========================================================================== Ubuntu Security Notice USN-8247-1 May 07, 2026 owslib vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: OWSLib could be made to expose sensitive information. Software Description: - owslib: Client library for Open Geospatial (OGC) web services Details: It was discovered that OWSLib did not properly disable entity resolution within its XML parser. An attacker could possibly use this issue to read arbitrary files via a crafted XML payload. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS python3-owslib 0.25.0-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS python3-owslib 0.19.1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS python-owslib 0.16.0-1ubuntu0.1~esm1 Available with Ubuntu Pro python3-owslib 0.16.0-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS python-owslib 0.10.3-1ubuntu0.1~esm1 Available with Ubuntu Pro python3-owslib 0.10.3-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8247-1 CVE-2023-27476
No comments:
Post a Comment