Skip to content
OpenAdvisories
High ELSA-2023-12349 1 CVE

Important: python-pip security update (Oracle Linux 7)

Published May 23, 2023 · Updated May 23, 2023

Ecosystem: Oracle Linux

Summary

[9.0.3-8.0.3]
- CVE-2021-3572 [Orabug: 35240686]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 python3-pip 0:9.0.3-8.0.3.el7

Vulnerabilities 1

  • Medium 5.7
    CVE-2021-3572 Public exploit

    Improper Input Validation in pip

    A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

    python-pip pip python-pip python-IPy Debian Ubuntu Azure Linux PyPI