From f2d257eecb6a0e95fe64f0c57a77dfe27fd51612 Mon Sep 17 00:00:00 2001 From: sethmlarson <18519037+sethmlarson@users.noreply.github.com> Date: Wed, 14 Oct 2026 18:49:06 +0000 Subject: [PATCH] Update OSV records from CVE --- advisories/python/PSF-2025-2.json | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/advisories/python/PSF-2025-2.json b/advisories/python/PSF-2025-2.json index 8cebe5c..fe66116 100644 --- a/advisories/python/PSF-2025-2.json +++ b/advisories/python/PSF-2025-2.json @@ -1,12 +1,12 @@ { - "modified": "2025-02-14T19:02:38Z", - "published": "2025-02-14T16:18:00Z", + "modified": "2026-10-14T18:47:10.926Z", + "published": "2025-02-14T16:18:00.918Z", "schema_version": "1.5.0", "id": "PSF-2025-2", "aliases": [ "CVE-2024-3220" ], - "details": "There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.\n\nThis defect is caused by the default locations of Linux and macOS platforms (such as “/etc/mime.types”) also being used on Windows, where they are user-writable locations (“C:\\etc\\mime.types”).\n\nTo work-around this issue a user can call mimetypes.init() with an empty list (“[]”) on Windows platforms to avoid using the default list of known file locations.", + "details": "There is a defect in the CPython standard library module \u201cmimetypes\u201d where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type.\n\nThis defect is caused by the default locations of Linux and macOS platforms (such as \u201c/etc/mime.types\u201d) also being used on Windows, where they are user-writable locations (\u201cC:\\etc\\mime.types\u201d).\n\nTo work-around this issue a user can call mimetypes.init() with an empty list (\u201c[]\u201d) on Windows platforms to avoid using the default list of known file locations.", "affected": [ { "ranges": [ @@ -26,9 +26,13 @@ { "type": "ADVISORY", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/CDXW34ND2LSAOYAR5N6UNONP4ZBX4D6R/" + }, + { + "type": "REPORT", + "url": "https://github.com/python/cpython/issues/159428" } ], "database_specific": { "cwe_ids": [] } -} +} \ No newline at end of file