Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0805-1

Опубликовано: 04 мар. 2026
Источник: suse-cvrf

Описание

Security update for python-pip

This update for python-pip fixes the following issues:

  • CVE-2026-1703: Fixed a potential path traversal in python-pip. (bsc#1257599)

Список пакетов

Container bci/python:3
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-HPC-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAP-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAP-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAP-Hardened
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAP-Hardened-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-SAPCAL-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-Azure-Basic
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-Azure-Standard
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-HPC-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-HPC-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-SAP-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-SAP-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-SAP-Hardened-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP5-SAPCAL-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-Azure-Basic
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-Azure-Standard
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-HPC
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-HPC-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-HPC-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-Hardened
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-Hardened-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP6-SAPCAL-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-Azure-Basic
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-Azure-Standard
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-HPC-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-HPC-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAP-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAP-Azure-3P
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAP-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAP-Hardened-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP7-SAPCAL-Azure
python311-pip-22.3.1-150400.17.19.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-pip-22.3.1-150400.17.19.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-pip-22.3.1-150400.17.19.1
openSUSE Leap 15.6
python311-pip-22.3.1-150400.17.19.1

Ссылки

Описание

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

Затронутые продукты
Container bci/python:3:python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-BYOS-Azure:python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-HPC-BYOS-Azure:python311-pip-22.3.1-150400.17.19.1
Image SLES15-SP4-Hardened-BYOS-Azure:python311-pip-22.3.1-150400.17.19.1
Ссылки