18 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-27476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib'...
[SECURITY] [DLA 3470-1] owslib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3470-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 25, 2023 https://wiki.debian.org/LTS -...
Debian dla-3470 : owslib-doc - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3470 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3470-1 [email protected] https://www.debian.org/lts/security/...
Debian DSA-5426-1 : owslib - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5426 advisory. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib's XML...
FreeBSD : py39-OWSLib -- arbitrary file read vulnerability (e5d117b3-2153-4129-81ed-42b0221afa78)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5d117b3-2153-4129-81ed-42b0221afa78 advisory. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service...
Mageia: Security Advisory (MGASA-2023-0112)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated python-owslib packages fix security vulnerability
XML External Entity XXE Injection CVE-2023-27476...
MGASA-2023-0112 Updated python-owslib packages fix security vulnerability
XML External Entity XXE Injection CVE-2023-27476...
Fedora: Security Advisory for mingw-python-OWSLib (FEDORA-2023-8312a80917)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for mingw-python-OWSLib (FEDORA-2023-ae06b3704c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : mingw-python-OWSLib (2023-8312a80917)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8312a80917 advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 36 : mingw-python-OWSLib (2023-ae06b3704c)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ae06b3704c advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 38 : mingw-python-OWSLib (2023-9a878398a6)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9a878398a6 advisory. Update to OWSLib-0.28.1, fixes CVE-2023-27476. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
ausdex (>=0.2.0 <=0.2.2), geodata-harvester (>=0.0.1 <=0.0.2) +10 more potentially affected by CVE-2023-27476 via owslib (>=0.22.0 <=0.27.2)
owslib PYPI version =0.22.0, =0.2.0, =0.0.1, =0.1.1, =0.7.0, =3.3.3, =0.1.12, =0.2.1, =0.12.0.dev0, =0.1.30, =0.13.2, =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2023-27476 Source advisory: OSV:PYSEC-2023-86...
CVE-2023-27476 XML External Entity (XXE) Injection in OWSLib
OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib's XML parser which supports both lxml and xml.etree does not disable entity resolution, and could lead to arbitrary file reads from an...
CVE-2023-27476
OWSLib (Python) has a vulnerability in its XML parser that does not disable entity resolution, enabling potential arbitrary file reads from attacker-controlled XML payloads across all XML parsing in the codebase. Affected versions prior to 0.28.1; remediation is to upgrade to 0.28.1 or apply the ...
CVE-2023-27476 XML External Entity (XXE) Injection in OWSLib
OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib's XML parser which supports both lxml and xml.etree does not disable entity resolution, and could lead to arbitrary file reads from an...
ausdex (>=0.2.0 <=0.2.2), geodata-harvester (>=0.0.1 <=0.0.2) +10 more potentially affected by CVE-2023-27476 via owslib (>=0.22.0 <=0.27.2)
owslib PYPI version =0.22.0, =0.2.0, =0.0.1, =0.1.1, =0.7.0, =3.3.3, =0.1.12, =0.2.1, =0.12.0.dev0, =0.1.30, =0.13.2, =0.0.1, =0.1.0, =0.1.2 Source cves: CVE-2023-27476 Source advisory: OSV:GHSA-8H9C-R582-MGGC...