Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-6114

Критический

ALT-PU-2023-6114: package python3-module-ruamel-yaml update to version 0.17.21-alt2

Источник
errata.altlinux.org
Дата публикации
11.10.2023
Дата обновления
08.04.2024
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python3-module-ruamel-yaml to version 0.17.21-alt2.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
redhat
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
nvd
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.

CVSS3: 9.8
debian
больше 6 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code exec ...

github
больше 4 лет назад

In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.