Описание
ELSA-2026-36193: python3.14-pip security update (IMPORTANT)
[25.2-5]
- Fix gating plan
- removed unnecessary older VERSION= tests
- removed bootstrap test
- fix pip_install_upgrade to run pip-3.14
- fix bash completion + remove unused metadata file
[25.2-4]
- Security fix for CVE-2026-8643: path traversal in wheel entry points
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
python3.14-pip
25.2-3.el10_2.5
python3.14-pip-wheel
25.2-3.el10_2.5
Oracle Linux x86_64
python3.14-pip
25.2-3.el10_2.5
python3.14-pip-wheel
25.2-3.el10_2.5
Связанные CVE
Связанные уязвимости
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.
pip can extract console_scripts and gui_scripts outside installation directory
pip would treat console_scripts and gui_scripts as paths instead of fi ...