Skip to content
OpenAdvisories
Low ELSA-2021-4455 1 CVE

Low: python-pip security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[9.0.3-20]
- Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
Resolves: rhbz#1962856

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 platform-python-pip 0:9.0.3-20.el8
Oracle Linux · 8 python3-pip 0:9.0.3-20.el8
Oracle Linux · 8 python3-pip-wheel 0:9.0.3-20.el8

Vulnerabilities 1

  • Medium 5.7
    CVE-2021-3572 Public exploit

    Improper Input Validation in pip

    A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

    python-pip pip python-pip python-IPy Debian Ubuntu Azure Linux PyPI