PYSEC-2014-11

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

CVE-2014-8991

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

lisa-api (0.5.0), lisa-plugins-shopping (>=0.1.9, <=0.2.0) +2 more potentially affected by CVE-2014-8991 via pip (1.5.6)

pip PYPI version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - lisa-api 0.5.0 - lisa-plugins-shopping =0.1.9, =1.0.0rc1, =1.0.0, =1.1.2 Source cves: CVE-2014-8991 Source advisory: MEND:CVE-2014-8991...

CVE-2014-8991

CVE-2014-8991 affects Python/pip (versions 1.3–1.5.6). The vulnerability allows a local attacker to cause a denial of service by creating a /tmp/pip-build-* file for another user, blocking package installations. Impact is local DoS; no remote exploitation described. Remediation in public advisori...

CVE-2014-8991

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

CVE-2014-8991

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

PT-2014-8771

Name of the Vulnerable Software and Affected Versions pip versions 1.3 through 1.5.6 Description The issue allows local users to cause a denial of service, specifically preventing package installation, by creating a /tmp/pip-build- file for another user. Recommendations For pip versions 1.3 throu...

CVE-2014-8991: Undefined Security Weakness

pip 1.3 through 1.5.6 allows local users to cause a denial of service prevention of package installation by creating a /tmp/pip-build- file for another user...

Cross site scripting

Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...

CVE-2014-1965

Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...

PT-2014-4388

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 3.0, 7.00 through 7.02, 7.10 through 7.11 Description The issue is related to a cross-site scripting XSS vulnerability in the ISpeakAdapter component of the SAP Exchange Infrastructure. This vulnerability allows remote...

CVE-2014-1965: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ISpeakAdapter in the Integration Repository in the SAP Exchange Infrastructure BC-XI component 3.0, 7.00 through 7.02, and 7.10 through 7.11 for SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via vectors related to PIP...

GLSA-201309-05 : pip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201309-05 pip: Multiple vulnerabilities Multiple vulnerabilities have been discovered in pip. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could conduct a Man-in-the-Middle attack to...

pip: Multiple vulnerabilities

Background pip is a tool for installing and managing Python packages. Description Multiple vulnerabilities have been discovered in pip. Please review the CVE identifiers referenced below for details. Impact A remote attacker could conduct a Man-in-the-Middle attack to cause pip to execute arbitra...

Fedora 19 : python-virtualenv-1.10.1-1.fc19 (2013-14891)

From upstream : - Upgraded pip to v1.4.1 - Upgraded setuptools to v0.9.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 18 : python-virtualenv-1.10.1-1.fc18 (2013-14902)

From upstream : - Upgraded pip to v1.4.1 - Upgraded setuptools to v0.9.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for python-pip FEDORA-2013-13216

Check for the Version of python-pip OpenVAS Vulnerability Test Fedora Update for python-pip FEDORA-2013-13216 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for python-pip FEDORA-2013-13216

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2013-0250 Updated python packages fix CVE-2013-4238 and pip

Updated python packages fix security vulnerability: Ryan Sleevi of the Google Chrome Security Team has discovered that Python's SSL module doesn't handle NULL bytes inside subjectAltNames general names. This could lead to a breach when an application uses ssl.matchhostname to match the hostname...

Updated python packages fix CVE-2013-4238 and pip

Updated python packages fix security vulnerability: Ryan Sleevi of the Google Chrome Security Team has discovered that Python's SSL module doesn't handle NULL bytes inside subjectAltNames general names. This could lead to a breach when an application uses ssl.matchhostname to match the hostname...