Medium ELSA-2023-6694 1 CVE

Moderate: python-pip security update (Oracle Linux 9)

Published Nov 11, 2023 · Updated Nov 11, 2023

Ecosystem: Oracle Linux

Summary

[21.2.3-7]
- Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2207997

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	python3-pip	0:21.2.3-7.el9
Oracle Linux · 9	python3-pip-wheel	0:21.2.3-7.el9

Vulnerabilities 1

Critical 9.8

CVE-2007-4559 Public exploit EPSS 27%

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux

Aug 28, 2007