Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.11-testUpgrade python39-attrsUpgrade python38-psycopg2Upgrade python3-tkinterUpgrade python39-pluggyUpgrade python39-testUpgrade python38Upgrade python3-develUpgrade python38-idleUpgrade python39-psycopg2-testsUpgrade python39-tomlUpgrade python38-pyUpgrade python39-debugUpgrade python39-lxmlUpgrade python39-pytestUpgrade python3.11Upgrade python38-pysocksUpgrade python38-wcwidthUpgrade python39-packagingUpgrade python39-libsUpgrade platform-python-debugUpgrade platform-python-develUpgrade python3-pip-wheelUpgrade python39-setuptoolsUpgrade python39-wheelUpgrade python38-PyMySQLUpgrade python3-libsUpgrade python39-numpy-f2pyUpgrade python3.11-libsUpgrade python38-urllib3Upgrade python39-numpy-docUpgrade python38-pyyamlUpgrade python39-tkinterUpgrade python3.11-develUpgrade python38-numpy-f2pyUpgrade python39-wheel-wheelUpgrade python3.11-pip-wheelUpgrade python38-develUpgrade python39-iniconfigUpgrade python38-lxmlUpgrade python3-idleUpgrade platform-pythonUpgrade python38-sixUpgrade python39-PyMySQLUpgrade python3.11-tkinterUpgrade python39-more-itertoolsUpgrade python38-scipyUpgrade python38-atomicwritesUpgrade python3.11-pipUpgrade python39-plyUpgrade python38-wheelUpgrade python38-CythonUpgrade python38-cryptographyUpgrade python-unversioned-commandUpgrade python39-pyUpgrade python38-pip-wheelUpgrade python39-develUpgrade python38-pyparsingUpgrade python3-pipUpgrade python39-pybind11Upgrade python39-wcwidthUpgrade python38-mod_wsgiUpgrade python38-markupsafeUpgrade python39-requestsUpgrade python3.11-debugUpgrade python38-setuptoolsUpgrade python38-attrsUpgrade python39-pipUpgrade python39-pyyamlUpgrade python38-psycopg2-testsUpgrade python38-chardetUpgrade python38-rpm-macrosUpgrade python39-pycparserUpgrade python39-sixUpgrade python39-pybind11-develUpgrade python38-jinja2Upgrade python39-idleUpgrade python39-pyparsingUpgrade python38-requestsUpgrade python38-tkinterUpgrade python38-pluggyUpgrade python38-testUpgrade python39-setuptools-wheelUpgrade python38-babelUpgrade python39-numpyUpgrade python39-psutilUpgrade python38-psutilUpgrade python39Upgrade python38-cffiUpgrade python38-asn1cryptoUpgrade python39-rpm-macrosUpgrade python39-chardetUpgrade python39-CythonUpgrade python38-numpy-docUpgrade python39-psycopg2-docUpgrade python38-debugUpgrade python3-testUpgrade python38-psycopg2-docUpgrade python38-idnaUpgrade python38-plyUpgrade python39-cffiUpgrade python38-setuptools-wheelUpgrade python39-pysocksUpgrade python39-urllib3Upgrade python38-packagingUpgrade python38-pytestUpgrade python3-debugUpgrade python38-numpyUpgrade python3Upgrade python38-pipUpgrade python38-pycparserUpgrade python39-psycopg2Upgrade python39-scipyUpgrade python38-libsUpgrade platform-python-pipUpgrade python39-mod_wsgiUpgrade python39-idnaUpgrade python39-pip-wheelUpgrade python38-pytzUpgrade python39-cryptographyUpgrade python3.11-idleUpgrade python3.11-rpm-macrosUpgrade python38-wheel-wheelUpgrade python38-more-itertools | Nov 16, 2023 | Aug 28, 2007 |
| Amazon Linux Ami 2 | — | Upgrade python3-libsUpgrade python38-develUpgrade pythonUpgrade python-debugUpgrade python3-debuginfoUpgrade python38-pipUpgrade python38-tkinterUpgrade python3-develUpgrade python38-debuginfoUpgrade python38-debugUpgrade python38-toolsUpgrade python3-tkinterUpgrade python38Upgrade python-pip-wheelUpgrade python38-libsUpgrade python-testUpgrade python-develUpgrade tkinterUpgrade python-libsUpgrade python3-pipUpgrade python2-pipUpgrade python38-testUpgrade python3-toolsUpgrade python3-testUpgrade python3Upgrade python3-debugUpgrade python-debuginfoUpgrade python-tools | Nov 14, 2024 | Aug 28, 2007 |
| Amazon_linux_2023 | — | Upgrade python3.11Upgrade python3.11-tkinterUpgrade python3.9-debugsourceUpgrade python3.11-debugUpgrade python3-pipUpgrade python3-develUpgrade python3.11-testUpgrade python3-debugUpgrade python3-libsUpgrade python3.11-develUpgrade python3-idleUpgrade python3.9-debuginfoUpgrade python3-pip-wheelUpgrade python3-tkinterUpgrade python3.11-pipUpgrade python3.11-pip-wheelUpgrade python3.11-libsUpgrade python-unversioned-commandUpgrade python3.11-debuginfoUpgrade python3.11-idleUpgrade python3Upgrade python3.11-debugsourceUpgrade python3-test | Mar 10, 2025 | Aug 24, 2007 |
| Centos_linux | — | Upgrade python39-requestsUpgrade python38-wheel-wheelUpgrade python38-babelUpgrade python3Upgrade python39-scipy-debuginfoUpgrade python38-numpy-debuginfoUpgrade python38-testUpgrade python3.11-develUpgrade python38-CythonUpgrade python39-psycopg2-debuginfoUpgrade python3-tkinterUpgrade python-markupsafe-debugsourceUpgrade python38-tkinterUpgrade python39-numpy-docUpgrade python39-tomlUpgrade python38-asn1cryptoUpgrade python38-PyMySQLUpgrade python38-psutilUpgrade python39-numpy-debuginfoUpgrade python-psutil-debugsourceUpgrade python3.11-debuginfoUpgrade python38-numpyUpgrade python38-lxml-debuginfoUpgrade python39-idnaUpgrade python39-idleUpgrade python38-psycopg2-docUpgrade python38-psutil-debuginfoUpgrade python3-idleUpgrade platform-python-pipUpgrade python39-cryptographyUpgrade python38-scipy-debuginfoUpgrade python38-markupsafeUpgrade python38-libsUpgrade python38-plyUpgrade python39-lxmlUpgrade python3-testUpgrade python39-tkinterUpgrade python39-scipyUpgrade python38-cryptographyUpgrade python39-pyyamlUpgrade python39-psycopg2Upgrade python39-setuptools-wheelUpgrade python39-psycopg2-testsUpgrade python39-sixUpgrade python-lxml-debugsourceUpgrade python39-numpy-f2pyUpgrade python3.11-libsUpgrade python3.11-debugsourceUpgrade python38-numpy-f2pyUpgrade python38-pysocksUpgrade python39-pip-wheelUpgrade python38-psycopg2-debuginfoUpgrade python-unversioned-commandUpgrade python3.9-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python38-setuptools-wheelUpgrade python38-psycopg2-testsUpgrade python38-cffi-debuginfoUpgrade python38-cffiUpgrade python39-psycopg2-docUpgrade python38-pytzUpgrade python3.11Upgrade python38-debugUpgrade python38-cryptography-debuginfoUpgrade python38-urllib3Upgrade python39-psutilUpgrade python39-PyMySQLUpgrade scipy-debugsourceUpgrade python39-plyUpgrade python3-debugsourceUpgrade python38-pyyaml-debuginfoUpgrade python38-idnaUpgrade python38-scipyUpgrade python39-numpyUpgrade python38-pyyamlUpgrade python38Upgrade python38-jinja2Upgrade python39-urllib3Upgrade python38-pip-wheelUpgrade python39-cffi-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python38-numpy-docUpgrade python39Upgrade python38-wheelUpgrade platform-pythonUpgrade python39-lxml-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-idleUpgrade python39-libsUpgrade python3.11-pipUpgrade python39-psutil-debuginfoUpgrade python3-pip-wheelUpgrade python39-mod_wsgiUpgrade python38-sixUpgrade python3.9-debuginfoUpgrade python39-pycparserUpgrade python38-pipUpgrade Cython-debugsourceUpgrade python39-develUpgrade python39-cryptography-debuginfoUpgrade python38-requestsUpgrade python38-debugsourceUpgrade python39-rpm-macrosUpgrade python39-wheel-wheelUpgrade python3-pipUpgrade python39-testUpgrade python39-cffiUpgrade python38-mod_wsgiUpgrade platform-python-debugUpgrade python39-pipUpgrade python38-pycparserUpgrade python39-debuginfoUpgrade python39-debugsourceUpgrade python-cffi-debugsourceUpgrade python38-develUpgrade platform-python-develUpgrade python3-libsUpgrade python39-setuptoolsUpgrade python39-chardetUpgrade python38-psycopg2Upgrade python38-setuptoolsUpgrade python39-pysocksUpgrade python3-debuginfoUpgrade python3.11-rpm-macrosUpgrade python-psycopg2-debugsourceUpgrade python3-develUpgrade python3.11-pip-wheelUpgrade python39-wheelUpgrade python38-lxmlUpgrade python-cryptography-debugsourceUpgrade python38-chardetUpgrade python38-rpm-macrosUpgrade python38-Cython-debuginfoUpgrade python38-debuginfoUpgrade numpy-debugsourceUpgrade python3.11-tkinter | Nov 8, 2023 | Aug 28, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 28, 2007 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3Upgrade python3-unversioned-command | Jan 10, 2024 | Aug 28, 2007 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Oct 24, 2025 | Mar 20, 2007 |
| Oracle_linux | — | Upgrade python38-atomicwritesUpgrade python39-pyUpgrade python38-psycopg2-docUpgrade python38-idleUpgrade python3.11-libsUpgrade python38-pip-wheelUpgrade python3-tkinterUpgrade platform-pythonUpgrade python38-PyMySQLUpgrade python39-numpy-docUpgrade python38-markupsafeUpgrade python38-wheelUpgrade python39-wcwidthUpgrade python39-more-itertoolsUpgrade python39-pybind11Upgrade python39-iniconfigUpgrade python3-develUpgrade python38-numpy-f2pyUpgrade python39-PyMySQLUpgrade python39-requestsUpgrade python39-libsUpgrade python-unversioned-commandUpgrade python39-psycopg2-testsUpgrade python3.11-tkinterUpgrade python38-cryptographyUpgrade python39-tkinterUpgrade python39-packagingUpgrade python3-idleUpgrade python39-lxmlUpgrade python3-libsUpgrade python3.11Upgrade python3.11-debugUpgrade platform-python-develUpgrade python38-scipyUpgrade python38-pysocksUpgrade python3.11-testUpgrade python38-attrsUpgrade python38-wcwidthUpgrade python39-testUpgrade python39-numpy-f2pyUpgrade python38Upgrade python38-mod_wsgiUpgrade python38-pyparsingUpgrade python38-numpyUpgrade python39-attrsUpgrade python39-wheel-wheelUpgrade python38-lxmlUpgrade python39-plyUpgrade platform-python-debugUpgrade python39-develUpgrade python39-scipyUpgrade python39-rpm-macrosUpgrade python39-numpyUpgrade python38-setuptoolsUpgrade python38-pyUpgrade python3-pipUpgrade python39-pluggyUpgrade python39-CythonUpgrade python3-pip-wheelUpgrade python39-debugUpgrade python38-pyyamlUpgrade python39-pybind11-develUpgrade python38-babelUpgrade python38-libsUpgrade python3.11-pipUpgrade python38-urllib3Upgrade python39-tomlUpgrade python39-psycopg2-docUpgrade python38-pytestUpgrade python39-sixUpgrade python39-idleUpgrade python38-wheel-wheelUpgrade python38-CythonUpgrade python39-setuptoolsUpgrade python38-sixUpgrade python39-chardetUpgrade python38-pytzUpgrade python3.11-idleUpgrade python38-cffiUpgrade python38-debugUpgrade python39-psycopg2Upgrade python3-debugUpgrade python38-psycopg2-testsUpgrade python39-wheelUpgrade python39-urllib3Upgrade python38-psutilUpgrade python38-packagingUpgrade python38-tkinterUpgrade python38-plyUpgrade python38-pluggyUpgrade python3-testUpgrade python38-asn1cryptoUpgrade python3Upgrade python39-mod_wsgiUpgrade python39-idnaUpgrade python38-numpy-docUpgrade python38-testUpgrade python39-pycparserUpgrade python38-rpm-macrosUpgrade python39-pysocksUpgrade python39-pytestUpgrade python39-cryptographyUpgrade python39-setuptools-wheelUpgrade python3.11-pip-wheelUpgrade python38-psycopg2Upgrade python3.11-develUpgrade python38-chardetUpgrade python39-pipUpgrade python3.11-rpm-macrosUpgrade python38-pipUpgrade python38-pycparserUpgrade python38-more-itertoolsUpgrade python39-pip-wheelUpgrade python38-develUpgrade python38-jinja2Upgrade python38-requestsUpgrade python39-cffiUpgrade python38-idnaUpgrade python39-pyparsingUpgrade python39-pyyamlUpgrade python39Upgrade python38-setuptools-wheelUpgrade platform-python-pipUpgrade python39-psutil | Nov 16, 2023 | Aug 24, 2007 |
| Redhat_linux | — | Upgrade python3-tkinterUpgrade python38-psycopg2-debuginfoUpgrade python3.11-debugsourceUpgrade python39-sixUpgrade python39-packagingUpgrade python-psycopg2-debugsourceUpgrade python3-idleUpgrade python38-babelUpgrade python38-cffi-debuginfoUpgrade python3Upgrade python39-plyUpgrade python3.9-debuginfoUpgrade python3-libsUpgrade python39-scipyUpgrade python38-cryptographyUpgrade python39-pytestUpgrade python3.11-debuginfoUpgrade python39-cryptographyUpgrade python39-iniconfigUpgrade python39-setuptools-wheelUpgrade python38-jinja2Upgrade python39-pyyamlUpgrade python3.11-idleUpgrade python38-attrsUpgrade python39-lxmlUpgrade python38-scipy-debuginfoUpgrade python3-develUpgrade python38-testUpgrade python38-debugsourceUpgrade python39-CythonUpgrade python38-pyyamlUpgrade python39-urllib3Upgrade python39-pycparserUpgrade python38-pytzUpgrade python38-more-itertoolsUpgrade python38-asn1cryptoUpgrade scipy-debugsourceUpgrade python38-tkinterUpgrade python38-plyUpgrade python39-pysocksNo solution existsUpgrade python38-chardetUpgrade python3-debugUpgrade python39-rpm-macrosUpgrade python38-rpm-macrosUpgrade python39-idnaUpgrade python38-wheel-wheelUpgrade python38-mod_wsgiUpgrade python3-debugsourceUpgrade python38-pytestUpgrade python38-setuptoolsUpgrade platform-python-pipUpgrade python38-requestsUpgrade python38-setuptools-wheelUpgrade python38-pyyaml-debuginfoUpgrade python39-pyUpgrade platform-python-develUpgrade python39-tomlUpgrade python39-numpy-f2pyUpgrade python39-numpyUpgrade python38-debugUpgrade python38Upgrade platform-python-debugUpgrade python3.11-libsUpgrade python39-pybind11-develUpgrade python3.11-debugUpgrade python38-urllib3Upgrade python39-chardetUpgrade python3-debuginfoUpgrade python39-setuptoolsUpgrade python38-wcwidthUpgrade Cython-debugsourceUpgrade python38-psutilUpgrade python39-pyparsingUpgrade python38-numpyUpgrade python3.11-develUpgrade python38-psycopg2Upgrade python38-lxmlUpgrade python39-wcwidthUpgrade python38-cryptography-debuginfoUpgrade python38-idnaUpgrade python38-cffiUpgrade python39-pip-wheelUpgrade python-cffi-debugsourceUpgrade python38-atomicwritesUpgrade python38-develUpgrade python39-PyMySQLUpgrade python39-Cython-debuginfoUpgrade python38-libsUpgrade python39-numpy-docUpgrade python39-psycopg2-testsUpgrade python39-wheelUpgrade python-lxml-debugsourceUpgrade python38-wheelUpgrade python-psutil-debugsourceUpgrade python39-pipUpgrade python39-testUpgrade python38-psutil-debuginfoUpgrade python3-pipUpgrade python3.11Upgrade python38-pyUpgrade python38-CythonUpgrade python39-psycopg2-debuginfoUpgrade python39-psutil-debuginfoUpgrade python39-develUpgrade python38-pluggyUpgrade python38-pip-wheelUpgrade python39-psycopg2Upgrade python39-attrsUpgrade python38-markupsafe-debuginfoUpgrade python39-numpy-debuginfoUpgrade python3.11-rpm-macrosUpgrade python39-more-itertoolsUpgrade python-markupsafe-debugsourceUpgrade python38-psycopg2-testsUpgrade python-unversioned-commandUpgrade python38-sixUpgrade numpy-debugsourceUpgrade python-cryptography-debugsourceUpgrade python38-numpy-f2pyUpgrade python39-libsUpgrade python38-Cython-debuginfoUpgrade python39-cryptography-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python39-cffiUpgrade python39-cffi-debuginfoUpgrade python3-testUpgrade python39-pybind11Upgrade python39-debuginfoUpgrade python39-requestsUpgrade python38-packagingUpgrade python39-wheel-wheelUpgrade python38-markupsafeUpgrade python38-numpy-docUpgrade python38-pipUpgrade python38-lxml-debuginfoUpgrade python38-pyparsingUpgrade python39Upgrade python38-PyMySQLUpgrade python39-idleUpgrade python39-tkinterUpgrade platform-pythonUpgrade python3.11-pipUpgrade python3.11-pip-wheelUpgrade python38-numpy-debuginfoUpgrade python3.11-tkinterUpgrade python3-pip-wheelUpgrade python39-psutilUpgrade python38-debuginfoUpgrade python38-idleUpgrade python39-pluggyUpgrade python3.9-debugsourceUpgrade python38-psycopg2-docUpgrade python39-mod_wsgiUpgrade python3.11-testUpgrade python39-debugsourceUpgrade PyYAML-debugsourceUpgrade python39-debugUpgrade python38-scipyUpgrade python38-pysocksUpgrade python38-pycparserUpgrade python39-scipy-debuginfoUpgrade python39-lxml-debuginfoUpgrade python39-psycopg2-doc | Nov 8, 2023 | Aug 28, 2007 |
| Rocky_linux | — | Upgrade python39-mod_wsgiUpgrade python38-markupsafe-debuginfoUpgrade python38-testUpgrade python39-CythonUpgrade python38-psycopg2-testsUpgrade python38-Cython-debuginfoUpgrade python38-scipyUpgrade python38-cffiUpgrade python38-CythonUpgrade python39-numpy-debuginfoUpgrade python39-cffi-debuginfoUpgrade python39-psutil-debuginfoUpgrade python-cffi-debugsourceUpgrade python38-lxml-debuginfoUpgrade python-psutil-debugsourceUpgrade python38-cryptography-debuginfoUpgrade python39-pyyaml-debuginfoUpgrade python38Upgrade python39-Cython-debuginfoUpgrade python39-psutilUpgrade python39-scipy-debuginfoUpgrade numpy-debugsourceUpgrade python38-markupsafeUpgrade python38-pyyaml-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-debugUpgrade python39-numpyUpgrade python38-psutilUpgrade python38-numpy-debuginfoUpgrade python38-numpy-f2pyUpgrade python38-debuginfoUpgrade python39-pybind11Upgrade python39-pybind11-develUpgrade python38-scipy-debuginfoUpgrade scipy-debugsourceUpgrade python38-develUpgrade python38-cffi-debuginfoUpgrade python38-psycopg2-docUpgrade python38-psycopg2Upgrade python-markupsafe-debugsourceUpgrade python-cryptography-debugsourceUpgrade python39-lxml-debuginfoUpgrade python39-cffiUpgrade python-psycopg2-debugsourceUpgrade python39-pyyamlUpgrade python38-tkinterUpgrade python38-psycopg2-debuginfoUpgrade python38-numpyUpgrade python39-lxmlUpgrade python39-scipyUpgrade python38-lxmlUpgrade Cython-debugsourceUpgrade python38-mod_wsgiUpgrade python38-debugsourceUpgrade python39-numpy-f2pyUpgrade python38-idleUpgrade python-lxml-debugsourceUpgrade python38-psutil-debuginfoUpgrade python38-libsUpgrade python38-cryptographyUpgrade python38-pyyaml | Feb 19, 2026 | Feb 17, 2026 |
| Suse | — | Upgrade python39Upgrade python3-cursesUpgrade python3-tkUpgrade samba-toolUpgrade libpython3_10-1_0Upgrade samba-gpupdateUpgrade python310-baseUpgrade samba-clientUpgrade python3-dbmUpgrade python310-cursesUpgrade libpython3_6m1_0Upgrade samba-ad-dcUpgrade python310-doc-devhelpUpgrade python39-develUpgrade python36-baseUpgrade python3-baseUpgrade python311Upgrade python39-docUpgrade python310-toolsUpgrade samba-docUpgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade python310-develUpgrade python3-ldbUpgrade python310-32bitUpgrade python3-develUpgrade libpython3_4m1_0-32bitUpgrade python39-toolsUpgrade python311-baseUpgrade ctdbUpgrade python310-idleUpgrade python36Upgrade libpython3_9-1_0Upgrade python311-idleUpgrade libldb2Upgrade libpython3_11-1_0Upgrade ctdb-pcp-pmdaUpgrade python39-idleUpgrade libpython3_4m1_0Upgrade libpython3_6m1_0-32bitUpgrade samba-dcerpcUpgrade python311-docUpgrade libsamba-policy-python3-develUpgrade python310-dbmUpgrade python3-idleUpgrade samba-develUpgrade python39-tkUpgrade python311-testsuiteUpgrade python39-baseUpgrade libldb-develUpgrade python311-tkUpgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade samba-libs-python3Upgrade python36-develUpgrade samba-libs-32bitUpgrade python311-dbmUpgrade samba-ldb-ldapUpgrade libpython3_9-1_0-32bitUpgrade python39-cursesUpgrade python39-base-32bitUpgrade samba-winbindUpgrade samba-dsdb-modulesUpgrade libpython3_11-1_0-32bitUpgrade python310-docUpgrade ldb-toolsUpgrade python3-testsuiteUpgrade samba-libsUpgrade samba-client-libs-32bitUpgrade sambaUpgrade python39-testsuiteUpgrade python311-toolsUpgrade python311-base-32bitUpgrade python310-testsuiteUpgrade samba-winbind-libs-langUpgrade samba-client-langUpgrade samba-client-libsUpgrade python39-32bitUpgrade python3-doc-devhelpUpgrade python3Upgrade python39-doc-devhelpUpgrade python311-cursesUpgrade samba-cephUpgrade python310-tkUpgrade python39-dbmUpgrade python3-toolsUpgrade python310-base-32bitUpgrade libldb2-32bitUpgrade libpython3_10-1_0-32bitUpgrade python311-doc-devhelpUpgrade python311-32bitUpgrade python311-develUpgrade python310Upgrade libsamba-policy0-python3Upgrade samba-python3Upgrade python3-doc | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade python3.11Upgrade python3.10 | Nov 19, 2024 | Aug 28, 2007 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub