PyPI/tryton CVE-2022-26661: medium 6.5, EPSS 1.41%
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (pro
Action: Upgrade tryton to 5.0.12 or later.
pip install tryton==5.0.12pip install tryton==6.0.5pip install tryton==6.2.2pip install tryton==6.2.6pip install tryton==6.0.16pip install tryton==5.0.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.2.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 | 6.2.6 | 6.0.16 | 5.0.46 |
Sources
- osv: PYSEC-2022-43170
- https://bugs.tryton.org/issue11219
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26661 · published · modified · JSON