Описание
Security update for python-joblib
This update for python-joblib fixes the following issues:
- CVE-2022-21797: Fixed arbitrary code execution in joblib (boo#1204232)
Список пакетов
SUSE Package Hub 15 SP3
python3-joblib-0.16.0-bp153.2.3.1
openSUSE Leap 15.3
python3-joblib-0.16.0-bp153.2.3.1
Ссылки
- E-Mail link for openSUSE-SU-2022:10214-1
- SUSE Security Ratings
- SUSE Bug 1204232
- SUSE CVE CVE-2022-21797 page
Описание
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.
Затронутые продукты
SUSE Package Hub 15 SP3:python3-joblib-0.16.0-bp153.2.3.1
openSUSE Leap 15.3:python3-joblib-0.16.0-bp153.2.3.1
Ссылки
- CVE-2022-21797
- SUSE Bug 1204232