Skip to content
OpenAdvisories
High RHSA-2022:5234 1 CVE

Red Hat Security Advisory: python-virtualenv security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client python-virtualenv 0:15.1.0-7.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode python-virtualenv 0:15.1.0-7.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server python-virtualenv 0:15.1.0-7.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation python-virtualenv 0:15.1.0-7.el7_9

Vulnerabilities 1

  • High 7.5
    CVE-2019-20916

    Path Traversal in pip

    The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _d…

    python-pip pip python-pip Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1868135
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5234.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-20916
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-20916
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-20916