Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1454

Высокий

ALT-PU-2018-1454: package calibre update to version 3.19.0-alt1

Источник
errata.altlinux.org
Дата публикации
20.03.2018
Дата обновления
20.03.2018
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades calibre to version 3.19.0-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2018-1454https://errata.altlinux.org/ALT-PU-2018-1454

Связанные уязвимости

ubuntu логотип

CVE-2018-7889

CVSS3: 7.8
ubuntu
больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

nvd логотип

CVE-2018-7889

CVSS3: 7.8
nvd
больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

debian логотип

CVE-2018-7889

CVSS3: 7.8
debian
больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...

github логотип

GHSA-7hmv-6p8v-7rmw

CVSS3: 7.8
github
больше 4 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.