Summary
[22.3.1-4]
- Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2218247
[22.3.1-3]
- Fix changelog to contain Fedora contributors
Resolves: RHEL-232
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.11-pip | 0:22.3.1-4.el9 |
| Oracle Linux · 9 | python3.11-pip-wheel | 0:22.3.1-4.el9 |
Vulnerabilities 1
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…