Stay Secure with the Latest Linux Advisories

security advisorycode executiondebian

Debian: DSA-5763-1 Low: Pymatgen Code Execution Risk Detected

William Khem-Marquez discovered that Pymatgen, a Python library for materials analysis, could be tricked into running arbitrary code if a malformed CIF file is processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5763-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : pymatgen CVE ID : CVE-2024-23346 William Khem-Marquez discovered that Pymatgen, a Python library for materials analysis, could be tricked into running arbitrary code if a malformed CIF file is processed. For the stable distribution (bookworm), this problem has been fixed in version 2022.11.7+dfsg1-11+deb12u1. We recommend that you upgrade your pymatgen packages. For the detailed security status of pymatgen please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/pymatgen Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian security team has released advisory DSA-5764-1 concerning vulnerabilities in numpy, which could lead to remote code execution due to improper file management.. Pymatgen Updates, Debian Security Advisory, Code Execution Risk, Python Library Security. . Severity: Low. LinuxSecurity.com Team

Aug 30, 2024 •Low Debian