Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-1361

Высокий

ALT-PU-2024-1361: package python3-module-celery update to version 5.3.4-alt1

Источник
errata.altlinux.org
Дата публикации
02.02.2024
Дата обновления
02.02.2024
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades python3-module-celery to version 5.3.4-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

CVSS3: 8
redhat
почти 5 лет назад

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

CVSS3: 7.5
nvd
почти 5 лет назад

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

CVSS3: 7.5
debian
почти 5 лет назад

This affects the package celery before 5.2.2. It by default trusts the ...

CVSS3: 7.5
github
почти 5 лет назад

OS Command Injection in celery