Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 16.04 LTS: USN-4535-1 High: RDFLib Arbitrary Code Execution

ubuntu
Calendar Grey September 23, 2020
Dist Ubuntu Esm H88
Ubuntu version 4535-1 addresses critical RDFLib vulnerabilities that pose risks of code execution, bolstering overall system security.
RDFLib could be made to made to execute arbitrary code if it were running in a directory with a specially crafted file.

Summary

RDFLib could be made to made to execute arbitrary code if it were running

in a directory with a specially crafted file.

Software Description:

- rdflib: Pure Python package for working with RDF

Details:

Gabriel Corona discovered that RDFLib did not properly load modules on the

command-line. An attacker could possibly use this issue to cause RDFLib to

execute arbitrary code. (CVE-2019-7653)

Topics%20covered

Topics Covered

security advisory code execution Ubuntu arbitrary code RDFLib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  python-rdflib                   4.1.2-3+deb8u1build0.16.04.1
  python-rdflib-tools             4.1.2-3+deb8u1build0.16.04.1
  python3-rdflib                  4.1.2-3+deb8u1build0.16.04.1

After a standard system update you need to restart any applications that
make use of RDFLib to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4535-1

CVE-2019-7653

Severity
critical
Lowest
Low
Medium
High
Critical

September 23, 2020

Topics%20covered

Topics Covered

security advisory code execution Ubuntu arbitrary code RDFLib

Package Information

https://launchpad.net/ubuntu/+source/rdflib/4.1.2-3+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here