ELSA-2023-6914

ELSA-2023-6914 - python3.11-pip security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-11-17

Description

[22.3.1-4]
- Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2218249

[22.3.1-3]
- Fix changelog to contain Fedora contributors
Resolves: RHEL-232

Related CVEs

CVE-2007-4559

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	python3.11-pip-22.3.1-4.el8.src.rpm	25094d0ed0544c333af7895943e953105d67cef022f1e259494ce13d6fbbc387	-	ol8_aarch64_appstream
	python3.11-pip-22.3.1-4.el8.noarch.rpm	14893a410367866bbcfd3012541b14951bf6b1fc172ca758910d518d0f23717d	-	ol8_aarch64_appstream
	python3.11-pip-wheel-22.3.1-4.el8.noarch.rpm	0cf4c5cf14a56506ae7ca3fa32fa824615e7af1633eae5efb6ef88427326fed7	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	python3.11-pip-22.3.1-4.el8.src.rpm	25094d0ed0544c333af7895943e953105d67cef022f1e259494ce13d6fbbc387	-	ol8_x86_64_appstream
	python3.11-pip-22.3.1-4.el8.noarch.rpm	14893a410367866bbcfd3012541b14951bf6b1fc172ca758910d518d0f23717d	-	ol8_x86_64_appstream
	python3.11-pip-wheel-22.3.1-4.el8.noarch.rpm	0cf4c5cf14a56506ae7ca3fa32fa824615e7af1633eae5efb6ef88427326fed7	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team