RHSA-2023:7176: Moderate: python-pip security update
pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python". <br>Security Fix(es):<br><li> python: tarfile module directory traversal (CVE-2007-4559)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:7176?
The severity of RHSA-2023:7176 is classified as high.
How do I fix RHSA-2023:7176?
To fix RHSA-2023:7176, update your python-pip, platform-python-pip, python3-pip, or python3-pip-wheel packages to version 9.0.3-23.el8.
Which Python packages are affected by RHSA-2023:7176?
RHSA-2023:7176 affects the python-pip, platform-python-pip, python3-pip, and python3-pip-wheel packages.
What are the implications of not addressing RHSA-2023:7176?
Failing to address RHSA-2023:7176 may leave your system vulnerable to potential exploits associated with the identified issues.
Is there a recommended version to upgrade to for RHSA-2023:7176?
The recommended version to upgrade to for RHSA-2023:7176 is 9.0.3-23.el8.