logilab-common
collection of low-level Python packages and modules used by Logilab projects
Activity
- Latest release
- 1y ago
- Total releases
- 79
- Cadence
- ~2 months
- Last 12 months
- 0
Details
- License
- LGPL-3.0
- First release
- Mar 02, 2009
| Version | Released | |
|---|---|---|
2.1.0
minor
|
2.1.0
minor
Dependencies (4)
|
|
2.0.0
major
|
2.0.0
major
Dependencies (4)
|
|
1.11.0
minor
|
1.11.0
minor
Dependencies (4)
|
|
1.10.0
minor
|
1.10.0
minor
Dependencies (4)
|
|
1.9.8
patch
|
1.9.8
patch
Dependencies (4)
|
|
1.9.7
patch
|
1.9.7
patch
Dependencies (3)
|
|
1.9.6
patch
|
1.9.6
patch
Dependencies (3)
|
|
1.9.5
patch
|
1.9.5
patch
Dependencies (3)
|
|
1.9.4
patch
|
1.9.4
patch
Dependencies (3)
|
|
1.9.3
patch
|
1.9.3
patch
Dependencies (3)
|
|
1.9.2
patch
|
1.9.2
patch
Dependencies (4)
|
|
1.9.1
minor
|
1.9.1
minor
Dependencies (3)
|
|
1.8.3
patch
|
1.8.3
patch
Dependencies (3)
|
|
1.8.2
patch
|
1.8.2
patch
Dependencies (3)
|
|
1.8.1
patch
|
1.8.1
patch
Dependencies (3)
|
|
1.8.0
minor
|
1.8.0
minor
|
|
1.7.3
patch
|
1.7.3
patch
|
|
1.7.2
patch
|
1.7.2
patch
|
|
1.7.1
patch
|
1.7.1
patch
|
|
1.7.0
minor
|
1.7.0
minor
|
|
1.6.4
patch
|
1.6.4
patch
|
|
1.6.3
patch
|
1.6.3
patch
|
|
1.6.2
patch
|
1.6.2
patch
|
|
1.6.1
patch
|
1.6.1
patch
|
|
1.6.0
minor
|
1.6.0
minor
|
|
1.5.2
patch
|
1.5.2
patch
|
|
1.5.1
patch
|
1.5.1
patch
|
|
1.5.0
minor
|
1.5.0
minor
|
|
1.4.4
patch
|
1.4.4
patch
|
|
1.4.3
patch
|
1.4.3
patch
|
|
1.4.2
patch
|
1.4.2
patch
|
|
1.4.1
patch
|
1.4.1
patch
|
|
1.4.0
minor
|
1.4.0
minor
|
|
1.3.0
minor
|
1.3.0
minor
|
|
1.2.2
patch
|
1.2.2
patch
|
|
1.2.1
patch
|
1.2.1
patch
|
|
1.2.0
minor
|
1.2.0
minor
|
|
1.1.0
minor
|
1.1.0
minor
|
|
1.0.2
patch
|
1.0.2
patch
|
|
1.0.1
patch
|
1.0.1
patch
|
|
1.0.0
major
|
1.0.0
major
|
|
0.63.2
patch
|
0.63.2
patch
|
|
0.63.1
patch
|
0.63.1
patch
|
|
0.63.0
minor
|
0.63.0
minor
|
|
0.62.1
patch
|
0.62.1
patch
|
|
0.62.0
minor
|
0.62.0
minor
|
|
0.61.0
minor
|
0.61.0
minor
|
|
0.60.1
patch
2 CVEs
CVE-2014-1839
GHSA-g5m2-22h2-rr3j
PYSEC-2014-84
May 14, 2022
Creation of Temporary File With Insecure Permissions in logilab-commons
Medium
Network
Low
None
None
The Execute class in shellutils in logilab-common before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev
CVE-2014-1838
GHSA-rr52-wg7f-8875
PYSEC-2014-83
May 14, 2022
Improper Link Resolution Before File Access in logilab-commons
High
Network
Low
None
None
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-common before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev |
0.60.1
patch
|
|
0.60.0
minor
2 CVEs
CVE-2014-1839
GHSA-g5m2-22h2-rr3j
PYSEC-2014-84
May 14, 2022
Creation of Temporary File With Insecure Permissions in logilab-commons
Medium
Network
Low
None
None
The Execute class in shellutils in logilab-common before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev
CVE-2014-1838
GHSA-rr52-wg7f-8875
PYSEC-2014-83
May 14, 2022
Improper Link Resolution Before File Access in logilab-commons
High
Network
Low
None
None
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-common before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev |
0.60.0
minor
|
|
0.59.1
patch
2 CVEs
CVE-2014-1839
GHSA-g5m2-22h2-rr3j
PYSEC-2014-84
May 14, 2022
Creation of Temporary File With Insecure Permissions in logilab-commons
Medium
Network
Low
None
None
The Execute class in shellutils in logilab-common before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev
CVE-2014-1838
GHSA-rr52-wg7f-8875
PYSEC-2014-83
May 14, 2022
Improper Link Resolution Before File Access in logilab-commons
High
Network
Low
None
None
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-common before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf. Affected versions
0.28.1
0.38.0
0.38.1
0.39.0
0.43.0
0.44.0
0.46.0
0.46.1
0.47.0
0.48.1
0.49.0
0.50.0
+ 22 more Show less
0.50.1
0.50.2
0.50.3
0.51.0
0.51.1
0.52.0
0.52.1
0.53.0
0.54.0
0.55.0
0.55.2
0.56.0
0.56.1
0.56.2
0.57.0
0.57.1
0.58.1
0.58.3
0.59.0
0.59.1
0.60.0
0.60.1
Fixed in
0.61.0
References
Updated Sep 30, 2024 · Source: OSV.dev |
0.59.1
patch
|