CVE-2024-39689

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from GLOBALTRUST. Certifi 2024.7.04 removes root certificates fro...

OESA-2024-1801 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 1 Summary: A...

OESA-2024-1802 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 1 Summary: A...

Security Bulletin: IBM Automation Decision Services for May 2024 - Multiple CVEs addressed

Summary "IBM Automation Decision Services is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed." Vulnerability Details CVEID:CVE-2024-288...

MAL-2024-5516 Malicious code in pipcryptographylibv1 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5515 Malicious code in pipcryptographylibraryv2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5514 Malicious code in pipcryptographylibaryv2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pip-remote-access-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5484 Malicious code in pip-remote-access-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pip-rce (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5482 Malicious code in pip-goodthing (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pip-goodthing (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in malicious-pip-package-for-democdf (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dero-pip (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5042 Malicious code in dero-pip (PyPI)

--- -= Per source details. Do not edit below this line.=-...

AZL-42769 CVE-2024-37891 affecting package python-pip for versions less than 24.2-2

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to accidental...

OPENSUSE-SU-2024:11251-1 python36-pip-20.2.4-1.8 on GA media

These are all security issues fixed in the python36-pip-20.2.4-1.8 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11281-1 python2-pip-20.0.2-2.6 on GA media

These are all security issues fixed in the python2-pip-20.0.2-2.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13454-1 python310-pip-23.3.1-1.1 on GA media

These are all security issues fixed in the python310-pip-23.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

python3.11-pip bug fix and enhancement update

An update is available for python3.11-pip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...