[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

ROOT-APP-PYPI-CVE-2026-59939 CVE-2026-59939 in httplib2 - Patched by Root

Root has patched CVE-2026-59939 in the httplib2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59197 CVE-2026-59197 in pillow - Patched by Root

Root has patched CVE-2026-59197 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-28219 CVE-2024-28219 in pillow - Patched by Root

Root has patched CVE-2024-28219 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59205 CVE-2026-59205 in pillow - Patched by Root

Root has patched CVE-2026-59205 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-50447 CVE-2023-50447 in pillow - Patched by Root

Root has patched CVE-2023-50447 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54058 CVE-2026-54058 in pillow - Patched by Root

Root has patched CVE-2026-54058 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59199 CVE-2026-59199 in pillow - Patched by Root

Root has patched CVE-2026-59199 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54060 CVE-2026-54060 in pillow - Patched by Root

Root has patched CVE-2026-54060 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-55380 CVE-2026-55380 in pillow - Patched by Root

Root has patched CVE-2026-55380 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-56PW-MPJ4-FXWW GHSA-56pw-mpj4-fxww in pillow - Patched by Root

Root has patched GHSA-56pw-mpj4-fxww in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42310 CVE-2026-42310 in pillow - Patched by Root

Root has patched CVE-2026-42310 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59200 CVE-2026-59200 in pillow - Patched by Root

Root has patched CVE-2026-59200 in the pillow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59884 CVE-2026-59884 in pyasn1 - Patched by Root

Root has patched CVE-2026-59884 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-30922 CVE-2026-30922 in pyasn1 - Patched by Root

Root has patched CVE-2026-30922 in the pyasn1 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-44843 CVE-2026-44843 in langchain-core - Patched by Root

Root has patched CVE-2026-44843 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-65106 CVE-2025-65106 in langchain-core - Patched by Root

Root has patched CVE-2025-65106 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

Malicious code in flask-header-guard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e0cbaefa0fcface340b03a236573ed70df9b4d7773715321df057a9862e3f8 The package is presented as Flask security-headers middleware but ships a hostile payload wired to fire at install time and again whenever the librar...

Malicious code in pygame-renderkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdef1a055b3059d56581d5c0d33538e7799cfde5e42d596eb50094d06d984f54 setup.py registers a custom install command that forks a daemonized child during pip install and executes a base64-encoded Python payload via...

Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...