Ubuntu
python-pip package

python-pip 23.2+dfsg-1ubuntu0.1 source package in Ubuntu

Changelog

python-pip (23.2+dfsg-1ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: http cookie leakage via http redirect
    - debian/patches/CVE-2023-43804.patch: removes the cookie from the
      http request when it is redirected to a different origin.
    - CVE-2023-43804
  * SECURITY UPDATE: http body leakage via http redirect
    - debian/patches/CVE-2023-45803.patch: removes the body from the
      http request when it is redirected to a different origin and the
      http verb is changed to GET.
    - CVE-2023-45803

 -- Jorge Sancho Larraz <email address hidden>  Fri, 10 Nov 2023 11:12:38 +0100

Upload details

Uploaded by:
Jorge Sancho Larraz
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates universe python
Mantic security universe python

Builds

Mantic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
python-pip_23.2+dfsg.orig.tar.xz 1.2 MiB 770f5cf91f80dbef51c3d2fed57277d0587c2651bd5fcb3b2f24f598eff6be31
python-pip_23.2+dfsg-1ubuntu0.1.debian.tar.xz 23.3 KiB cd8ad9476e9b4b02cdc74f9f0722d95a8ee4a632841f54205d7c5afab08a31b7
python-pip_23.2+dfsg-1ubuntu0.1.dsc 2.4 KiB 2bb081f19150cf632d9766600dd5f833e412b8115f136b0d8ea8185a9fb6fae9

View changes file

Binary packages built by this source

python3-pip: Python package installer

 pip is the Python package installer. It integrates with virtualenv, doesn't
 do partial installs, can save package state for replaying, can install from
 non-egg sources, and can install from version control repositories.
 .
 This is the Python 3 version of the package.

python3-pip-whl: Python package installer (pip wheel)

 pip is the Python package installer. It integrates with virtualenv, doesn't
 do partial installs, can save package state for replaying, can install from
 non-egg sources, and can install from version control repositories.
 .
 This is the support package for the PEP 427 wheel version of the package,
 required for using pip inside a virtual environment.