Mariner Release Notes Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2013-Aug 2013-Aug Final 1.0 4 2026-06-28T01:40:56 Mariner Release Notes 2013-08-02T00:00:00 2026-06-28T01:40:56 <p>Mariner Release notes</p> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. azl3 python-pip 24.2-5 on Azure Linux 3.0 azl3 python-pip 24.2-6 on Azure Linux 3.0 azl3 python-pip 24.2-3 on Azure Linux 3.0 azl3 python-pip 24.2-4 on Azure Linux 3.0 azl3 python-pip 24.2-8 on Azure Linux 3.0 azl3 python-pip 24.2-3 on Azure Linux 3.0 azl3 python-pip 24.2-4 on Azure Linux 3.0 azl3 python-pip 24.2-5 on Azure Linux 3.0 azl3 python-pip 24.2-6 on Azure Linux 3.0 azl3 python-pip 24.2-8 on Azure Linux 3.0 azl3 python-pip 24.2-9 on Azure Linux 3.0 easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2013-1633 Improper Input Validation 20617-17084 20965-17084 21480-17084 20043-17084 20561-17084 21381-17084 20617-17084 20965-17084 21480-17084 20043-17084 20561-17084 21381-17084 Moderate 20617-17084 Moderate 20965-17084 Moderate 21480-17084 20043-17084 Moderate 20561-17084 Moderate 21381-17084 4.0 2026-06-28T01:40:56 <p>Information published.</p> 1.0 2025-09-03T21:11:57 <p>Information published.</p> 2.0 2026-03-04T14:36:09 <p>Information published.</p> 3.0 2026-06-03T01:39:48 <p>Information published.</p>