Summary
Gabriel Corona discovered that RDFLib did not properly load modules on the
command-line. An attacker could possibly use this issue to cause RDFLib to
execute arbitrary code. (CVE-2019-7653)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | rdflib | 4.1.2-3+deb8u1build0.16.04.1 |
Vulnerabilities 1
-
Unscored —
The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the cur…
References
-
report
https://ubuntu.com/security/CVE-2019-7653