Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2463-1

Опубликовано: 08 июн. 2023
Источник: suse-cvrf

Описание

Security update for python310

This update for python310 fixes the following issues:

  • CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).

Список пакетов

Container bci/python:3
libpython3_10-1_0-3.10.11-150400.4.25.1
python310-3.10.11-150400.4.25.1
python310-base-3.10.11-150400.4.25.1
python310-devel-3.10.11-150400.4.25.1
SUSE Linux Enterprise Module for Python 3 15 SP4
libpython3_10-1_0-3.10.11-150400.4.25.1
python310-3.10.11-150400.4.25.1
python310-base-3.10.11-150400.4.25.1
python310-curses-3.10.11-150400.4.25.1
python310-dbm-3.10.11-150400.4.25.1
python310-devel-3.10.11-150400.4.25.1
python310-idle-3.10.11-150400.4.25.1
python310-tk-3.10.11-150400.4.25.1
python310-tools-3.10.11-150400.4.25.1
openSUSE Leap 15.4
libpython3_10-1_0-3.10.11-150400.4.25.1
libpython3_10-1_0-32bit-3.10.11-150400.4.25.1
python310-3.10.11-150400.4.25.1
python310-32bit-3.10.11-150400.4.25.1
python310-base-3.10.11-150400.4.25.1
python310-base-32bit-3.10.11-150400.4.25.1
python310-curses-3.10.11-150400.4.25.1
python310-dbm-3.10.11-150400.4.25.1
python310-devel-3.10.11-150400.4.25.1
python310-doc-3.10.11-150400.4.25.1
python310-doc-devhelp-3.10.11-150400.4.25.1
python310-idle-3.10.11-150400.4.25.1
python310-testsuite-3.10.11-150400.4.25.1
python310-tk-3.10.11-150400.4.25.1
python310-tools-3.10.11-150400.4.25.1
openSUSE Leap 15.5
libpython3_10-1_0-3.10.11-150400.4.25.1
libpython3_10-1_0-32bit-3.10.11-150400.4.25.1
python310-3.10.11-150400.4.25.1
python310-32bit-3.10.11-150400.4.25.1
python310-base-3.10.11-150400.4.25.1
python310-base-32bit-3.10.11-150400.4.25.1
python310-curses-3.10.11-150400.4.25.1
python310-dbm-3.10.11-150400.4.25.1
python310-devel-3.10.11-150400.4.25.1
python310-doc-3.10.11-150400.4.25.1
python310-doc-devhelp-3.10.11-150400.4.25.1
python310-idle-3.10.11-150400.4.25.1
python310-testsuite-3.10.11-150400.4.25.1
python310-tk-3.10.11-150400.4.25.1
python310-tools-3.10.11-150400.4.25.1

Ссылки

Описание

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Затронутые продукты
Container bci/python:3:libpython3_10-1_0-3.10.11-150400.4.25.1
Container bci/python:3:python310-3.10.11-150400.4.25.1
Container bci/python:3:python310-base-3.10.11-150400.4.25.1
Container bci/python:3:python310-devel-3.10.11-150400.4.25.1
Ссылки
Уязвимость SUSE-SU-2023:2463-1