AVG-2036 log
| Package | python-pip |
| Status | Fixed |
| Severity | Medium |
| Type | silent downgrade |
| Affected | 20.3.4-4 |
| Fixed | 21.0-1 |
| Current |
24.0-2 [extra-testing] 24.0-1 [extra] |
| Ticket | None |
| Created | Fri Jun 4 07:43:56 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2021-3572 | Medium | Yes | Silent downgrade | A security issue has been found in pip before version 21.1. Maliciously formatted tags could be used to hijack a commit-based pin. Using the fact that all... |