727 matches found
OESA-2026-3787 python-pip security update
%changelog Thu May 14 2026 markeryang [email protected] - 23.3.1-11 - Fix CVE-2026-3219 Security Fixes: pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires...
OESA-2026-3786 python-pip security update
%changelog Thu May 14 2026 markeryang [email protected] - 23.3.1-11 - Fix CVE-2026-3219 Security Fixes: pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires...
OESA-2026-3785 python-pip security update
%changelog Thu May 14 2026 markeryang [email protected] - 23.3.1-11 - Fix CVE-2026-3219 Security Fixes: pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires...
Astra Linux – Vulnerability in python-pip
When installing a package from a Mercurial VCS URL e.g., “pip install hg+…” using pip before version 23.3, the specified Mercurial revision could be used to inject arbitrary configuration options into the “hg clone” call e.g., “--config”. Controlling the Mercurial configuration allows modifying t...
Astra Linux – Vulnerability in python-pip
A flaw was discovered in python-pip regarding its handling of Unicode separators in git references. A remote attacker could potentially exploit this issue to install a different revision in a repository. The greatest threat posed by this vulnerability is to data integrity. This issue has been fix...
CVE-2026-13346 affecting package python-pip for versions less than 24.2-10
CVE-2026-13346 affecting package python-pip for versions less than 24.2-10. A patched version of the package is available...
[SECURITY] Fedora 45 Update: python-pip-26.1.2-5.fc45
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
Fedora 45 : python-pip (2026-d083cbcc1a)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d083cbcc1a advisory. Security fix for CVE-2026-13346 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Security update for python-pip
This update for python-pip fixes the following issue: Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4104-1 Security update for python-pip
This update for python-pip fixes the following issue: - Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599...
EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-3301)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...
EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-3376)
According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...
ROS-20260908-73-0021
The vulnerability in python-pip is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
[SECURITY] Fedora 43 Update: python-pip-25.1.1-19.fc43
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
Fedora 43 : python-pip (2026-30b4eb25df)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30b4eb25df advisory. Security fixes for CVE-2026-13346 and CVE-2026-8643 Tenable has extracted the preceding description block directly from the Fedora security advisory...
[SECURITY] Fedora 44 Update: python-pip-26.0.1-3.fc44
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
Fedora 44 : python-pip (2026-397c391da2)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-397c391da2 advisory. Security fixes for CVE-2026-13346 and CVE-2026-8643 Tenable has extracted the preceding description block directly from the Fedora security advisory...
openSUSE 16 Security Update : python-pip (openSUSE-SU-2026:21643-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21643-1 advisory. This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows...