1301 matches found
CVE-2025-8869 affecting package python-pip for versions less than 24.2-4
CVE-2025-8869 affecting package python-pip for versions less than 24.2-4. A patched version of the package is available...
Debian dla-4348 : python-pip-whl - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4348 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4348-1 [email protected]...
Fedora: Security Advisory (FEDORA-2025-b108c70b29)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Pip Vulnerability Prior to v23.3 Allows Arbitrary Mercurial Configuration Injection via VCS URLs, which affects IBM watsonx.data
Summary When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call ie "--config". Controlling the Mercurial configuration can modify how and whi...
[SECURITY] [DLA 4348-1] python-pip security update
Debian LTS Advisory DLA-4348-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 26, 2025 https://wiki.debian.org/LTS Package : python-pip Version : 20.3.4-4+deb11u2 CVE ID : CVE-2023-5752 CVE-2025-8869 Debian Bug : 1116336 Multiple vulnerabilities have been...
DLA-4348-1 python-pip - security update
Bulletin has no description...
Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2025-1216)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1216 advisory. When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706.Note that upgrading pip to a fixed version for this...
Amazon Linux 2 : python-pip, --advisory ALAS2-2025-3023 (ALAS-2025-3023)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3023 advisory. When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706.Note that upgrading pip to a fixed version for this...
Amazon Linux 2023 : python3.11-pip, python3.11-pip-wheel (ALAS2023-2025-1211)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1211 advisory. When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706.Note that upgrading pip to a fixed version for this...
Medium: python-pip
Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...
Medium: python3.11-pip
Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...
Medium: python-pip
Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2211)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2243)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : python-pip (EulerOS-SA-2025-2211)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for...
EulerOS 2.0 SP11 : python-pip (EulerOS-SA-2025-2243)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for...
EUVD-2013-0026
Malware in sbrugna...
EUVD-2013-4581
Malware in sbrugna...