< back to search

shield Security update for python-pip
SUSE-SLE-Module-Python3-15-SP7-2026-3589

This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).

  • Release Date
    Aug 11 2026
  • References
    Bugzilla: 1273090
    CVEs: CVE-2026-13346
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Python 3 Module 15.7 x86_64
  • Packages
    python-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock src
    python311-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock rpm
Python 3 Module 15.7 aarch64
  • Packages
    python-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock src
    python311-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock rpm
Python 3 Module 15.7 ppc64le
  • Packages
    python-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock src
    python311-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock rpm
Python 3 Module 15.7 s390x
  • Packages
    python-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock src
    python311-pip
    A Python package management system
    22.3.1-150400.17.29.1 lock rpm