UbuntuUpdates.org

Package "python-pip"

Name: python-pip

Description:

Python package installer
Latest version: 9.0.1-2.3~ubuntu1.18.04.8
Release: bionic (18.04)
Level: updates
Repository: universe
Homepage: https://pip.pypa.io/en/stable/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-pip"

All arch deb package
APT INSTALL

Other versions of "python-pip" in Bionic

Repository Area Version
base universe 9.0.1-2
security universe 9.0.1-2.3~ubuntu1.18.04.8

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 9.0.1-2.3~ubuntu1.18.04.8 2023-03-02 18:06:57 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.8) bionic-security; urgency=medium

  * SECURITY REGRESSION: fix regex in wheel.py
    - debian/patches/CVE-2022-40898.patch: Fix wheel regex to match
      upstream pip regex instead of upstream wheel regex.

 -- David Fernandez Gonzalez <email address hidden> Thu, 02 Mar 2023 15:03:51 +0100
Source diff to previous version
CVE-2022-40898 An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker c

Version: 9.0.1-2.3~ubuntu1.18.04.7 2023-02-28 17:06:54 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.7) bionic-security; urgency=medium

  * SECURITY UPDATE: ReDOS in wheel.py
    - debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
      via wheel_file_re by restricting matching dash and dot characters
      in pip/wheel.py.
    - CVE-2022-40898

 -- David Fernandez Gonzalez <email address hidden> Tue, 28 Feb 2023 10:48:00 +0100
Source diff to previous version
CVE-2022-40898 An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker c

Version: 9.0.1-2.3~ubuntu1.18.04.6 2023-01-24 22:07:09 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.6) bionic-security; urgency=medium

  * No-change rebuild due to wheel and setuptools update.

 -- David Fernandez Gonzalez <email address hidden> Tue, 24 Jan 2023 10:34:07 +0100
Source diff to previous version

Version: 9.0.1-2.3~ubuntu1.18.04.5 2021-06-08 19:06:29 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.5) bionic; urgency=medium

  * Fix handling of requests exceptions when dependencies are debundled.
    (LP: #1833229)

 -- Stefano Rivera <email address hidden> Fri, 30 Apr 2021 14:11:12 -0400
Source diff to previous version
1833229 `--extra-index-url` not working for PIP

Version: 9.0.1-2.3~ubuntu1.18.04.4 2020-10-23 00:06:18 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: directory traversal on pip install
    - debian/patches/CVE-2019-20916.patch: prevent pip install <url> from
      permitting directory traversal
    - CVE-2019-20916

 -- Emilia Torino <email address hidden> Thu, 22 Oct 2020 11:40:50 -0300
CVE-2019-20916 The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can


About   -   Send Feedback to @ubuntu_updates