Skip to content
OpenAdvisories
Medium ELSA-2022-5234 1 CVE

Moderate: python-virtualenv security update (Oracle Linux 7)

Published Jun 29, 2022 · Updated Jun 29, 2022

Ecosystem: Oracle Linux

Summary

[15.1.0-7]
- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 python-virtualenv 0:15.1.0-7.el7_9

Vulnerabilities 1

  • High 7.5
    CVE-2019-20916

    Path Traversal in pip

    The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _d…

    python-pip pip python-pip Debian Ubuntu PyPI