Ubuntu
python-pip package

python-pip 22.0.2+dfsg-1ubuntu0.4 source package in Ubuntu

Changelog

python-pip (22.0.2+dfsg-1ubuntu0.4) jammy-security; urgency=medium

  * SECURITY UPDATE: http cookie leakage via http redirect
    - debian/patches/CVE-2023-43804.patch: removes the cookie from the
      http request when it is redirected to a different origin.
    - CVE-2023-43804
  * SECURITY UPDATE: http body leakage via http redirect
    - debian/patches/CVE-2023-45803.patch: removes the body from the
      http request when it is redirected to a different origin and the
      http verb is changed to GET.
    - CVE-2023-45803

 -- Jorge Sancho Larraz <email address hidden>  Fri, 10 Nov 2023 13:42:40 +0100

Upload details

Uploaded by:
Jorge Sancho Larraz
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates universe python
Jammy security universe python

Builds

Jammy: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-pip_22.0.2+dfsg.orig.tar.xz 1.2 MiB c939650067764c6f7c0cf98d4a38a0ae3bb1d5761d1b68e52056ed7b57d4b532
python-pip_22.0.2+dfsg-1ubuntu0.4.debian.tar.xz 23.1 KiB 4cdc414c84b4e82e4c21fef2894b0b1cddaac16ff7adee78930e8ddf1daf6a3c
python-pip_22.0.2+dfsg-1ubuntu0.4.dsc 2.4 KiB 89952a23b94b1278857f216e48ef8975996d7486e28739a7f2e06dfc3bf1c523

View changes file

Binary packages built by this source

python3-pip: Python package installer

 pip is the Python package installer. It integrates with virtualenv, doesn't
 do partial installs, can save package state for replaying, can install from
 non-egg sources, and can install from version control repositories.
 .
 This is the Python 3 version of the package.

python3-pip-whl: Python package installer (pip wheel)

 pip is the Python package installer. It integrates with virtualenv, doesn't
 do partial installs, can save package state for replaying, can install from
 non-egg sources, and can install from version control repositories.
 .
 This is the support package for the PEP 427 wheel version of the package,
 required for using pip inside a virtual environment.