Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0805-1

Опубликовано: 04 мар. 2026
Источник: suse-cvrf

Описание

Security update for python-pip

This update for python-pip fixes the following issues:

  • CVE-2026-1703: Fixed a potential path traversal in python-pip. (bsc#1257599)

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-pip-22.3.1-150400.17.19.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-pip-22.3.1-150400.17.19.1
openSUSE Leap 15.6
python311-pip-22.3.1-150400.17.19.1

Ссылки

Описание

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-pip-22.3.1-150400.17.19.1
SUSE Linux Enterprise Module for Python 3 15 SP7:python311-pip-22.3.1-150400.17.19.1
openSUSE Leap 15.6:python311-pip-22.3.1-150400.17.19.1
Ссылки