exploitDog

ALT-PU-2026-12304

Высокий

ALT-PU-2026-12304: package python3-module-joblib update to version 1.5.3-alt1

Источник

errata.altlinux.org

Дата публикации

06.08.2026

Дата обновления

06.08.2026

Устраненные уязвимости

1

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades python3-module-joblib to version 1.5.3-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2026-12304 https://errata.altlinux.org/ALT-PU-2026-12304

Связанные уязвимости

CVE-2024-34997

CVSS3: 7.5

ubuntu

больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 8.1

redhat

больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 7.5

nvd

больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVE-2024-34997

CVSS3: 7.5

debian

больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerabilit ...

GHSA-rf65-fc2p-2gjv

github

больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().