Red Hat Security Advisory

RHSA-2020:4432

python-pip security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-pip-9.0.3-18.el8
Red Hat Enterprise Linux BaseOS (v. 8) platform-python-pip-9.0.3-18.el8, python-pip-9.0.3-18.el8, python3-pip-wheel-9.0.3-18.el8

Fixes 1 record

TI-2019-15130 CVE-2019-20916 · GHSA-gpvv-69j7-gwj8

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in…

LOW 38

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03003 Published 2020-09-04 Partial fix · 19.2 CWE-22