Описание
Security update for python-rpyc
This update for python-rpyc to 4.1.5 fixes the following issues:
Security issue fixed:
- CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987).
Список пакетов
openSUSE Leap 15.1
python2-rpyc-4.1.5-lp151.3.3.1
python3-rpyc-4.1.5-lp151.3.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:0685-1
- SUSE Security Ratings
- SUSE Bug 1152987
- SUSE CVE CVE-2019-16328 page
Описание
In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.
Затронутые продукты
openSUSE Leap 15.1:python2-rpyc-4.1.5-lp151.3.3.1
openSUSE Leap 15.1:python3-rpyc-4.1.5-lp151.3.3.1
Ссылки
- CVE-2019-16328
- SUSE Bug 1152987