PyPI/patchelf CVE-2022-44940: critical 9.1, EPSS 1.09%

Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.

Action: Upgrade patchelf to 0.16.1.0 or later.

pip install patchelf==0.16.1.0

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43144
• https://github.com/NixOS/patchelf/pull/419

CVE-2022-44940 · published 2022-12-19T22:15:00Z · modified 2024-11-25T22:42:12.915518Z · JSON