Ubuntu Security Notice 4601-1 - It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary files on the host filesystem as root, resulting in a directory traversal attack.
dcf9f55c2a21045921903cc342699fd163477c9a26a08cc2ed1b876581c79399