python-pip 20.0.2-5ubuntu1.8 source package in Ubuntu
Changelog
python-pip (20.0.2-5ubuntu1.8) focal-security; urgency=medium
* SECURITY UPDATE: ReDOS in wheel.py
- debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
via wheel_file_re by restricting matching dash and dot characters
in src/pip/_internal/models/wheel.py.
- CVE-2022-40898
-- David Fernandez Gonzalez <email address hidden> Tue, 28 Feb 2023 10:41:12 +0100
Upload details
- Uploaded by:
- David Fernandez Gonzalez
- Uploaded to:
- Focal
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| python-pip_20.0.2.orig.tar.gz | 1.4 MiB | 7db0c8ea4c7ea51c8049640e8e6e7fde949de672bfa4949920675563a5a6967f |
| python-pip_20.0.2-5ubuntu1.8.debian.tar.xz | 21.4 KiB | 3ed17aa18599ebdfd9e820351e8d3748a6d8868a925cc2eb4210bc0011f0dee2 |
| python-pip_20.0.2-5ubuntu1.8.dsc | 3.1 KiB | 9b8c0264b138d05296adeae49ff721182df5a8db4b2ddb3eec72e257ebceb302 |
Available diffs
Binary packages built by this source
- python-pip-whl: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the support package for the PEP 427 wheel version of the package,
required for using pip inside a virtual environment.
- python3-pip: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the Python 3 version of the package.
