[Bug 2052682] New: CVE-2022-24303 python-pillow: temporary directory with a space character allows removal of unrelated file after im.show() and related action
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2052682
Bug ID: 2052682
Summary: CVE-2022-24303 python-pillow: temporary directory with
a space character allows removal of unrelated file
after im.show() and related action
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: bdettelb(a)redhat.com, cstratak(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
infra-sig(a)lists.fedoraproject.org,
manisandro(a)gmail.com, miminar(a)redhat.com,
orion(a)nwra.com, python-maint(a)redhat.com,
python-sig(a)lists.fedoraproject.org, torsava(a)redhat.com
Target Milestone: ---
Classification: Other
If the path to the temporary directory on Linux or macOS contained a space,
this would break removal of the temporary image file after im.show() (and
related actions), and potentially remove an unrelated file. This been present
since PIL.
Reference:
https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2052682
1 year, 10 months
[Bug 2104977] New: Meld couldn't compare files after python was rebased to 3.11.0b3 version
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104977
Bug ID: 2104977
Summary: Meld couldn't compare files after python was rebased
to 3.11.0b3 version
Product: Fedora
Version: rawhide
Status: NEW
Component: meld
Assignee: dmaphy(a)fedoraproject.org
Reporter: mikhail.v.gavrilov(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cwickert(a)fedoraproject.org, dmaphy(a)fedoraproject.org,
epel-packagers-sig(a)lists.fedoraproject.org,
lkundrak(a)v3.sk, michel(a)michel-slm.name,
oliver(a)linux-kernel.at
Target Milestone: ---
Classification: Fedora
Created attachment 1895231
--> https://bugzilla.redhat.com/attachment.cgi?id=1895231&action=edit
meld screenshot
Description of problem:
Meld couldn't compare files after python was rebased to 3.11.0b3 version
When I click on "File+" button in console appears follow trace:
$ meld
Traceback (most recent call last):
File "/usr/lib/python3.11/site-packages/meld/newdifftab.py", line 106, in
on_button_type_toggled
self.diff_type.supports_blank())
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/site-packages/meld/newdifftab.py", line 34, in
supports_blank
return self in (self.File, self.Folder)
^^^^^^^^^
File "/usr/lib64/python3.11/enum.py", line 198, in __get__
raise AttributeError(
^^^^^^^^^^^^^^^^^^^^^
AttributeError: <enum 'DiffType'> member has no attribute 'File'
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104977
1 year, 11 months