Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03038-1

Опубликовано: 01 сент. 2025
Источник: suse-cvrf

Описание

Security update for python-future

This update for python-future fixes the following issues:

  • CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-future-0.18.3-150400.6.6.1
openSUSE Leap 15.6
python311-future-0.18.3-150400.6.6.1

Ссылки

Описание

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-future-0.18.3-150400.6.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-future-0.18.3-150400.6.6.1
Ссылки