Summary
It was discovered that pip incorrectly handled unicode separators in git
references. A remote attacker could possibly use this issue to install a
different revision on a repository.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | python-pip | 20.0.2-5ubuntu1.5 |
References
-
report
https://launchpad.net/bugs/1926957