Описание
Security update for python-Babel
This update for python-Babel fixes the following issues:
- CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768).
Список пакетов
SUSE Linux Enterprise Module for Public Cloud 12
python-Babel-2.5.3-4.8.1
python3-Babel-2.5.3-4.8.1
Ссылки
- Link for SUSE-SU-2021:4161-1
- E-Mail link for SUSE-SU-2021:4161-1
- SUSE Security Ratings
- SUSE Bug 1185768
- SUSE CVE CVE-2021-42771 page
Описание
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 12:python-Babel-2.5.3-4.8.1
SUSE Linux Enterprise Module for Public Cloud 12:python3-Babel-2.5.3-4.8.1
Ссылки
- CVE-2021-42771
- SUSE Bug 1185768