1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 5018-1] python-babel security update

    From Moritz Muehlenhoff@21:1/5 to All on Thu Dec 9 20:00:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5018-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : python-babel
    CVE ID : CVE-2021-20095
    Debian Bug : 987824

    It was discovered that missing input sanitising in Babel, a set of
    tools for internationalising Python applications, could result in
    the execution of arbitrary code.

    For the oldstable distribution (buster), this problem has been fixed
    in version 2.6.0+dfsg.1-1+deb10u1.

    We recommend that you upgrade your python-babel packages.

    For the detailed security status of python-babel please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/python-babel

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmGyURIACgkQEMKTtsN8 TjbeRQ//XFLSrcA1nTkUef8sQ8v8c96BuYcXjClFlSL+QhQc9etjhyf2udLYz1Jf gk4l+Yw6Vt8nUOoXV/zS44QWHu3pxHTOkac4w8KtrXSjoDc0zAY+MQVJ/03VsYQD A9n4WTCtkFtVF33C9Q9XPpFPCRDNJgXCgVJX4OYi3uQaPdf0xLmcd0PSUt3C9GAL Z8Tx/CVu7uab+rMmeqL+MKEZ5UnnWIStYW1LzCYaJyZq41znc+bOMTiRwa4Iilw4 9QdkPBXmCCyaYtqQZN+QCC8BK1ShjT2LbUtWrE+ZJONMv5U2wj+/JqgwAauRZtK3 ogthK2yUrpSf1uK0o6SnZK0mWpz4Np3rfX9U4tK3zrNYblNLKFwiPNjBYWWJZFRU KIlZ8mCnZZjLRwxdqJiEPSq5lyLCvum38ruCBfPSSyehf1n41HxNL83HcwNzAdGb y17wQ+nFcTV7UH7MFAFS7Qj6ra7JuKde1i7jW9bXZgMz4VNKzIq6+/uLFvddi0Gs t6//2Iru9Jb+Kgd2QnZnox2J1Rjn2ztiMVYeMkor+AoAWcQIqaPxYEeBPGkih0oI jbtfis5YiNxvKCpIl7SS0mlxAC1dNEtUK+nza42vdrEI9Dhi4iJDonMkFyNlWv8v 4gxJq14GIFLeDfG/MKaQy0j5hSSxh4peg+puXCZgh931eccSUec=
    =EYuL
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)