Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

trove

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.5PyPIAmendedPublished

    Openstack DBaaS (Trove) Improper Link Resolution Before File Access

    CVE-2015-3156 · GHSA-98c8-36p9-gw66

    Affected
    • PyPI trove < 4.0.0a0
    Fixed in
    4.0.0a0· Vendor fix available
    Issue
    The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::runprepare function in trove/guestagent/strategies/restore/mysqlimpl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysqlimpl.py,MySQLDump::cmd in trove/guestagent/strategies/backup/mysqlimpl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysqlimpl.py, getactualdbstatus function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbaseimpl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka…

    Recommended action: Upgrade to 4.0.0a0 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →