Overview

Request 1174110 superseded

This shouldn't be submitted to Factory. python3-tqdm is Python
3.6-only version and this is just patched version to avoid
CVE. The version synced with Factory is python-tqdm (sr#1173918).

- Add CVE-2024-34062-CLI-injection.patch to fix bsc#1223880
(CVE-2024-34062) improving eval safety of CLI to avoid the
injection attack

Request History
Matej Cepl's avatar

mcepl created request

This shouldn't be submitted to Factory. python3-tqdm is Python
3.6-only version and this is just patched version to avoid
CVE. The version synced with Factory is python-tqdm (sr#1173918).

- Add CVE-2024-34062-CLI-injection.patch to fix bsc#1223880
(CVE-2024-34062) improving eval safety of CLI to avoid the
injection attack


Factory Auto's avatar

factory-auto declined review

Per our development policy, please submit to openSUSE:Factory first.


Factory Auto's avatar

factory-auto declined request

Per our development policy, please submit to openSUSE:Factory first.


Matej Cepl's avatar

mcepl reopened request

Reopening per @DimStar request.


Saul Goodman's avatar

licensedigger accepted review

ok


Factory Auto's avatar

factory-auto declined review

Source and target package names must match


Factory Auto's avatar

factory-auto declined request

Source and target package names must match


openSUSE Build Service is sponsored by