Lucene search

K
redhatRedHatRHSA-2023:6694
HistoryNov 07, 2023 - 6:12 a.m.

(RHSA-2023:6694) Moderate: python-pip security update

2023-11-0706:12:07
access.redhat.com
39
python-pip
security update
directory traversal
python package index
pypi
red hat enterprise linux 9.3.

7.6 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.0%

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either “Pip Installs Packages” or “Pip Installs Python”.

Security Fix(es):

  • python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.