Red Hat Security Advisory

RHSA-2021:4455

python-pip security update

Released 2021-11-09 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3-pip-9.0.3-20.el8
Red Hat Enterprise Linux BaseOS (v. 8) platform-python-pip-9.0.3-20.el8, python-pip-9.0.3-20.el8, python3-pip-wheel-9.0.3-20.el8

TI-2021-02521 CVE-2021-3572 · GHSA-5xp3-jfq3-5q8x

LOW 29

A flaw was found in python-pip in the way it handled Unicode separators in git references.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01829 Published 2021-11-10 Partial fix · 21.1 CWE-20