Red Hat Security AdvisoryRHSA-2022:5234
python-virtualenv security update
Released 2022-06-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) python-virtualenv-15.1.0-7.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-virtualenv-15.1.0-7.el7_9
- Red Hat Enterprise Linux Server (v. 7) python-virtualenv-15.1.0-7.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) python-virtualenv-15.1.0-7.el7_9
Fixes 1 record
Priority LOW 38
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03003 · Published 2020-09-04 · Partial fix · 19.2 CWE-22
