SUSE-SU-2023:2473-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall bsc1203750. - Fixed unittest.mock.patch.dict returns function when applied to coroutines bsc1211158...

Path Traversal

GuardDog is vulnerable to path traversal. The vulnerability exists due to the unsafe extraction using the tarfile.TarFile.extractall functionality in the scanlocal function of packagescanner.py, which allows an attacker to write arbitrary files outside the destination directory through a maliciou...