UbuntuUpdates.org

Package "python-pip"

Name: python-pip

Description:

Python package installer

Latest version: 9.0.1-2.3~ubuntu1.18.04.4
Release: bionic (18.04)
Level: security
Repository: universe
Homepage: https://pip.pypa.io/en/stable/

Links


Download "python-pip"


Other versions of "python-pip" in Bionic

Repository Area Version
base universe 9.0.1-2
updates universe 9.0.1-2.3~ubuntu1.18.04.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 9.0.1-2.3~ubuntu1.18.04.4 2020-10-22 23:06:19 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: directory traversal on pip install
    - debian/patches/CVE-2019-20916.patch: prevent pip install <url> from
      permitting directory traversal
    - CVE-2019-20916

 -- Emilia Torino <email address hidden> Thu, 22 Oct 2020 11:40:50 -0300

Source diff to previous version
CVE-2019-20916 The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can

Version: 9.0.1-2.3~ubuntu1.18.04.3 2020-10-05 19:07:03 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.3) bionic-security; urgency=medium

  * No change rebuild to pull in security fixes for urllib3

 -- Marc Deslauriers <email address hidden> Fri, 02 Oct 2020 06:59:10 -0400

Source diff to previous version

Version: 9.0.1-2.3~ubuntu1.18.04.2 2020-08-17 14:07:20 UTC

  python-pip (9.0.1-2.3~ubuntu1.18.04.2) bionic-security; urgency=medium

  * No change rebuild to pull in security fixes for urllib3 and requests

 -- Mike Salvatore <email address hidden> Thu, 13 Aug 2020 19:33:19 -0400




About   -   Send Feedback to @ubuntu_updates