PyPI/attic CVE-2015-4082: medium 6.5, EPSS 2.49%

attic has improper verification of unencrypted backups

Action: Upgrade attic to 0.15 or later.

pip install attic==0.15

Affected

Fixed versions

Sources

• osv: GHSA-5x6q-ffwj-8vcf
• https://nvd.nist.gov/vuln/detail/CVE-2015-4082
• https://github.com/jborg/attic/issues/271
• https://github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072
• https://github.com/jborg/attic
• https://github.com/pypa/advisory-database/tree/main/vulns/attic/PYSEC-2017-6.yaml
• https://web.archive.org/web/20200517225455/http://www.securityfocus.com/bid/74821
• http://www.openwall.com/lists/oss-security/2015/05/31/3
• http://www.securityfocus.com/bid/74821

CVE-2015-4082 · published 2022-05-17T01:57:32Z · modified 2024-12-04T05:38:33.068973Z · JSON