EulerOS 2.0 SP11 : python-pip (EulerOS-SA-2025-2211)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for...

EUVD-2021-0186

Malware in sbrugna...

EUVD-2021-11021

Malware in sbrugna...

EUVD-2013-4581

Malware in sbrugna...

EUVD-2013-0026

Malware in sbrugna...

EUVD-2021-0198

Malware in sbrugna...

EUVD-2023-0200

Malicious code in bioql PyPI...

EUVD-2023-2432

Malicious code in bioql PyPI...

EUVD-2024-19223

Malicious code in bioql PyPI...

EUVD-2025-25598

Malicious code in bioql PyPI...

EUVD-2025-30961

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: uv-0.8.11-4.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 42 Update: uv-0.8.11-4.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

[SECURITY] Fedora 43 Update: python-pip-25.1.1-18.fc43

pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...

Fedora 43 : python-pip (2025-b108c70b29)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b108c70b29 advisory. Security fix for the bundled urllib3 for CVE-2025-50181, rc3 bytecode rebuild. Tenable has extracted the preceding description block directly from the Fedora...

NewStart CGSL MAIN 6.06 : python-pip Vulnerability (NS-SA-2025-0209)

The remote NewStart CGSL host, running version MAIN 6.06, has python-pip packages installed that are affected by a vulnerability: - pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. CVE-2013-1888 Note that Ness...

NewStart CGSL MAIN 6.06 : python-pip Vulnerability (NS-SA-2025-0244)

The remote NewStart CGSL host, running version MAIN 6.06, has python-pip packages installed that are affected by a vulnerability: - Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers to execute arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2025-8869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that...

Fallback tar extraction in pip doesn't check symbolic links point to extraction directory

...

OESA-2025-2338 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 5 Summary: A...