Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ac561d7a by Salvatore Bonaccorso at 2026-01-22T21:26:15+01:00
Add CVE-2026-24049/wheel
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -53,7 +53,9 @@ CVE-2026-24332 (Discord through 2026-01-16 allows gathering
information about wh
CVE-2026-24055 (Langfuse is an open source large language model engineering
platform. ...)
NOT-FOR-US: Langfuse
CVE-2026-24049 (wheel is a command line tool for manipulating Python wheel
files, as d ...)
- TODO: check
+ - wheel <unfixed>
+ NOTE:
https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx
+ NOTE: Fixed by:
https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef
(0.46.2)
CVE-2026-24048 (Backstage is an open framework for building developer portals,
and @ba ...)
NOT-FOR-US: Backstage
CVE-2026-24047 (Backstage is an open framework for building developer portals,
and @ba ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac561d7a886204f53ea80e76411fa5206bde0f57
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ac561d7a886204f53ea80e76411fa5206bde0f57
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
