Lucene search

K
redhatRedHatRHSA-2024:0374
HistoryJan 23, 2024 - 5:07 p.m.

(RHSA-2024:0374) Moderate: python-pip security update

2024-01-2317:07:01
access.redhat.com
33
pip package management python
pypi
security update
directory traversal vulnerability
cve-2007-4559

7.3 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.1%

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either “Pip Installs Packages” or “Pip Installs Python”.

Security Fix(es):

  • python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.