pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 20, 2026 |
| Suse | — | Upgrade python311-pipUpgrade python-docUpgrade python-base-32bitUpgrade python313-pip-wheelUpgrade python-baseUpgrade python-cursesUpgrade python-32bitUpgrade libpython2_7-1_0Upgrade python-idleUpgrade python-gdbmUpgrade python-develUpgrade pythonUpgrade python-pipUpgrade python-demoUpgrade libpython2_7-1_0-32bitUpgrade python3-pipUpgrade python313-pipUpgrade python-tkUpgrade python-xmlUpgrade python-doc-pdf | Jun 4, 2026 | Jun 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 5, 2026 | Apr 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub