I put the actual fixed version or the version that includes the fixed version in upstream_*. In some cases, the URL to the commit is added so that the user can find them.
In CVE-2020-26137, the version of python-urllib3 is changed to the actual upstream version instead of the Debian Version to match python-pip.
Thanks for the review.
I put the actual fixed version or the version that includes the fixed version in upstream_*. In some cases, the URL to the commit is added so that the user can find them.
In CVE-2020-26137, the version of python-urllib3 is changed to the actual upstream version instead of the Debian Version to match python-pip.