ELSA-2020-0850

ELSA-2020-0850 - python-pip security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-03-18

Description

[9.0.3-7]
- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1702473
Resolves: rhbz#1643829

[9.0.3-6]
- Add four new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1702473
Resolves: rhbz#1643829

Related CVEs

CVE-2018-20060

CVE-2019-11324

CVE-2018-18074

CVE-2019-11236

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	python-pip-9.0.3-7.el7_7.src.rpm	7f23f9b6ce7232a0068acda8ee005ccb42e4c2991e9efac9454282f1f8af2ac2	ELSA-2023-12349	ol7_aarch64_latest
	python-pip-9.0.3-7.el7_7.src.rpm	7f23f9b6ce7232a0068acda8ee005ccb42e4c2991e9efac9454282f1f8af2ac2	ELSA-2023-12349	ol7_aarch64_u7_patch
	python3-pip-9.0.3-7.el7_7.noarch.rpm	7d33d823e97dac977dceee45abb2c6d6e1c21e6a035e9844f1c8f4847e0ccd51	ELSA-2023-12349	ol7_aarch64_latest
	python3-pip-9.0.3-7.el7_7.noarch.rpm	7d33d823e97dac977dceee45abb2c6d6e1c21e6a035e9844f1c8f4847e0ccd51	ELSA-2023-12349	ol7_aarch64_u7_patch
Oracle Linux 7 (x86_64)	python-pip-9.0.3-7.el7_7.src.rpm	7f23f9b6ce7232a0068acda8ee005ccb42e4c2991e9efac9454282f1f8af2ac2	ELSA-2023-12349	ol7_x86_64_latest
	python-pip-9.0.3-7.el7_7.src.rpm	7f23f9b6ce7232a0068acda8ee005ccb42e4c2991e9efac9454282f1f8af2ac2	ELSA-2023-12349	ol7_x86_64_u7_patch
	python3-pip-9.0.3-7.el7_7.noarch.rpm	7d33d823e97dac977dceee45abb2c6d6e1c21e6a035e9844f1c8f4847e0ccd51	ELSA-2023-12349	ol7_x86_64_latest
	python3-pip-9.0.3-7.el7_7.noarch.rpm	7d33d823e97dac977dceee45abb2c6d6e1c21e6a035e9844f1c8f4847e0ccd51	ELSA-2023-12349	ol7_x86_64_u7_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team