- update to 20.26.6:

* Properly quote string placeholders in activation script
    templates to mitigate potential command injection - by
    @y5c4l3. (#2768, in the Python stdlib known as bsc#1232241,
    CVE-2024-9287)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-virtualenv?expand=0&rev=155
This commit is contained in:
Matej Cepl 2024-10-24 15:39:06 +00:00 committed by Git OBS Bridge
parent 85eca6f885
commit 62e233313b

View File

@ -1,9 +1,11 @@
-------------------------------------------------------------------
Thu Oct 17 15:15:49 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update teo 20.26.6:
* Properly quote string placeholders in activation script templates
to mitigate potential command injection - by @y5c4l3. (#2768)
- update to 20.26.6:
* Properly quote string placeholders in activation script
templates to mitigate potential command injection - by
@y5c4l3. (#2768, in the Python stdlib known as bsc#1232241,
CVE-2024-9287)
* Upgrade embedded wheels: setuptools to 75.1.0 from 74.1.2
* no longer create () output in console during activation of a
virtualenv by .bat file. (#2728)