A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python39-idnaUpgrade python39-iniconfigUpgrade python39-pycparserUpgrade python39-sixUpgrade python39-plyUpgrade python39-psycopg2-docUpgrade python38-chardetUpgrade python38-asn1cryptoUpgrade python39-numpy-f2pyUpgrade python38-cryptographyUpgrade python39-pyparsingUpgrade python38-jinja2Upgrade python39-setuptools-wheelUpgrade python38-pluggyUpgrade python38-wheel-wheelUpgrade python39-pyyamlUpgrade python39-wheelUpgrade python38-more-itertoolsUpgrade python39-packagingUpgrade python38-psycopg2-docUpgrade python39-PyMySQLUpgrade python39-chardetUpgrade python38-setuptoolsUpgrade python38-pysocksUpgrade python38-wcwidthUpgrade python38-requestsUpgrade python39-scipyUpgrade python38-plyUpgrade python38-urllib3Upgrade python38-pyyamlUpgrade python39-pyUpgrade python39-more-itertoolsUpgrade python39-cffiUpgrade python38-psycopg2Upgrade python38-pyUpgrade python38-numpyUpgrade python38-mod_wsgiUpgrade python39-psycopg2-testsUpgrade python39-cryptographyUpgrade python38-attrsUpgrade python39-numpyUpgrade python39-wcwidthUpgrade python39-tomlUpgrade python39-urllib3Upgrade python38-wheelUpgrade python38-idnaUpgrade python38-atomicwritesUpgrade python39-wheel-wheelUpgrade python38-pytzUpgrade python39-setuptoolsUpgrade python38-PyMySQLUpgrade python39-CythonUpgrade python38-cffiUpgrade python38-packagingUpgrade python39-pysocksUpgrade python38-markupsafeUpgrade python39-attrsUpgrade python39-requestsUpgrade python38-scipyUpgrade python38-numpy-docUpgrade python38-setuptools-wheelUpgrade python39-pytestUpgrade python39-pluggyUpgrade python38-pycparserUpgrade python38-numpy-f2pyUpgrade python39-mod_wsgiUpgrade python38-pytestUpgrade python38-pyparsingUpgrade python38-psutilUpgrade python39-psycopg2Upgrade python3-pipUpgrade python38-psycopg2-testsUpgrade python38-CythonUpgrade python38-babelUpgrade python39-numpy-docUpgrade python38-sixUpgrade python39-psutil | May 4, 2022 | Nov 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python2-pipUpgrade python-pip-wheelUpgrade python3-pip | Jul 4, 2022 | Nov 10, 2021 |
| Centos_linux | — | Upgrade python38-sixUpgrade python38-idleUpgrade python38-lxmlUpgrade python39-lxml-debuginfoUpgrade python39-numpy-debuginfoUpgrade python38-wheel-wheelUpgrade python38-pip-wheelUpgrade python39-cryptography-debuginfoUpgrade python38-cffiUpgrade python39-wheelUpgrade numpy-debugsourceUpgrade python38-rpm-macrosUpgrade python39Upgrade python38-numpy-f2pyUpgrade python38-develUpgrade python38-markupsafeUpgrade python38-markupsafe-debuginfoUpgrade python39-psycopg2-docUpgrade python-cryptography-debugsourceUpgrade python39-idleUpgrade python39-mod_wsgiUpgrade python39-develUpgrade python39-psycopg2Upgrade python39-debugsourceUpgrade python-cffi-debugsourceUpgrade python39-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-asn1cryptoUpgrade python39-cffiUpgrade python39-testUpgrade python39-lxmlUpgrade python39-PyMySQLUpgrade python39-psycopg2-debuginfoUpgrade python38-debuginfoUpgrade python-psutil-debugsourceUpgrade python39-psutilUpgrade python38-idnaUpgrade python38-wheelUpgrade python39-numpy-docUpgrade python38-libsUpgrade python38-cryptography-debuginfoUpgrade python39-cffi-debuginfoUpgrade python39-scipy-debuginfoUpgrade python38-psycopg2Upgrade python38-psycopg2-testsUpgrade python39-pyyaml-debuginfoUpgrade python38-tkinterUpgrade python38-PyMySQLUpgrade python38-scipyUpgrade python39-pip-wheelUpgrade python38-psycopg2-docUpgrade python38-pysocksUpgrade python38-Cython-debuginfoUpgrade python-lxml-debugsourceUpgrade python38-numpy-debuginfoUpgrade python39-libsUpgrade python39-wheel-wheelUpgrade python39-requestsUpgrade python38-pycparserUpgrade python-markupsafe-debugsourceUpgrade python38-numpy-docUpgrade python3-pip-wheelUpgrade python39-psycopg2-testsUpgrade python39-psutil-debuginfoUpgrade python38-psutil-debuginfoUpgrade python38-psutilUpgrade python3-pipUpgrade python39-idnaUpgrade python39-numpy-f2pyUpgrade python38-debugUpgrade python38-pyyamlUpgrade python38-pipUpgrade python39-pycparserUpgrade python39-pyyamlUpgrade python38-mod_wsgiUpgrade python39-tkinterUpgrade python39-numpyUpgrade python39-plyUpgrade python38-scipy-debuginfoUpgrade python39-setuptoolsUpgrade python39-rpm-macrosUpgrade python38-jinja2Upgrade python38-CythonUpgrade python38-cffi-debuginfoUpgrade python38-babelUpgrade python38-plyUpgrade python38-cryptographyUpgrade python38-pyyaml-debuginfoUpgrade python38-pytzUpgrade python38-chardetUpgrade platform-python-pipUpgrade Cython-debugsourceUpgrade python39-urllib3Upgrade python39-tomlUpgrade python38-urllib3Upgrade python38-testUpgrade python39-sixUpgrade python39-scipyUpgrade python39-pysocksUpgrade python38-requestsUpgrade python39-chardetUpgrade python38-lxml-debuginfoUpgrade python38-debugsourceUpgrade python38-numpyUpgrade python38Upgrade python39-cryptographyUpgrade python-psycopg2-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python39-pipUpgrade python38-setuptoolsUpgrade python38-setuptools-wheelUpgrade scipy-debugsourceUpgrade python39-setuptools-wheel | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade python-pip | Jul 30, 2024 | Nov 10, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-pip-wheelUpgrade python3-pipUpgrade python2-pip | Sep 24, 2021 | Sep 24, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-pipUpgrade python-pip-wheel | Nov 12, 2021 | Sep 24, 2021 |
| Oracle Solaris | — | Upgrade library/python/pip-37 to version 20.3.4-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/python/pip to version 20.3.4-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/python/pip-27 to version 20.3.4-11.4.42.0.1.113.0 on Solaris 11.4Upgrade library/python/pip-39 to version 20.3.4-11.4.42.0.1.113.0 on Solaris 11.4 | Feb 17, 2022 | Nov 10, 2021 |
| Oracle_linux | — | Upgrade python39-develUpgrade python39-pyUpgrade python39-wheel-wheelUpgrade python38-psycopg2Upgrade python38-CythonUpgrade python39-libsUpgrade python38-atomicwritesUpgrade python38-wcwidthUpgrade python38-babelUpgrade python39-pytestUpgrade python38-tkinterUpgrade python39-sixUpgrade python39-setuptoolsUpgrade python39-plyUpgrade python39-tomlUpgrade python39Upgrade python38-plyUpgrade python38-pytestUpgrade python39-rpm-macrosUpgrade python39-pipUpgrade python38-pluggyUpgrade python38-pyparsingUpgrade python38-pyyamlUpgrade python38-lxmlUpgrade python39-wheelUpgrade python3-pip-wheelUpgrade python38-pycparserUpgrade python38-asn1cryptoUpgrade python38-rpm-macrosUpgrade python38-pipUpgrade python39-cffiUpgrade python39-idnaUpgrade python39-pysocksUpgrade python39-psutilUpgrade python38-mod_wsgiUpgrade python38-sixUpgrade python39-mod_wsgiUpgrade python39-pybind11Upgrade python38-PyMySQLUpgrade python39-requestsUpgrade python38-wheel-wheelUpgrade python39-debugUpgrade python3-pipUpgrade python38-setuptoolsUpgrade python38-debugUpgrade python39-pyparsingUpgrade python38-develUpgrade python38-chardetUpgrade python39-setuptools-wheelUpgrade python39-chardetUpgrade python38-packagingUpgrade python38-pytzUpgrade python39-testUpgrade python39-tkinterUpgrade python38-jinja2Upgrade python39-numpyUpgrade python39-pip-wheelUpgrade python38-attrsUpgrade python39-lxmlUpgrade python39-pluggyUpgrade python39-packagingUpgrade python39-more-itertoolsUpgrade python38-scipyUpgrade python38-psutilUpgrade python39-psycopg2Upgrade python38-cryptographyUpgrade python39-cryptographyUpgrade python39-iniconfigUpgrade python38-psycopg2-docUpgrade python38-urllib3Upgrade python38-requestsUpgrade python38-pyUpgrade python38-pip-wheelUpgrade python38-numpy-f2pyUpgrade python38-idleUpgrade python38-numpyUpgrade python38-cffiUpgrade python39-wcwidthUpgrade python39-pyyamlUpgrade python39-CythonUpgrade python39-numpy-f2pyUpgrade python38-psycopg2-testsUpgrade python39-psycopg2-testsUpgrade python38-wheelUpgrade python38-numpy-docUpgrade python38-idnaUpgrade python39-PyMySQLUpgrade python38Upgrade python39-urllib3Upgrade python38-markupsafeUpgrade python39-numpy-docUpgrade python39-scipyUpgrade python39-psycopg2-docUpgrade python38-pysocksUpgrade python38-testUpgrade python38-more-itertoolsUpgrade python38-libsUpgrade python39-attrsUpgrade python39-pycparserUpgrade python38-setuptools-wheelUpgrade platform-python-pipUpgrade python39-pybind11-develUpgrade python39-idle | Nov 17, 2021 | Apr 24, 2021 |
| Redhat_linux | — | Upgrade python39-Cython-debuginfoUpgrade python38-atomicwritesUpgrade python39-scipyUpgrade python38-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-more-itertoolsUpgrade python39-CythonUpgrade python38-lxmlUpgrade python38-numpyUpgrade python39-psutilUpgrade python39-pytestUpgrade python38-pipUpgrade python3-pipUpgrade python39-numpy-debuginfoUpgrade python39-packagingUpgrade python39-pluggyUpgrade python38-pycparserUpgrade python38-debugUpgrade python39-tkinterUpgrade python38-packagingUpgrade numpy-debugsourceUpgrade python38-numpy-docUpgrade python38-idnaUpgrade python38-babelUpgrade python38-pyUpgrade python38-idleUpgrade python38-numpy-debuginfoUpgrade python38-scipyUpgrade python39-libsUpgrade python38-pip-wheelUpgrade python-cryptography-debugsourceUpgrade python38-psycopg2-testsUpgrade python39-PyMySQLUpgrade python39-pybind11Upgrade python39-pipUpgrade python38-sixUpgrade python38-Cython-debuginfoUpgrade python38-markupsafeUpgrade python39-setuptoolsUpgrade python39-testUpgrade python38-pyparsingUpgrade python38-PyMySQLUpgrade python38-pysocksUpgrade python39-psutil-debuginfoUpgrade python38-urllib3Upgrade python-lxml-debugsourceUpgrade python39-attrsUpgrade python39-cffi-debuginfoUpgrade python39-develUpgrade python39-pysocksUpgrade python38-markupsafe-debuginfoUpgrade python38-numpy-f2pyUpgrade python38-pyyaml-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python38-cffiUpgrade python39-debugUpgrade python39-wheel-wheelUpgrade PyYAML-debugsourceUpgrade python39-numpy-docUpgrade python3-pip-wheelUpgrade python39-numpyUpgrade python39-psycopg2-docUpgrade python38-cryptography-debuginfoUpgrade python-cffi-debugsourceUpgrade python38-wheelUpgrade python39-pyyaml-debuginfoUpgrade python38-attrsUpgrade python39-pip-wheelUpgrade python39-debuginfoUpgrade python38-CythonUpgrade python39-psycopg2-testsUpgrade python39-mod_wsgiUpgrade python39-psycopg2Upgrade python38Upgrade python39-requestsUpgrade python38-lxml-debuginfoUpgrade python38-pytestUpgrade python39-chardetUpgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2Upgrade python38-wcwidthUpgrade python38-cryptographyUpgrade python39-rpm-macrosUpgrade python39-idnaUpgrade python38-develUpgrade python39-urllib3Upgrade python38-tkinterUpgrade python38-psycopg2-docUpgrade platform-python-pipUpgrade scipy-debugsourceUpgrade python39-numpy-f2pyUpgrade python38-chardetUpgrade python39-pyparsingUpgrade python39-iniconfigUpgrade python38-requestsUpgrade python38-cffi-debuginfoUpgrade Cython-debugsourceUpgrade python38-pluggyUpgrade python38-rpm-macrosUpgrade python38-debugsourceUpgrade python39-setuptools-wheelUpgrade python39-sixUpgrade python38-plyNo solution existsUpgrade python39-tomlUpgrade python38-psutil-debuginfoUpgrade python38-setuptoolsUpgrade python38-mod_wsgiUpgrade python39-lxmlUpgrade python39-wheelUpgrade python38-setuptools-wheelUpgrade python-psycopg2-debugsourceUpgrade python39-idleUpgrade python38-pyyamlUpgrade python39Upgrade python38-scipy-debuginfoUpgrade python38-more-itertoolsUpgrade python-markupsafe-debugsourceUpgrade python39-plyUpgrade python38-psutilUpgrade python38-testUpgrade python39-wcwidthUpgrade python39-cryptographyUpgrade python38-asn1cryptoUpgrade python39-debugsourceUpgrade python38-pytzUpgrade python39-pybind11-develUpgrade python38-libsUpgrade python39-pyyamlUpgrade python38-wheel-wheelUpgrade python38-jinja2Upgrade python-psutil-debugsourceUpgrade python39-pycparserUpgrade python39-cryptography-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39-pyUpgrade python39-cffi | Nov 10, 2021 | Nov 9, 2021 |
| Rocky_linux | — | Upgrade python39-pyyamlUpgrade python38-idleUpgrade python39-pybind11-develUpgrade python39-Cython-debuginfoUpgrade python38-lxmlUpgrade python39-cffi-debuginfoUpgrade python38-cffi-debuginfoUpgrade python38-debugUpgrade Cython-debugsourceUpgrade python38-develUpgrade python38-psutil-debuginfoUpgrade python39-cryptography-debuginfoUpgrade python-lxml-debugsourceUpgrade python39-debuginfoUpgrade python-cryptography-debugsourceUpgrade python39-develUpgrade python38-tkinterUpgrade python39-cffiUpgrade python39-psycopg2-testsUpgrade python38-pyyamlUpgrade python39-libsUpgrade python38-psycopg2Upgrade python39-debugsourceUpgrade python38-debugsourceUpgrade python39-numpy-f2pyUpgrade python38-mod_wsgiUpgrade python-psycopg2-debugsourceUpgrade python38-cryptographyUpgrade python39Upgrade python38-markupsafeUpgrade python39-pybind11Upgrade python-markupsafe-debugsourceUpgrade python38-scipyUpgrade python38-debuginfoUpgrade python39-testUpgrade python39-scipy-debuginfoUpgrade python39-psycopg2Upgrade python39-numpy-debuginfoUpgrade python39-CythonUpgrade python39-debugUpgrade python39-lxml-debuginfoUpgrade python39-psutilUpgrade python39-numpyUpgrade python38-pyyaml-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python39-psutil-debuginfoUpgrade python39-psycopg2-debuginfoUpgrade python39-tkinterUpgrade scipy-debugsourceUpgrade numpy-debugsourceUpgrade python38-libsUpgrade python39-idleUpgrade python38-psycopg2-debuginfoUpgrade python38-Cython-debuginfoUpgrade python39-lxmlUpgrade python38-psutilUpgrade python38-CythonUpgrade python39-psycopg2-docUpgrade python39-cryptographyUpgrade python38-psycopg2-docUpgrade python39-scipyUpgrade python38-testUpgrade python-cffi-debugsourceUpgrade python38-scipy-debuginfoUpgrade python38-numpyUpgrade python38-lxml-debuginfoUpgrade python38Upgrade python38-cffiUpgrade python-psutil-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-mod_wsgiUpgrade python38-psycopg2-testsUpgrade python38-numpy-f2pyUpgrade python38-numpy-debuginfoUpgrade python38-cryptography-debuginfo | Mar 12, 2024 | Nov 10, 2021 |
| Suse | — | Upgrade python2-pipUpgrade python36-develUpgrade python39-docUpgrade python3-pipUpgrade python3-docUpgrade python-32bitUpgrade python36-baseUpgrade python-base-32bitUpgrade python39-doc-devhelpUpgrade python-idleUpgrade python3-pip-wheelUpgrade python3-testsuiteUpgrade python3-cursesUpgrade python3-develUpgrade python-demoUpgrade python3-toolsUpgrade python3-idleUpgrade python39-32bitUpgrade python39-pipUpgrade python-tkUpgrade python-baseUpgrade libpython3_4m1_0-32bitUpgrade python3-dbmUpgrade pythonUpgrade python3Upgrade python39-cursesUpgrade python-gdbmUpgrade python39-dbmUpgrade python3-doc-devhelpUpgrade python2-pip-wheelUpgrade libpython2_7-1_0Upgrade python-doc-pdfUpgrade python-docUpgrade python3-tkUpgrade python36-pipUpgrade python39-tkUpgrade python39-testsuiteUpgrade python39Upgrade python-cursesUpgrade python39-base-32bitUpgrade python3-baseUpgrade python39-develUpgrade python-xmlUpgrade python-develUpgrade python39-baseUpgrade python36Upgrade libpython3_6m1_0Upgrade libpython3_9-1_0Upgrade libpython3_6m1_0-32bitUpgrade python39-toolsUpgrade libpython2_7-1_0-32bitUpgrade python39-idleUpgrade libpython3_9-1_0-32bitUpgrade python-pipUpgrade libpython3_4m1_0 | Dec 14, 2021 | Nov 10, 2021 |
| Ubuntu | — | Upgrade python3-pip (Ubuntu Pro) | Mar 22, 2023 | Nov 10, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub