PyPI/diffoscope CVE-2017-0359: unknown, EPSS 2.25%

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

Action: Upgrade diffoscope to 77 or later.

pip install diffoscope==77

Affected

Fixed versions

Sources

• osv: PYSEC-2018-83
• https://security-tracker.debian.org/tracker/CVE-2017-0359
• https://bugs.debian.org/854723
• https://github.com/advisories/GHSA-8p5c-f328-9fvv

CVE-2017-0359 · published 2018-04-13T16:29:00Z · modified 2023-11-08T03:58:40.368052Z · JSON