CVE-2019-11324

Advisory

C2cwsgiutils 4.0.0 updates its dependency 'pipenv' to v2020.5.28 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changed
- [ebf784](https://github.com/camptocamp/c2cwsgiutils/commit/ebf7840185dc006e59e7a9d0747a73134cb7a5ec) - **Do the release 4.0.0** - [sbrunner](https://github.com/sbrunner)
- [643](https://github.com/camptocamp/c2cwsgiutils/pull/643) - **[security] Upgrade pipenv** - [sbrunner](https://github.com/sbrunner)
- [617](https://github.com/camptocamp/c2cwsgiutils/pull/617) - **Don't pin the packages** - [sbrunner](https://github.com/sbrunner)
- [7c9273](https://github.com/camptocamp/c2cwsgiutils/commit/7c9273f810fc38d07a47a3d38f55aee2e4bc8cd8) - **Backport: add timeout, use an other user** - [sbrunner](https://github.com/sbrunner)
- [606](https://github.com/camptocamp/c2cwsgiutils/pull/606) - **[Backport release_4] Fix publish** - [github-actions[bot]](https://github.com/apps/github-actions)
- [591](https://github.com/camptocamp/c2cwsgiutils/pull/591) - **Run: black -l 110 -t py36** - [sbrunner](https://github.com/sbrunner)

Fixed
- [5de6f8](https://github.com/camptocamp/c2cwsgiutils/commit/5de6f82d73ce5b44b5eef591e4b31ee1abfcb620) - **pip release, c2cwsgiutils-run in the Python egg** - [sbrunner](https://github.com/sbrunner)
- [fa07f5](https://github.com/camptocamp/c2cwsgiutils/commit/fa07f54dd44e6e192269d8b927ae6b6f8bdf4662) - **docker publish** - [sbrunner](https://github.com/sbrunner)

Updated
- [578](https://github.com/camptocamp/c2cwsgiutils/pull/578) - **base image for a release 4** - [gberaudo](https://github.com/gberaudo)
- [602](https://github.com/camptocamp/c2cwsgiutils/pull/602) - **setuptools from 47.0.0 to 47.1.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [601](https://github.com/camptocamp/c2cwsgiutils/pull/601) - **setuptools from 46.4.0 to 47.0.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [600](https://github.com/camptocamp/c2cwsgiutils/pull/600) - **cornice from 5.0.0 to 5.0.1** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [598](https://github.com/camptocamp/c2cwsgiutils/pull/598) - **flake8 from 3.8.1 to 3.8.2** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [599](https://github.com/camptocamp/c2cwsgiutils/pull/599) - **sqlalchemy-utils from 0.36.5 to 0.36.6** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [597](https://github.com/camptocamp/c2cwsgiutils/pull/597) - **pytest-cov from 2.8.1 to 2.9.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [596](https://github.com/camptocamp/c2cwsgiutils/pull/596) - **cornice from 4.0.1 to 5.0.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [595](https://github.com/camptocamp/c2cwsgiutils/pull/595) - **lxml from 4.5.0 to 4.5.1** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [594](https://github.com/camptocamp/c2cwsgiutils/pull/594) - **setuptools from 46.3.1 to 46.4.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [593](https://github.com/camptocamp/c2cwsgiutils/pull/593) - **setuptools from 46.3.0 to 46.3.1** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [592](https://github.com/camptocamp/c2cwsgiutils/pull/592) - **redis from 3.5.1 to 3.5.2** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [590](https://github.com/camptocamp/c2cwsgiutils/pull/590) - **sqlalchemy from 1.3.16 to 1.3.17** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [589](https://github.com/camptocamp/c2cwsgiutils/pull/589) - **sentry-sdk from 0.14.3 to 0.14.4** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [588](https://github.com/camptocamp/c2cwsgiutils/pull/588) - **setuptools from 46.2.0 to 46.3.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [587](https://github.com/camptocamp/c2cwsgiutils/pull/587) - **flake8 from 3.7.9 to 3.8.1** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [585](https://github.com/camptocamp/c2cwsgiutils/pull/585) - **setuptools from 46.1.3 to 46.2.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [584](https://github.com/camptocamp/c2cwsgiutils/pull/584) - **redis from 3.5.0 to 3.5.1** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [583](https://github.com/camptocamp/c2cwsgiutils/pull/583) - **pytest from 5.4.1 to 5.4.2** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [582](https://github.com/camptocamp/c2cwsgiutils/pull/582) - **sqlalchemy-utils from 0.36.4 to 0.36.5** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [581](https://github.com/camptocamp/c2cwsgiutils/pull/581) - **sqlalchemy-utils from 0.36.3 to 0.36.4** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)
- [580](https://github.com/camptocamp/c2cwsgiutils/pull/580) - **redis from 3.4.1 to 3.5.0** - [dependabot-preview[bot]](https://github.com/apps/dependabot-preview)

Generated by [Automation](https://github.com/aeon-php/automation)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11324