Skip to content

Commit d832bb9

Browse files
author
github-actions
committed
Assign IDs
1 parent a6c9d0c commit d832bb9

File tree

3 files changed

+35
-35
lines changed

3 files changed

+35
-35
lines changed

advisories/.id-allocator

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
25c8c72dbe707888f83afe124c3237c64bd556071784601d525258aeb47756cc
1+
6543b1c2ddddfe2b2b247a635eb01b4378e267238d198758c79a8a53603c45cd

advisories/python/PSF-0000-CVE-2024-3220.json

Lines changed: 0 additions & 34 deletions
This file was deleted.

advisories/python/PSF-2025-2.json

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"modified": "2025-02-14T19:02:38Z",
3+
"published": "2025-02-14T16:18:00Z",
4+
"schema_version": "1.5.0",
5+
"id": "PSF-2025-2",
6+
"aliases": [
7+
"CVE-2024-3220"
8+
],
9+
"details": "There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.\n\nThis defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\\etc\\mime.types”).\n\nTo work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.",
10+
"affected": [
11+
{
12+
"ranges": [
13+
{
14+
"type": "GIT",
15+
"events": [
16+
{
17+
"introduced": "0"
18+
}
19+
],
20+
"repo": "https://github.com/python/cpython"
21+
}
22+
]
23+
}
24+
],
25+
"references": [
26+
{
27+
"type": "ADVISORY",
28+
"url": "https://mail.python.org/archives/list/[email protected]/thread/CDXW34ND2LSAOYAR5N6UNONP4ZBX4D6R/"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": []
33+
}
34+
}

0 commit comments

Comments
 (0)