Debian/s3ql: unknown
S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
Action: Upgrade s3ql to 2.10.1+dfsg-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.1+dfsg-4 | - |
Fixed versions
| 2.10.1+dfsg-4 |
Sources
published · modified · JSON