Advisories » MGASA-2025-0055

Updated python-pip packages fix security vulnerability

Publication date: 12 Feb 2025
Modification date: 12 Feb 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-5752

Description

Mercurial configuration injectable in repo revision when installing via
pip. (CVE-2023-5752)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33542
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LNQOIWP4YVW27J2PSFKW5GCWPMU7ZATV/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5752

SRPMS

9/core

• python-pip-23.0.1-1.1.mga9