Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20202-1

Опубликовано: 11 фев. 2026
Источник: suse-cvrf

Описание

Security update for python-pip

This update for python-pip fixes the following issues:

  • CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599).

Список пакетов

openSUSE Leap 16.0
python313-pip-25.0.1-160000.3.1
python313-pip-wheel-25.0.1-160000.3.1

Ссылки

Описание

When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations.

Затронутые продукты
openSUSE Leap 16.0:python313-pip-25.0.1-160000.3.1
openSUSE Leap 16.0:python313-pip-wheel-25.0.1-160000.3.1
Ссылки