From 9ab6d76fe90db2261194ae4996e2170371633f56 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 30 Jan 2020 21:15:47 +0100
Subject: Add CVE-2020-8492/python*

---
 data/CVE/2020.list | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index b1395540aa..5d2f172d14 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -1,5 +1,12 @@
 CVE-2020-8492 (Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7  ...)
-	TODO: check
+	- python3.8 <unfixed>
+	- python3.7 <unfixed>
+	- python3.5 <removed>
+	- python3.4 <removed>
+	- python2.7 <unfixed>
+	NOTE: https://bugs.python.org/issue39503
+	NOTE: https://github.com/python/cpython/pull/18284
+	NOTE: https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html
 CVE-2020-8491
 	RESERVED
 CVE-2020-8490
-- 
cgit v1.2.3