Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
135c09aa by Salvatore Bonaccorso at 2026-06-03T06:46:01+02:00
Track fixed version for python-pip via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3927,7 +3927,7 @@ CVE-2026-46107 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux 6.12.88-1
NOTE:
https://git.kernel.org/linus/09a65adc7d8bbfce06392cb6d375468e2728ead5 (7.1-rc2)
CVE-2026-8643 (pip would treat console_scripts and gui_scripts as paths
instead of fi ...)
- - python-pip <unfixed> (bug #1138220)
+ - python-pip 26.1.2+dfsg-1 (bug #1138220)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2460927
NOTE: Fixed by:
https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb
NOTE: Improvement to original fix:
https://github.com/pypa/pip/pull/14001
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/135c09aae81f267551ea6817303ae17b9954ddb7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/135c09aae81f267551ea6817303ae17b9954ddb7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
