[Git][security-tracker-team/security-tracker][master] Add CVE-2024-53899/python-virtualenv

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
96788028 by Salvatore Bonaccorso at 2024-11-24T17:12:38+01:00
Add CVE-2024-53899/python-virtualenv

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10154,6 +10154,11 @@ CVE-2024-50066 (In the Linux kernel, the following vulnerability has been resolv
 	NOTE: https://project-zero.issues.chromium.org/issues/371047675
 CVE-2024-9987 (A post-authentication SQL Injection vulnerability within the filters p ...)
 	NOT-FOR-US: Pandora FMS
+CVE-2024-53899
+	- python-virtualenv 20.26.6+ds-1
+	NOTE: https://github.com/pypa/virtualenv/issues/2768
+	NOTE: https://github.com/pypa/virtualenv/pull/2771
+	NOTE: Fixed by: https://github.com/pypa/virtualenv/commit/86dddeda7c991f8529e1995bbff280fb7b761972 (20.26.6)
 CVE-2024-9287 (A vulnerability has been found in the CPython `venv` module and CLI wh ...)
 	- python3.13 <unfixed>
 	- python3.12 <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9678802804c75baa6d37c280fbcbd7d5fb8d7230

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9678802804c75baa6d37c280fbcbd7d5fb8d7230
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241124/1a1a3db3/attachment.htm>