Описание
Security update for python-codecov
This update for python-codecov fixes the following issues:
- CVE-2019-10800: Fixed sanitization of gcov arguments before being being provided to the popen method (bsc#1201494).
Список пакетов
openSUSE Leap 15.3
python2-codecov-2.0.15-150100.3.3.1
python3-codecov-2.0.15-150100.3.3.1
openSUSE Leap 15.4
python3-codecov-2.0.15-150100.3.3.1
Ссылки
- Link for SUSE-SU-2022:2752-1
- E-Mail link for SUSE-SU-2022:2752-1
- SUSE Security Ratings
- SUSE Bug 1201494
- SUSE CVE CVE-2019-10800 page
Описание
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
Затронутые продукты
openSUSE Leap 15.3:python2-codecov-2.0.15-150100.3.3.1
openSUSE Leap 15.3:python3-codecov-2.0.15-150100.3.3.1
openSUSE Leap 15.4:python3-codecov-2.0.15-150100.3.3.1
Ссылки
- CVE-2019-10800
- SUSE Bug 1201494