python-pip 9.0.1-2.3~ubuntu1.18.04.4 source package in Ubuntu
Changelog
python-pip (9.0.1-2.3~ubuntu1.18.04.4) bionic-security; urgency=medium
* SECURITY UPDATE: directory traversal on pip install
- debian/patches/CVE-2019-20916.patch: prevent pip install <url> from
permitting directory traversal
- CVE-2019-20916
-- Emilia Torino <email address hidden> Thu, 22 Oct 2020 11:40:50 -0300
Upload details
- Uploaded by:
- Emilia Torino
- Uploaded to:
- Bionic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| python-pip_9.0.1.orig.tar.gz | 1.1 MiB | 09f243e1a7b461f654c26a725fa373211bb7ff17a9300058b205c61658ca940d |
| python-pip_9.0.1-2.3~ubuntu1.18.04.4.debian.tar.xz | 19.4 KiB | a50680f377c17095a2f730a8bf364841903802239f3c7ded5574d787016d4796 |
| python-pip_9.0.1-2.3~ubuntu1.18.04.4.dsc | 2.8 KiB | 40e36b21cc01dd2168e636d08fbeebaf2ea160bc92e977eea3f6ec0e3c2287f4 |
Available diffs
Binary packages built by this source
- python-pip: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
- python-pip-whl: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the support package for the PEP 427 wheel version of the package,
required for using pip inside a virtual environment.
- python3-pip: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the Python 3 version of the package.
