Security update for python-Babel (important)

openSUSE Security Update: Security update for python-Babel Announcement ID: openSUSE-SU-2021:1553-1 Rating: important References: 1185768 Cross-References: CVE-2021-42771 CVSS scores: CVE-2021-42771 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...

Debian DSA-5018-1 : python-babel - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-5018 advisory. - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code...

[SECURITY] [DSA 5018-1] python-babel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5018-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2021 https://www.debian.org/security/faq -...

DSA-5018-1 python-babel - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2021:3945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : python-Babel (openSUSE-SU-2021:3945-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3945-1 advisory. - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory...

SUSE SLED15 / SLES15 Security Update : python-Babel (SUSE-SU-2021:3945-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3945-1 advisory. - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory...

openSUSE: Security Advisory for python-Babel (openSUSE-SU-2021:3945-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2021:3945-1 Security update for python-Babel

This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution bsc1185768...

OPENSUSE-SU-2021:3945-1 Security update for python-Babel

This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution bsc1185768...

Security update for python-Babel (important)

openSUSE Security Update: Security update for python-Babel Announcement ID: openSUSE-SU-2021:3945-1 Rating: important References: 1185768 Cross-References: CVE-2021-42771 CVSS scores: CVE-2021-42771 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An...

RHEL 8 : babel (RHSA-2021:4201)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4201 advisory. Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR Common Locale Data Repository,...

CentOS 8 : babel (CESA-2021:4201)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4201 advisory. - python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code CVE-2021-42771 Note that Nessus has not tested...

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

CVE-2021-42771

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...

Debian: Security Advisory (DLA-2790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2790-1] python-babel security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2790-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 21, 2021 https://wiki.debian.org/LTS -...

DLA-2790-1 python-babel - security update

Bulletin has no description...

EulerOS 2.0 SP5 : babel (EulerOS-SA-2021-2319)

According to the version of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel,...