Stay Secure with the Latest Linux Advisories

security advisoryFedoracommand execution

Fedora 26: python-tablib Security Update - Command Execution Risk

Latest upstream, including the `yaml.safe_load` fix for CVE-2017-2810.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-dd0d5d376f 2017-08-22 03:34:10.188831 --------------------------------------------------------------------------------Name : python-tablib Product : Fedora 26 Version : 0.11.5 Release : 1.fc26 URL : https://github.com/kennethreitz/tablib Summary : Format agnostic tabular data library (XLS, JSON, YAML, CSV) Description : Tablib is a format-agnostic tabular dataset library, written in Python. Output formats supported: - Excel (Sets + Books) - JSON (Sets + Books) - YAML (Sets + Books) - HTML (Sets) - TSV (Sets) - CSV (Sets) --------------------------------------------------------------------------------Update Information: Latest upstream, including the `yaml.safe_load` fix for CVE-2017-2810. --------------------------------------------------------------------------------References: [ 1 ] Bug #1461299 - CVE-2017-2810 python-tablib: Databook loading functionality allows command execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1461299 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-tablib' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora system alert regardingpython-tablib update, resolved a command execution vulnerability associated with the use of yaml.safe_load.. Fedora Security Update, Python Tablib Fix, Data Processing Update. . Severity: Critical. LinuxSecurity.com Team

Aug 22, 2017 •Critical Fedora