Medium ELSA-2020-3944 1 CVE

Moderate: unoconv security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[0.6-8]
- Resolves: rhbz#1803831 CVE-2019-17400

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	unoconv	0:0.6-8.el7

Vulnerabilities 1

High 7.5

CVE-2019-17400

Server-Side Request Forgery in unoconv

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

unoconv unoconv unoconv Debian Ubuntu PyPI

Oct 21, 2019