python-pip 22.0.2+dfsg-1ubuntu0.2 source package in Ubuntu
Changelog
python-pip (22.0.2+dfsg-1ubuntu0.2) jammy-security; urgency=medium
* SECURITY UPDATE: ReDOS in wheel.py
- debian/patches/CVE-2022-40898.patch: Fix potential DoS attack
via wheel_file_re by restricting matching dash and dot characters
in src/pip/_internal/models/wheel.py.
- CVE-2022-40898
-- David Fernandez Gonzalez <email address hidden> Tue, 28 Feb 2023 10:39:46 +0100
Upload details
- Uploaded by:
- David Fernandez Gonzalez
- Uploaded to:
- Jammy
- Original maintainer:
- Ubuntu Developers
- Architectures:
- all
- Section:
- python
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| python-pip_22.0.2+dfsg.orig.tar.xz | 1.2 MiB | c939650067764c6f7c0cf98d4a38a0ae3bb1d5761d1b68e52056ed7b57d4b532 |
| python-pip_22.0.2+dfsg-1ubuntu0.2.debian.tar.xz | 21.6 KiB | 89b4c5b0afdcd9bd9b6614063472be29070d364a73d348569fec1f154cac5820 |
| python-pip_22.0.2+dfsg-1ubuntu0.2.dsc | 2.4 KiB | e8c3e92cf1c6572812704ed3f75d93f401584cfd238a4bfb8c410378c1a70cf6 |
Available diffs
Binary packages built by this source
- python3-pip: Python package installer
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the Python 3 version of the package.
- python3-pip-whl: Python package installer (pip wheel)
pip is the Python package installer. It integrates with virtualenv, doesn't
do partial installs, can save package state for replaying, can install from
non-egg sources, and can install from version control repositories.
.
This is the support package for the PEP 427 wheel version of the package,
required for using pip inside a virtual environment.
