Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-7653 →
DEBIAN-CVE-2019-7653
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowin...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
rdflib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-2"}]}]
Debian:13
rdflib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-2"}]}]
Debian:14
rdflib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2-2"}]}]
Références
- advisory security-tracker.debian.org