< back to search

gpp_maybe Security update for python-pip

SUSE-SLE-Module-Python3-15-SP7-2026-2634

This update for python-pip fixes the following issues - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442). - CVE-2026-8643: path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669).

Release Date

Jun 25 2026
References

Bugzilla: 1262429, 1263442, 1266669
CVEs: CVE-2026-3219, CVE-2026-6357, CVE-2026-8643
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Python 3 Module 15.7 s390x

Packages

python-pip
A Python package management system

22.3.1-150400.17.26.1 lock src

python311-pip
A Python package management system

22.3.1-150400.17.26.1 lock rpm

Python 3 Module 15.7 aarch64

Packages

python-pip
A Python package management system

22.3.1-150400.17.26.1 lock src

python311-pip
A Python package management system

22.3.1-150400.17.26.1 lock rpm

Python 3 Module 15.7 ppc64le

Packages

python-pip
A Python package management system

22.3.1-150400.17.26.1 lock src

python311-pip
A Python package management system

22.3.1-150400.17.26.1 lock rpm

Python 3 Module 15.7 x86_64

Packages

python-pip
A Python package management system

22.3.1-150400.17.26.1 lock src

python311-pip
A Python package management system

22.3.1-150400.17.26.1 lock rpm