MGASA-2024-0299

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2024-0299.html
Import Source
https://advisories.mageia.org/MGASA-2024-0299.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0299
Related
Published
2024-09-13T17:15:41Z
Modified
2024-09-13T16:48:58Z
Summary
Updated python-tqdm package fixes security vulnerability
Details

Any optional non-boolean CLI arguments (e.g. --delim, --buf-size, --manpath) are passed through python's eval, allowing arbitrary code execution. This issue is only locally exploitable.

References
Credits

Affected packages