Lucene search

K
osvGoogleOSV:OPENSUSE-SU-2024:0214-1
HistoryJul 23, 2024 - 9:17 a.m.

Security update for python-sentry-sdk

2024-07-2309:17:13
Google
osv.dev

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

This update for python-sentry-sdk fixes the following issues:

  • CVE-2024-40647: Do not leak environment variables to child processes. (bsc#1228128)

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

7.1

Confidence

Low