CVE-2024-35195 · cross-distro fix matrix

CVE-2024-35195: It was discovered that pip incorrectly handled TLS certificate

Affects 9 Linux releases across 15 (distro × package) combinations. First disclosed: 2026-05-28.

Fix per ecosystem

Each block below is a distro release where CVE-2024-35195 has a known fix. Run the listed command on that distro to remediate.

Source: Ubuntu USN

python-pip→ fixed in22.0.2+dfsg-1ubuntu0.7+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python-pip
```
python3-pip→ fixed in22.0.2+dfsg-1ubuntu0.7+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip
```
python3-pip-whl→ fixed in22.0.2+dfsg-1ubuntu0.7+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip-whl
```

Source: Ubuntu USN

python-pip→ fixed in24.0+dfsg-1ubuntu1.3+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python-pip
```
python3-pip→ fixed in24.0+dfsg-1ubuntu1.3+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip
```
python3-pip-whl→ fixed in24.0+dfsg-1ubuntu1.3+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip-whl
```

Source: Ubuntu USN

python-pip→ fixed in25.1.1+dfsg-1ubuntu2+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python-pip
```
python3-pip→ fixed in25.1.1+dfsg-1ubuntu2+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip
```
python3-pip-whl→ fixed in25.1.1+dfsg-1ubuntu2+esm1USN-8344-1
```
sudo apt-get install --only-upgrade -y python3-pip-whl
```

Source: Debian Security Tracker

requests→ fixed in2.32.3+dfsg-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y requests
```