ -14661,15 +14661,15 @@ affected.</p>
     <dates>
       <discovery>2026-03-20</discovery>
       <entry>2026-04-12</entry>
-      <modified>2026-06-19</modified>
+      <modified>2026-08-14</modified>
     </dates>
    </vuln>
 
   <vuln vid="5ec4dcf6-3588-11f1-b51c-6dd25bec137b">
     <topic>Python -- configparser vulnerable to excessive CPU use</topic>
     <affects>
-      <package><name>python310</name><range><ge>0</ge></range></package>
-      <package><name>python311</name><range><ge>0</ge></range></package>
+      <package><name>python310</name><range><lt>3.10.21</lt></range></package>
+      <package><name>python311</name><range><lt>3.11.16</lt></range></package>
       <package><name>python312</name><range><lt>3.12.13_4</lt></range></package>
       <package><name>python313</name><range><lt>3.13.14</lt></range></package>
       <package><name>python313t</name><range><lt>3.13.14</lt></range></package>
@@ -14689,7 +14689,7 @@ affected.</p>
     <dates>
       <discovery>2026-03-23</discovery>
       <entry>2026-04-12</entry>
-      <modified>2026-08-09</modified>
+      <modified>2026-08-14</modified>
     </dates>
   </vuln>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.