rpm package
opensuse/python-logilab-common&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/python-logilab-common&distro=openSUSE%20Tumbleweed
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2014-1839 | — | < 1.11.0-1.5 | 1.11.0-1.5 | Mar 11, 2014 | The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. | ||
| CVE-2014-1838 | — | < 1.11.0-1.5 | 1.11.0-1.5 | Mar 11, 2014 | The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. |
- CVE-2014-1839Mar 11, 2014affected < 1.11.0-1.5fixed 1.11.0-1.5
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
- CVE-2014-1838Mar 11, 2014affected < 1.11.0-1.5fixed 1.11.0-1.5
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.