Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Mageia: 2020-0160 Moderate: Python-nltk Directory Traversal Threat

mageia
Calendar Grey April 5, 2020
Dist Mageia Esm H88
Revised python-nltk modules mitigate a directory traversal vulnerability in Mageia, crucial for user safety effective April 5, 2020.
Updated python-ntlk package fixes security vulnerability: A vulnerability was found in NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to w...

Summary

Updated python-ntlk package fixes security vulnerability:
A vulnerability was found in NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ in an NLTK package (ZIP archive) that is mishandled during extraction (CVE-2019-14751).

References

- https://bugs.mageia.org/show_bug.cgi?id=26403

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZGZSSEJH7RHH3RBUEVWWYT75QU67J7SE/

- https://www.cve.org/CVERecord?id=CVE-2019-14751

Topics%20covered

Topics Covered

security advisory update directory traversal severity moderate Mageia python-nltk

Resolution

SRPMS

- 7/core/python-nltk-3.4.5-1.1.mga7

Publication date: 05 Apr 2020
URL: https://advisories.mageia.org/MGASA-2020-0160.html
Type: security
CVE: CVE-2019-14751

Topics%20covered

Topics Covered

security advisory update directory traversal severity moderate Mageia python-nltk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here