PyPI/python-muranoclient CVE-2016-4972: critical 9.8, EPSS 3.19%
OpenStack Murano Code Execution
Action: Upgrade python-muranoclient to 0.7.3 or later.
pip install python-muranoclient==0.7.3pip install python-muranoclient==0.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.3 | - |
| 0.8.0 | 0.8.5 | - |
Fixed versions
| 0.7.3 | 0.8.5 |
Sources
- osv: GHSA-87r7-q54j-f9qg#PyPI/python-muranoclient
- https://nvd.nist.gov/vuln/detail/CVE-2016-4972
- https://github.com/openstack/murano/commit/28de8c36c9dbe4aaf4d062e6fb6099afd437f49b
- https://bugs.launchpad.net/murano/+bug/1586079
- https://bugs.launchpad.net/python-muranoclient/+bug/1586078
- https://github.com/openstack/murano
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/notes/safeloader-cve-2016-4972-19035a2a091ec30a.yaml
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
- https://github.com/pypa/advisory-database/tree/main/vulns/python-muranoclient/PYSEC-2016-22.yaml
- http://www.openwall.com/lists/oss-security/2016/06/23/8
CVE-2016-4972 · published · modified · JSON