Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:3945-1

Опубликовано: 06 дек. 2021
Источник: suse-cvrf

Описание

Security update for python-Babel

This update for python-Babel fixes the following issues:

  • CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768).

Список пакетов

openSUSE Leap 15.3
python-Babel-doc-2.8.0-3.3.1
python2-Babel-2.8.0-3.3.1
python3-Babel-2.8.0-3.3.1
python3-Babel-doc-2.8.0-3.3.1

Ссылки

Описание

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

Затронутые продукты
openSUSE Leap 15.3:python-Babel-doc-2.8.0-3.3.1
openSUSE Leap 15.3:python2-Babel-2.8.0-3.3.1
openSUSE Leap 15.3:python3-Babel-2.8.0-3.3.1
openSUSE Leap 15.3:python3-Babel-doc-2.8.0-3.3.1
Ссылки
Уязвимость openSUSE-SU-2021:3945-1