Bug 907929 (CVE-2023-29159)

Summary:	<dev-python/starlette-0.27.0: local file inclusion vulnerability
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	mgorny, python
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B4 [glsa?]
Package list:		Runtime testing required:	---
Bug Depends on:	907936
Bug Blocks:

Description John Helmert III archtester

2023-06-06 04:07:07 UTC

CVE-2023-29159 (https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px):

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.

Please stabilize 0.27.0.

Comment 1 Michał Górny archtester

2023-06-06 07:44:45 UTC

cleanup done

Comment 2 John Helmert III archtester

2023-06-12 04:27:11 UTC

Thanks!