tocsin

PyPI/celery CVE-2011-4356: unknown, EPSS 0.33%

Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, c

Action: Upgrade celery to 2.2.8 or later.

pip install celery==2.2.8
pip install celery==2.3.4
pip install celery==2.4.4

Affected

introducedfixedlast affected
2.12.2.8-
2.32.3.4-
2.42.4.4-

Fixed versions

2.2.82.3.42.4.4

Sources

CVE-2011-4356 · published · modified · JSON