Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-7648

Критический

ALT-PU-2022-7648: package python3-module-ruamel-yaml update to version 0.17.21-alt1

Источник
errata.altlinux.org
Дата публикации
08.04.2024
Дата обновления
08.04.2024
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades python3-module-ruamel-yaml to version 0.17.21-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
redhat
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
nvd
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
debian
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code exec ...

github
больше 4 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.