Medium ELSA-2023-7176 1 CVE

Moderate: python-pip security update (Oracle Linux 8)

Published Nov 17, 2023 · Updated Nov 17, 2023

Ecosystem: Oracle Linux

Summary

[9.0.3-23]
- Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2218241

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	platform-python-pip	0:9.0.3-23.el8
Oracle Linux · 8	python3-pip	0:9.0.3-23.el8
Oracle Linux · 8	python3-pip-wheel	0:9.0.3-23.el8

Vulnerabilities 1

Critical 9.8

CVE-2007-4559 Public exploit EPSS 27%

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux

Aug 28, 2007