Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7ef6c8cf by Sylvain Beucler at 2026-01-30T13:18:07+01:00
CVE-2026-24049/wheel: bullseye not-affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2558,7 +2558,9 @@ CVE-2026-24055 (Langfuse is an open source large language
model engineering plat
NOT-FOR-US: Langfuse
CVE-2026-24049 (wheel is a command line tool for manipulating Python wheel
files, as d ...)
- wheel <unfixed> (bug #1126274)
+ [bullseye] - wheel <not-affected> (Vulnerable code introduced later)
NOTE:
https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx
+ NOTE: Introduced by:
https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e
(0.40.0)
NOTE: Fixed by:
https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef
(0.46.2)
CVE-2026-24048 (Backstage is an open framework for building developer portals,
and @ba ...)
NOT-FOR-US: Backstage
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ef6c8cf7f6edb6627c20a8096a910ccc88fc330
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ef6c8cf7f6edb6627c20a8096a910ccc88fc330
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
