#pip

Ubuntu has temporarily reverted a pip security patch on 22.04 LTS, 24.04 LTS, and 26.04 LTS after it caused a regression. The notice affects fixes tied to CVE-2025-66471 and is important for teams managing Python package workflows on Ubuntu.

Ubuntu has published USN-8344-1 for pip vulnerabilities affecting TLS certificate verification and bundled urllib3 decompression handling, with risks including machine-in-the-middle exposure and denial of service.