Skip to content
OpenAdvisories
Medium · 5.7 Public exploit CVE-2021-3572 EUVD-2021-0186GHSA-5xp3-jfq3-5q8xPYSEC-2021-437

Improper Input Validation in pip

Published Nov 10, 2021 · Updated Oct 8, 2026 · Assigned by redhat

Description

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

Affected products

VendorProductAffectedFixed
— python-pip fixed in python-pip 21.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 python-pip 20.3.4-2 —
Debian 13 python-pip 20.3.4-2 —
Debian 12 python-pip 20.3.4-2 —
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS python-pip 9.0.1-2.3~ubuntu1.18.04.5+esm2 USN-4961-2
Ubuntu Pro 16.04 LTS python-pip 8.1.1-2ubuntu0.6+esm2 USN-4961-2
Ubuntu Pro 14.04 LTS python-pip 1.5.4-1ubuntu4+esm1 USN-4961-2
ReleasePackageFixed inAdvisory
RHEL 8 Cython +1 0.29.14-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 PyYAML +1 5.4.1-1.module+el8.5.0+10613+59a13ec4 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 babel +1 2.7.0-11.module+el8.5.0+11015+9c1c7c42 RHSA-2021:4162
RHEL 8 mod_wsgi +1 4.6.8-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 numpy +3 1.17.3-6.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4160
RHEL 8 pybind11 +2 2.6.1-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 pytest +1 4.6.6-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-PyMySQL +1 0.10.1-1.module+el8.4.0+9692+8e86ab84 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-asn1crypto +1 1.2.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-atomicwrites +1 1.3.0-8.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-attrs +1 19.3.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-cffi +1 1.13.2-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-chardet +1 3.0.4-19.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-cryptography +1 2.8-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-idna +1 2.8-6.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-iniconfig +1 1.1.1-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python-jinja2 +1 2.10.3-5.module+el8.5.0+10542+ba057329 RHSA-2021:4162
RHEL 8 python-lxml +1 4.4.1-6.module+el8.5.0+10542+ba057329 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-markupsafe +1 1.1.1-6.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-more-itertools +1 7.2.0-5.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-packaging +1 19.2-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-pip +3 9.0.3-20.el8 RHSA-2021:4455
RHEL 8 python-pluggy +1 0.13.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-ply +1 3.11-10.module+el8.4.0+9579+e9717e18 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-psutil +1 5.6.4-4.module+el8.5.0+12031+10ce4870 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-psycopg2 +3 2.8.4-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-py +1 1.8.0-8.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-pycparser +1 2.19-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-pysocks +1 1.7.1-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-requests +1 2.22.0-9.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-toml +1 0.10.1-5.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python-urllib3 +1 1.25.7-5.module+el8.5.0+11639+ea5b349d RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-wcwidth +1 0.1.7-16.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python-wheel +2 0.33.6-6.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python38 +7 3.8.8-4.module+el8.5.0+12205+a865257a RHSA-2021:4162
RHEL 8 python38-pip +2 19.3.1-4.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python38-pyparsing +1 2.4.5-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python38-pyyaml 5.4.1-1.module+el8.5.0+10721+14d8e0d5 RHSA-2021:4162
RHEL 8 python38-setuptools +2 41.6.0-5.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python38-six +1 1.12.0-10.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 8 python39 +7 3.9.6-2.module+el8.5.0+12204+54860423 RHSA-2021:4160
RHEL 8 python39-Cython 0.29.21-5.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-PyMySQL 0.10.1-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-attrs 20.3.0-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-cffi 1.14.3-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-chardet 3.0.4-19.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-cryptography 3.3.1-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-idna 2.10-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-lxml 4.6.2-3.module+el8.5.0+10536+a233b742 RHSA-2021:4160
RHEL 8 python39-mod_wsgi 4.7.1-4.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-more-itertools 8.5.0-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-numpy +2 1.19.4-3.module+el8.5.0+12204+54860423 RHSA-2021:4160
RHEL 8 python39-packaging 20.4-4.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-pip +1 20.2.4-6.module+el8.5.0+12204+54860423 RHSA-2021:4160
RHEL 8 python39-pluggy 0.13.1-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-ply 3.11-10.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-psutil 5.8.0-4.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-psycopg2 +2 2.8.6-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-py 1.10.0-1.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-pycparser 2.20-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-pyparsing 2.4.7-5.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-pysocks 1.7.1-4.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-pytest 6.0.2-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-requests 2.25.0-2.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-scipy 1.5.4-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-setuptools +1 50.3.2-4.module+el8.5.0+12204+54860423 RHSA-2021:4160
RHEL 8 python39-six 1.15.0-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-urllib3 1.25.10-4.module+el8.5.0+11712+ea2d2be1 RHSA-2021:4160
RHEL 8 python39-wcwidth 0.2.5-3.module+el8.4.0+9822+20bf1249 RHSA-2021:4160
RHEL 8 python39-wheel +1 1:0.35.1-4.module+el8.5.0+12204+54860423 RHSA-2021:4160
RHEL 8 pytz +1 2019.3-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 scipy +1 1.3.1-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162, RHSA-2021:4160
RHEL 3 rh-python38-babel +1 2.7.0-12.el7 RHSA-2021:3254
RHEL 3 rh-python38-python +8 3.8.11-2.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-cryptography 2.8-5.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-jinja2 2.10.3-6.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-lxml 4.4.1-7.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-pip +1 19.3.1-2.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-urllib3 1.25.7-7.el7 RHSA-2021:3254

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 python3-pip 9.0.3-20.el8 ALSA-2021:4455
AlmaLinux 8 python38-Cython 0.29.14-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-PyMySQL 0.10.1-1.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-asn1crypto 1.2.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-atomicwrites 1.3.0-8.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-attrs 19.3.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-babel 2.7.0-11.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-cffi 1.13.2-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-chardet 3.0.4-19.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-cryptography 2.8-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-idna 2.8-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-jinja2 2.10.3-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-markupsafe 1.1.1-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-mod_wsgi 4.6.8-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-more-itertools 7.2.0-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-numpy +2 1.17.3-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-packaging 19.2-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pluggy 0.13.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-ply 3.11-10.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-psutil 5.6.4-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-psycopg2 +2 2.8.4-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-py 1.8.0-8.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pycparser 2.19-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pyparsing 2.4.5-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pysocks 1.7.1-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pytest 4.6.6-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pytz 2019.3-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pyyaml 5.4.1-1.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-requests 2.22.0-9.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-scipy 1.3.1-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-setuptools +1 41.6.0-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-six 1.12.0-10.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-urllib3 1.25.7-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-wcwidth 0.1.7-16.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-wheel +1 0.33.6-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python39-Cython 0.29.21-5.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-PyMySQL 0.10.1-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-attrs 20.3.0-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-cffi 1.14.3-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-chardet 3.0.4-19.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-cryptography 3.3.1-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-idna 2.10-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-iniconfig 1.1.1-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-mod_wsgi 4.7.1-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-more-itertools 8.5.0-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-numpy +2 1.19.4-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-packaging 20.4-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pluggy 0.13.1-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-ply 3.11-10.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-psutil 5.8.0-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-psycopg2 +2 2.8.6-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-py 1.10.0-1.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pycparser 2.20-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pyparsing 2.4.7-5.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pysocks 1.7.1-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pytest 6.0.2-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-pyyaml 5.4.1-1.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-requests 2.25.0-2.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-scipy 1.5.4-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-setuptools +1 50.3.2-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-six 1.15.0-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-toml 0.10.1-5.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-urllib3 1.25.10-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-wcwidth 0.2.5-3.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160
AlmaLinux 8 python39-wheel +1 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 ALSA-2021:4160

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 Cython 0.29.14-4.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 PyYAML 5.4.1-1.module+el8.4.0+574+843c4898 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 babel 2.7.0-11.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 mod_wsgi 4.6.8-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 numpy 1.17.3-6.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 pybind11 2.6.1-2.module+el8.4.0+574+843c4898 RLSA-2021:4160
Rocky Linux 8 pytest 4.6.6-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-PyMySQL 0.10.1-1.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-asn1crypto 1.2.0-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-atomicwrites 1.3.0-8.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-attrs 19.3.0-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-cffi 1.13.2-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-chardet 3.0.4-19.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-cryptography 2.8-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-idna 2.8-6.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-iniconfig 1.1.1-2.module+el8.4.0+574+843c4898 RLSA-2021:4160
Rocky Linux 8 python-jinja2 2.10.3-5.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python-lxml 4.4.1-6.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-markupsafe 1.1.1-6.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-more-itertools 7.2.0-5.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-packaging 19.2-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-pluggy 0.13.0-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-ply 3.11-10.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-psutil 5.6.4-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-psycopg2 2.8.4-4.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-py 1.8.0-8.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-pycparser 2.19-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-pysocks 1.7.1-4.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-requests 2.22.0-9.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-toml 0.10.1-5.module+el8.4.0+574+843c4898 RLSA-2021:4160
Rocky Linux 8 python-urllib3 1.25.7-5.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-wcwidth 0.1.7-16.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python-wheel 0.33.6-6.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python38 3.8.8-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python39 3.9.6-2.module+el8.5.0+673+10283621 RLSA-2021:4160
Rocky Linux 8 python3x-pip 19.3.1-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python3x-pyparsing 2.4.5-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python3x-setuptools 41.6.0-5.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 python3x-six 1.12.0-10.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
Rocky Linux 8 pytz 2019.3-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 scipy 1.3.1-4.module+el8.4.0+570+c2eaf144 RLSA-2021:4162, RLSA-2021:4160
ReleasePackageFixed inAdvisory
SLES 15 SP3 python 2.7.18-150000.38.1 SUSE-SU-2022:1091-1
SLES 15 SP3 python-base 2.7.18-150000.38.2 SUSE-SU-2022:1091-1
SLES 15 SP3 python-pip 20.0.2-6.15.1 SUSE-SU-2021:4001-1
SLES 15 SP3 python-pip-wheel 10.0.1-3.9.1 SUSE-SU-2021:4002-1
SLES 15 SP3 python3 +1 3.6.15-150300.10.21.1 SUSE-SU-2022:0942-1
SLES 15 SP3 python39 3.9.10-150300.4.8.2 SUSE-SU-2022:1485-1
SLES 15 SP3 python39-core 3.9.10-150300.4.8.1 SUSE-SU-2022:1485-1
SLES 15 SP3 python39-pip 20.2.4-7.8.1 SUSE-SU-2022:0064-1
SLES 15 SP2 python-pip 20.0.2-6.15.1 SUSE-SU-2021:4001-1
SLES 15 SP2 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES 15 SP1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES 15 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES 12 SP5 python3 +1 3.4.10-25.88.1 SUSE-SU-2022:1044-1
SLES 12 SP5 python36 3.6.15-21.5 SUSE-SU-2022:1094-1
SLES 12 SP5 python36-core 3.6.15-21.4 SUSE-SU-2022:1094-1
SLES 12 SP5 python36-pip 20.2.4-8.9.1 SUSE-SU-2022:0060-1
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 python-pip 10.0.1-13.6.1 SUSE-SU-2021:4051-1
SLES 12 python3 +1 3.4.10-25.88.1 SUSE-SU-2022:1044-1
SLES 2 python 2.7.18-150000.38.1 SUSE-SU-2022:1091-1
SLES 2 python-base 2.7.18-150000.38.2 SUSE-SU-2022:1091-1
SLES 2 python-pip 20.0.2-6.15.1 SUSE-SU-2021:4001-1
SLES for SAP 15 SP2 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES for SAP 15 SP1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES for SAP 15 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLES for SAP 12 SP5 python3 +1 3.4.10-25.88.1 SUSE-SU-2022:1044-1
SLES for SAP 12 SP5 python36 3.6.15-21.5 SUSE-SU-2022:1094-1
SLES for SAP 12 SP5 python36-core 3.6.15-21.4 SUSE-SU-2022:1094-1
SLES for SAP 12 SP5 python36-pip 20.2.4-8.9.1 SUSE-SU-2022:0060-1
SLE Real Time 15 SP2 python 2.7.18-150000.38.1 SUSE-SU-2022:1091-1
SLE Real Time 15 SP2 python-base 2.7.18-150000.38.2 SUSE-SU-2022:1091-1
SLE Micro 5.2 python3 +1 3.6.15-150300.10.21.1 SUSE-SU-2022:0942-2
SLE Micro 5.1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLE HPC 15 SP2 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLE HPC 15 SP1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SLE HPC 15 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SUSE OpenStack Cloud Crowbar 9 python-pip 9.0.1-4.6.1 SUSE-SU-2021:2304-1
SUSE OpenStack Cloud Crowbar 8 python-pip 9.0.1-3.6.1 SUSE-SU-2021:2441-1
SUSE OpenStack Cloud 9 python-pip 9.0.1-4.6.1 SUSE-SU-2021:2304-1
SUSE OpenStack Cloud 8 python-pip 9.0.1-3.6.1 SUSE-SU-2021:2441-1
SUSE Manager Server 4.1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SUSE Manager Retail Branch Server 4.1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SUSE Manager Proxy 4.1 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SUSE HPE Helion OpenStack 8 python-pip 9.0.1-3.6.1 SUSE-SU-2021:2441-1
SUSE Enterprise Storage 7 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
SUSE Enterprise Storage 6 python3 +1 3.6.15-150000.3.106.1 SUSE-SU-2022:2351-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python 2.7.18-18.1 openSUSE-SU-2024:11877-1
openSUSE Tumbleweed python36 3.6.15-10.1 openSUSE-SU-2024:11878-1
openSUSE Tumbleweed python39 3.9.13-2.1 openSUSE-SU-2024:12150-1
openSUSE Leap 15.4 python39 3.9.10-150300.4.8.2 SUSE-SU-2022:1485-1
openSUSE Leap 15.4 python39-core +1 3.9.10-150300.4.8.1 SUSE-SU-2022:1485-1
openSUSE Leap 15.3 python +1 2.7.18-150000.38.1 openSUSE-SU-2022:1091-1
openSUSE Leap 15.3 python-base 2.7.18-150000.38.2 openSUSE-SU-2022:1091-1
openSUSE Leap 15.3 python-pip 20.0.2-6.15.1 openSUSE-SU-2021:4001-1
openSUSE Leap 15.3 python-pip-wheel 10.0.1-3.9.1 openSUSE-SU-2021:4002-1
openSUSE Leap 15.3 python3 +2 3.6.15-150300.10.21.1 openSUSE-SU-2022:0942-1
openSUSE Leap 15.3 python39 3.9.10-150300.4.8.2 SUSE-SU-2022:1485-1
openSUSE Leap 15.3 python39-core +1 3.9.10-150300.4.8.1 SUSE-SU-2022:1485-1
openSUSE Leap 15.3 python39-pip 20.2.4-7.8.1 openSUSE-SU-2022:0064-1
openSUSE Leap 15.2 python-pip +1 10.0.1-lp152.4.9.1 openSUSE-SU-2021:1598-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 python2-pip +2 20.2.2-1.amzn2.0.3 ALAS2-2021-1667

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-IPy No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 python3-pip +2 9.0.3-20.el8 ELSA-2021-4455
Oracle Linux 8 python38 +7 3.8.8-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-Cython 0.29.14-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-PyMySQL 0.10.1-1.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-asn1crypto 1.2.0-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-atomicwrites 1.3.0-8.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-attrs 19.3.0-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-babel 2.7.0-11.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-cffi 1.13.2-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-chardet 3.0.4-19.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-cryptography 2.8-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-idna 2.8-6.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-jinja2 2.10.3-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-lxml 4.4.1-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-markupsafe 1.1.1-6.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-mod_wsgi 4.6.8-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-more-itertools 7.2.0-5.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-numpy +2 1.17.3-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-packaging 19.2-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pip +1 19.3.1-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-pluggy 0.13.0-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-ply 3.11-10.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-psutil 5.6.4-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-psycopg2 +2 2.8.4-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-py 1.8.0-8.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pycparser 2.19-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pyparsing 2.4.5-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pysocks 1.7.1-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pytest 4.6.6-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pytz 2019.3-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pyyaml 5.4.1-1.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-requests 2.22.0-9.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-scipy 1.3.1-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-setuptools +1 41.6.0-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-six 1.12.0-10.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-urllib3 1.25.7-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-wcwidth 0.1.7-16.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-wheel +1 0.33.6-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python39 +7 3.9.6-2.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-Cython 0.29.21-5.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-PyMySQL 0.10.1-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-attrs 20.3.0-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-cffi 1.14.3-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-chardet 3.0.4-19.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-cryptography 3.3.1-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-idna 2.10-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-iniconfig 1.1.1-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-lxml 4.6.2-3.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-mod_wsgi 4.7.1-4.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-more-itertools 8.5.0-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-numpy +2 1.19.4-3.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-packaging 20.4-4.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pip +1 20.2.4-6.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-pluggy 0.13.1-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-ply 3.11-10.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-psutil 5.8.0-4.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-psycopg2 +2 2.8.6-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-py 1.10.0-1.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pybind11 +1 2.6.1-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pycparser 2.20-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pyparsing 2.4.7-5.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pysocks 1.7.1-4.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pytest 6.0.2-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-pyyaml 5.4.1-1.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-requests 2.25.0-2.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-scipy 1.5.4-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-setuptools +1 50.3.2-4.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-six 1.15.0-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-toml 0.10.1-5.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-urllib3 1.25.10-4.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 8 python39-wcwidth 0.2.5-3.module+el8.4.0+20109+b7b1db01 ELSA-2021-4160
Oracle Linux 8 python39-wheel +1 1:0.35.1-4.module+el8.5.0+20364+c7fe1181 ELSA-2021-4160
Oracle Linux 7 python3-pip 9.0.3-8.0.3.el7 ELSA-2023-12349

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pip < 21.1 21.1 GHSA-5xp3-jfq3-5q8x

Advisories 42

References