Описание
Security update for python-Babel
This update for python-Babel fixes the following issues:
- CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Список пакетов
openSUSE Leap 15.2
python-Babel-doc-2.8.0-lp152.2.3.1
python2-Babel-2.8.0-lp152.2.3.1
python3-Babel-2.8.0-lp152.2.3.1
python3-Babel-doc-2.8.0-lp152.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2021:1553-1
- SUSE Security Ratings
- SUSE Bug 1185768
- SUSE CVE CVE-2021-42771 page
Описание
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Затронутые продукты
openSUSE Leap 15.2:python-Babel-doc-2.8.0-lp152.2.3.1
openSUSE Leap 15.2:python2-Babel-2.8.0-lp152.2.3.1
openSUSE Leap 15.2:python3-Babel-2.8.0-lp152.2.3.1
openSUSE Leap 15.2:python3-Babel-doc-2.8.0-lp152.2.3.1
Ссылки
- CVE-2021-42771
- SUSE Bug 1185768