Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3.11-tkinterUpgrade python38-sixUpgrade platform-python-develUpgrade python39-tomlUpgrade python39-tkinterUpgrade python39-wheelUpgrade python38-markupsafeUpgrade python38-pyparsingUpgrade python39-pybind11Upgrade python39-iniconfigUpgrade python39-attrsUpgrade python38-PyMySQLUpgrade python39-requestsUpgrade python39-setuptoolsUpgrade python39-PyMySQLUpgrade python3.11-pip-wheelUpgrade python38-idleUpgrade python38-pyUpgrade python39-testUpgrade platform-pythonUpgrade python3-libsUpgrade python39-more-itertoolsUpgrade python3-tkinterUpgrade python38-lxmlUpgrade python3.11-pipUpgrade python39-libsUpgrade python38-cryptographyUpgrade python3-pipUpgrade python3.11-testUpgrade python38-wheelUpgrade python3.11Upgrade python38-wcwidthUpgrade python38Upgrade python38-psycopg2Upgrade python3-idleUpgrade python39-lxmlUpgrade python38-CythonUpgrade python39-debugUpgrade python39-numpy-docUpgrade python39-wheel-wheelUpgrade platform-python-debugUpgrade python39-pyUpgrade python38-atomicwritesUpgrade python38-numpy-f2pyUpgrade python38-pysocksUpgrade python39-numpy-f2pyUpgrade python38-pip-wheelUpgrade python38-pyyamlUpgrade python38-scipyUpgrade python39-plyUpgrade python39-pytestUpgrade python3-pip-wheelUpgrade python38-mod_wsgiUpgrade python-unversioned-commandUpgrade python39-pluggyUpgrade python38-urllib3Upgrade python3.11-libsUpgrade python39-packagingUpgrade python39-psycopg2-testsUpgrade python38-develUpgrade python3-develUpgrade python3.11-develUpgrade python39-wcwidthUpgrade python39-develUpgrade python38-cffiUpgrade python38-psutilUpgrade python39-pyyamlUpgrade python38-psycopg2-testsUpgrade python38-setuptools-wheelUpgrade python38-attrsUpgrade python39-numpyUpgrade python3-debugUpgrade python3.11-rpm-macrosUpgrade python39-pycparserUpgrade python38-more-itertoolsUpgrade python39-CythonUpgrade python3.11-debugUpgrade python39-mod_wsgiUpgrade python39-psycopg2Upgrade python38-numpy-docUpgrade python38-debugUpgrade python39-rpm-macrosUpgrade python38-idnaUpgrade python3.11-idleUpgrade python39-setuptools-wheelUpgrade python38-asn1cryptoUpgrade python39-pipUpgrade python39Upgrade python38-pipUpgrade python38-testUpgrade python39-sixUpgrade python39-psycopg2-docUpgrade python39-urllib3Upgrade python38-plyUpgrade python39-cryptographyUpgrade python38-jinja2Upgrade python38-babelUpgrade python38-pycparserUpgrade python38-pytestUpgrade python38-setuptoolsUpgrade python39-scipyUpgrade python38-psycopg2-docUpgrade python3Upgrade platform-python-pipUpgrade python39-chardetUpgrade python38-pytzUpgrade python39-idnaUpgrade python39-idleUpgrade python39-cffiUpgrade python3-testUpgrade python39-pyparsingUpgrade python38-chardetUpgrade python39-pybind11-develUpgrade python38-numpyUpgrade python38-tkinterUpgrade python39-pysocksUpgrade python38-packagingUpgrade python39-pip-wheelUpgrade python38-pluggyUpgrade python38-wheel-wheelUpgrade python38-rpm-macrosUpgrade python39-psutilUpgrade python38-requestsUpgrade python38-libs | Nov 16, 2023 | Aug 28, 2007 |
| Amazon Linux Ami 2 | — | Upgrade python-pip-wheelUpgrade python38Upgrade python3-testUpgrade python38-libsUpgrade python-testUpgrade python-develUpgrade tkinterUpgrade python-debuginfoUpgrade python-toolsUpgrade python3-toolsUpgrade python2-pipUpgrade python-libsUpgrade python3-pipUpgrade python3Upgrade python38-testUpgrade python3-debugUpgrade python3-tkinterUpgrade python38-develUpgrade python38-debuginfoUpgrade python-debugUpgrade python38-debugUpgrade pythonUpgrade python3-libsUpgrade python3-develUpgrade python38-toolsUpgrade python3-debuginfoUpgrade python38-pipUpgrade python38-tkinter | Nov 14, 2024 | Aug 28, 2007 |
| Amazon_linux_2023 | — | Upgrade python3.11-debugsourceUpgrade python3Upgrade python-unversioned-commandUpgrade python3-testUpgrade python3.11-debuginfoUpgrade python3.11-libsUpgrade python3.11-pip-wheelUpgrade python3.11-idleUpgrade python3-libsUpgrade python3-idleUpgrade python3-develUpgrade python3-tkinterUpgrade python3.11-pipUpgrade python3.9-debuginfoUpgrade python3.11-develUpgrade python3-pipUpgrade python3.9-debugsourceUpgrade python3-debugUpgrade python3.11-testUpgrade python3.11-debugUpgrade python3.11-tkinterUpgrade python3.11Upgrade python3-pip-wheel | Mar 10, 2025 | Aug 24, 2007 |
| Centos_linux | — | Upgrade python39-plyUpgrade python38-pycparserUpgrade python3-pipUpgrade python38-cryptographyUpgrade python38-setuptoolsUpgrade python3.11-pip-wheelUpgrade python3Upgrade python38-chardetUpgrade python39-pipUpgrade python39-psutil-debuginfoUpgrade python38-wheel-wheelUpgrade python38-debugUpgrade python38-PyMySQLUpgrade python38-CythonUpgrade python39-pysocksUpgrade python-cryptography-debugsourceUpgrade python39-pycparserUpgrade python-unversioned-commandUpgrade python38-idnaUpgrade python38-numpy-docUpgrade python3-develUpgrade python39-pip-wheelUpgrade python39-sixUpgrade python38-numpyUpgrade python38-idleUpgrade python38-cryptography-debuginfoUpgrade python3.11-rpm-macrosUpgrade python38-pytzUpgrade python38-mod_wsgiUpgrade python3.11-debugsourceUpgrade python39-PyMySQLUpgrade python38-plyUpgrade python3-testUpgrade python38-pyyaml-debuginfoUpgrade python39-scipyUpgrade python-psutil-debugsourceUpgrade python38-markupsafeUpgrade python38-numpy-f2pyUpgrade python38-setuptools-wheelUpgrade scipy-debugsourceUpgrade python39-psycopg2Upgrade platform-pythonUpgrade python38-pip-wheelUpgrade python38-pysocksUpgrade python39-lxmlUpgrade python3.11-libsUpgrade python39-setuptools-wheelUpgrade python38-psycopg2-docUpgrade python38-babelUpgrade python3.11Upgrade python39-lxml-debuginfoUpgrade python38-jinja2Upgrade python3.9-debugsourceUpgrade python38-cffiUpgrade python39-psycopg2-docUpgrade python39-numpy-debuginfoUpgrade python39-idleUpgrade python39-tomlUpgrade python-lxml-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python38-lxmlUpgrade PyYAML-debugsourceUpgrade Cython-debugsourceUpgrade python39-cryptographyUpgrade python38-psycopg2-testsUpgrade python39Upgrade python38-testUpgrade python38-psutilUpgrade python38-asn1cryptoUpgrade python39-urllib3Upgrade python39-idnaUpgrade python39-pyyamlUpgrade numpy-debugsourceUpgrade python38-urllib3Upgrade python39-setuptoolsUpgrade python38-psycopg2-debuginfoUpgrade python39-tkinterUpgrade python38-scipyUpgrade python39-numpyUpgrade python38-Cython-debuginfoUpgrade python3-debugsourceUpgrade python39-pyyaml-debuginfoUpgrade python39-testUpgrade python38-libsUpgrade python39-numpy-f2pyUpgrade python38-lxml-debuginfoUpgrade python38-scipy-debuginfoUpgrade python38Upgrade python38-rpm-macrosUpgrade python38-cffi-debuginfoUpgrade python38-pipUpgrade python39-libsUpgrade platform-python-debugUpgrade python-psycopg2-debugsourceUpgrade python39-wheelUpgrade python38-psutil-debuginfoUpgrade python3-tkinterUpgrade python39-requestsUpgrade python-cffi-debugsourceUpgrade python3.9-debuginfoUpgrade python3-libsUpgrade python38-debugsourceUpgrade python38-requestsUpgrade python39-mod_wsgiUpgrade python39-psycopg2-testsUpgrade python38-develUpgrade python3-debuginfoUpgrade python39-debuginfoUpgrade python39-rpm-macrosUpgrade python38-psycopg2Upgrade python38-pyyamlUpgrade python3.11-pipUpgrade python39-psutilUpgrade python3-idleUpgrade platform-python-develUpgrade python39-numpy-docUpgrade python39-psycopg2-debuginfoUpgrade python38-sixUpgrade python38-numpy-debuginfoUpgrade python39-wheel-wheelUpgrade python39-debugsourceUpgrade python39-scipy-debuginfoUpgrade python39-chardetUpgrade python3-pip-wheelUpgrade python38-debuginfoUpgrade python39-cryptography-debuginfoUpgrade python38-tkinterUpgrade python39-cffi-debuginfoUpgrade python39-develUpgrade python39-cffiUpgrade python-markupsafe-debugsourceUpgrade python3.11-debuginfoUpgrade platform-python-pipUpgrade python3.11-tkinterUpgrade python38-wheelUpgrade python3.11-devel | Nov 8, 2023 | Aug 28, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 28, 2007 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3Upgrade python3-unversioned-command | Jan 10, 2024 | Aug 28, 2007 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3Upgrade python3-unversioned-commandUpgrade python3-fgo | Oct 24, 2025 | Mar 20, 2007 |
| Oracle_linux | — | Upgrade python38-pyparsingUpgrade python39-attrsUpgrade python38-attrsUpgrade python39-tomlUpgrade python38-babelUpgrade python39-pybind11-develUpgrade python38-libsUpgrade python38-lxmlUpgrade python3.11-debugUpgrade python38-setuptoolsUpgrade python38-markupsafeUpgrade python38-pysocksUpgrade python39-tkinterUpgrade python3.11-tkinterUpgrade python-unversioned-commandUpgrade python39-pluggyUpgrade python39-requestsUpgrade python39-numpy-docUpgrade python38-cryptographyUpgrade python38-PyMySQLUpgrade python38-psycopg2-docUpgrade python3-idleUpgrade python39-libsUpgrade platform-python-debugUpgrade python38-pyyamlUpgrade platform-pythonUpgrade python39-psycopg2-testsUpgrade python38-atomicwritesUpgrade python38-mod_wsgiUpgrade python38-urllib3Upgrade python39-iniconfigUpgrade python39-develUpgrade python39-plyUpgrade python38-pyUpgrade python39-CythonUpgrade python3.11-pipUpgrade python39-debugUpgrade python3-pip-wheelUpgrade python38-pip-wheelUpgrade python39-wheel-wheelUpgrade python3-tkinterUpgrade python39-packagingUpgrade python38-idleUpgrade python38-wcwidthUpgrade python39-numpyUpgrade python39-pyUpgrade python3-pipUpgrade python39-scipyUpgrade platform-python-develUpgrade python39-PyMySQLUpgrade python3.11-libsUpgrade python3-libsUpgrade python38Upgrade python3.11Upgrade python39-testUpgrade python38-wheelUpgrade python39-pybind11Upgrade python38-numpy-f2pyUpgrade python39-wcwidthUpgrade python39-lxmlUpgrade python39-rpm-macrosUpgrade python38-numpyUpgrade python39-more-itertoolsUpgrade python38-scipyUpgrade python39-numpy-f2pyUpgrade python3.11-testUpgrade python3-develUpgrade python39-psycopg2-docUpgrade python39-pipUpgrade python38-jinja2Upgrade python38-asn1cryptoUpgrade python3Upgrade python38-tkinterUpgrade python38-plyUpgrade python39-cffiUpgrade python3.11-develUpgrade python3-debugUpgrade python39-psutilUpgrade python38-packagingUpgrade python3.11-rpm-macrosUpgrade python38-wheel-wheelUpgrade python38-psutilUpgrade python38-pluggyUpgrade python39-pysocksUpgrade python3-testUpgrade python39-idleUpgrade python39-setuptools-wheelUpgrade python39-urllib3Upgrade python39-psycopg2Upgrade python39-pyyamlUpgrade python39-sixUpgrade python39-chardetUpgrade python39-pyparsingUpgrade python38-pipUpgrade python38-setuptools-wheelUpgrade python38-pycparserUpgrade platform-python-pipUpgrade python39Upgrade python39-pytestUpgrade python38-more-itertoolsUpgrade python38-develUpgrade python38-requestsUpgrade python38-psycopg2Upgrade python39-pip-wheelUpgrade python38-testUpgrade python38-sixUpgrade python38-CythonUpgrade python3.11-pip-wheelUpgrade python38-psycopg2-testsUpgrade python39-setuptoolsUpgrade python38-chardetUpgrade python38-numpy-docUpgrade python38-pytestUpgrade python38-cffiUpgrade python39-mod_wsgiUpgrade python39-pycparserUpgrade python38-idnaUpgrade python38-pytzUpgrade python38-debugUpgrade python3.11-idleUpgrade python39-cryptographyUpgrade python39-wheelUpgrade python38-rpm-macrosUpgrade python39-idna | Nov 16, 2023 | Aug 24, 2007 |
| Redhat_linux | — | Upgrade python39-pytestUpgrade python38-asn1cryptoUpgrade python38-cryptographyUpgrade python3.11-idleUpgrade python38-mod_wsgiUpgrade python38-psutilUpgrade python38-setuptoolsUpgrade python39-iniconfigNo solution existsUpgrade python39-packagingUpgrade python38-attrsUpgrade python38Upgrade python3-develUpgrade python3.11-libsUpgrade platform-python-develUpgrade python38-numpyUpgrade Cython-debugsourceUpgrade python39-setuptoolsUpgrade python3.11-develUpgrade python38-pyyamlUpgrade python38-pytzUpgrade python3-tkinterUpgrade python39-cryptographyUpgrade python38-wheel-wheelUpgrade python39-pycparserUpgrade python39-lxmlUpgrade python39-scipyUpgrade python38-tkinterUpgrade python3-idleUpgrade python3.11-debuginfoUpgrade python38-chardetUpgrade platform-python-pipUpgrade python38-rpm-macrosUpgrade python39-urllib3Upgrade python3.9-debuginfoUpgrade python38-pyyaml-debuginfoUpgrade python39-setuptools-wheelUpgrade python39-sixUpgrade python3.11-debugsourceUpgrade python38-cffi-debuginfoUpgrade python39-pyyamlUpgrade python39-rpm-macrosUpgrade python3-debugUpgrade scipy-debugsourceUpgrade python38-more-itertoolsUpgrade python38-wcwidthUpgrade python38-pytestUpgrade python3-debuginfoUpgrade python38-plyUpgrade python38-scipy-debuginfoUpgrade python39-pyparsingUpgrade python38-setuptools-wheelUpgrade python3Upgrade platform-python-debugUpgrade python3-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python39-CythonUpgrade python38-jinja2Upgrade python39-chardetUpgrade python39-pybind11-develUpgrade python39-plyUpgrade python39-tomlUpgrade python39-numpyUpgrade python38-debugUpgrade python39-numpy-f2pyUpgrade python3.11-debugUpgrade python38-urllib3Upgrade python38-testUpgrade python-psycopg2-debugsourceUpgrade python38-requestsUpgrade python39-pyUpgrade python39-idnaUpgrade python3-libsUpgrade python39-pysocksUpgrade python38-babelUpgrade python38-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python39-pipUpgrade python3.9-debugsourceUpgrade python39-libsUpgrade python38-cryptography-debuginfoUpgrade python3.11-testUpgrade python39-psutilUpgrade python39-more-itertoolsUpgrade python39-testUpgrade python38-CythonUpgrade python39-numpy-debuginfoUpgrade python38-idnaUpgrade python38-psutil-debuginfoUpgrade python39-numpy-docUpgrade PyYAML-debugsourceUpgrade python38-cffiUpgrade python39-pip-wheelUpgrade platform-pythonUpgrade python39-cffi-debuginfoUpgrade python38-idleUpgrade python38-lxmlUpgrade python38-pluggyUpgrade python38-PyMySQLUpgrade python39-psycopg2-testsUpgrade python39-wheelUpgrade python39-wcwidthUpgrade python3.11-pip-wheelUpgrade python39-requestsUpgrade python38-libsUpgrade python38-develUpgrade python39-pybind11Upgrade python39-cffiUpgrade python39-idleUpgrade python-cffi-debugsourceUpgrade python38-wheelUpgrade python3-pipUpgrade python39-psycopg2-docUpgrade python38-pipUpgrade python3.11-tkinterUpgrade python38-numpy-f2pyUpgrade python38-markupsafeUpgrade python3.11Upgrade python39-debugsourceUpgrade python38-numpy-docUpgrade python38-pyUpgrade python3.11-pipUpgrade python39-pyyaml-debuginfoUpgrade python38-pycparserUpgrade python39-develUpgrade python39-lxml-debuginfoUpgrade python38-psycopg2-testsUpgrade python38-psycopg2-docUpgrade python38-Cython-debuginfoUpgrade python38-sixUpgrade python38-debuginfoUpgrade python39-wheel-wheelUpgrade python39-PyMySQLUpgrade python39-Cython-debuginfoUpgrade python39-psutil-debuginfoUpgrade python38-pysocksUpgrade python39-tkinterUpgrade python38-pip-wheelUpgrade numpy-debugsourceUpgrade python39-psycopg2Upgrade python39-scipy-debuginfoUpgrade python-unversioned-commandUpgrade python39-pluggyUpgrade python-lxml-debugsourceUpgrade python39-cryptography-debuginfoUpgrade python39-attrsUpgrade python38-psycopg2Upgrade python3-pip-wheelUpgrade python38-numpy-debuginfoUpgrade python38-scipyUpgrade python3.11-rpm-macrosUpgrade python38-packagingUpgrade python38-pyparsingUpgrade python39Upgrade python3-testUpgrade python38-lxml-debuginfoUpgrade python39-debugUpgrade python39-debuginfoUpgrade python39-mod_wsgiUpgrade python39-psycopg2-debuginfoUpgrade python38-atomicwritesUpgrade python-psutil-debugsourceUpgrade python-markupsafe-debugsourceUpgrade python-cryptography-debugsource | Nov 8, 2023 | Aug 28, 2007 |
| Rocky_linux | — | Upgrade python38-numpy-f2pyUpgrade python39-numpy-debuginfoUpgrade python38-CythonUpgrade python38-numpy-debuginfoUpgrade python38-debuginfoUpgrade python39-cffi-debuginfoUpgrade PyYAML-debugsourceUpgrade python39-numpyUpgrade python38-debugUpgrade python38-psutilUpgrade numpy-debugsourceUpgrade python38Upgrade python39-mod_wsgiUpgrade python38-pyyaml-debuginfoUpgrade python39-scipy-debuginfoUpgrade python39-psutilUpgrade python38-Cython-debuginfoUpgrade python38-cffiUpgrade python39-pyyaml-debuginfoUpgrade python38-scipyUpgrade python39-psutil-debuginfoUpgrade python38-psycopg2-testsUpgrade python39-CythonUpgrade python-cffi-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python38-markupsafeUpgrade python38-testUpgrade python38-lxml-debuginfoUpgrade python39-Cython-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python-psutil-debugsourceUpgrade python38-psycopg2Upgrade python38-mod_wsgiUpgrade python38-libsUpgrade python38-psutil-debuginfoUpgrade python38-psycopg2-debuginfoUpgrade python39-pyyamlUpgrade python39-cffiUpgrade python38-lxmlUpgrade python38-cryptographyUpgrade python38-psycopg2-docUpgrade python38-tkinterUpgrade python38-numpyUpgrade python38-develUpgrade python-psycopg2-debugsourceUpgrade python39-pybind11-develUpgrade python38-scipy-debuginfoUpgrade scipy-debugsourceUpgrade python-markupsafe-debugsourceUpgrade python-lxml-debugsourceUpgrade python38-idleUpgrade python-cryptography-debugsourceUpgrade python39-pybind11Upgrade python39-scipyUpgrade python38-cffi-debuginfoUpgrade python39-lxml-debuginfoUpgrade Cython-debugsourceUpgrade python38-pyyamlUpgrade python38-debugsourceUpgrade python39-numpy-f2pyUpgrade python39-lxml | Feb 19, 2026 | Feb 17, 2026 |
| Suse | — | Upgrade python310-develUpgrade samba-gpupdateUpgrade samba-docUpgrade python310-cursesUpgrade samba-ad-dc-libsUpgrade libpython3_6m1_0Upgrade python310-32bitUpgrade python310-toolsUpgrade libpython3_11-1_0Upgrade python39-develUpgrade python3-ldbUpgrade libpython3_10-1_0Upgrade samba-toolUpgrade python39-docUpgrade python3-develUpgrade python39-baseUpgrade python3-dbmUpgrade libpython3_9-1_0Upgrade python39Upgrade python311-baseUpgrade libsamba-policy-python3-develUpgrade libldb2Upgrade python310-idleUpgrade python311Upgrade python310-baseUpgrade samba-ad-dcUpgrade python311-docUpgrade python3-baseUpgrade python310-dbmUpgrade samba-dcerpcUpgrade libsamba-policy-develUpgrade python3-tkUpgrade python3-idleUpgrade libpython3_4m1_0-32bitUpgrade libpython3_6m1_0-32bitUpgrade python36-baseUpgrade python39-tkUpgrade libpython3_4m1_0Upgrade python311-tkUpgrade libldb-develUpgrade python39-idleUpgrade python311-testsuiteUpgrade samba-winbind-libs-32bitUpgrade python36Upgrade ctdbUpgrade ctdb-pcp-pmdaUpgrade samba-clientUpgrade python3-cursesUpgrade python310-doc-devhelpUpgrade python39-toolsUpgrade samba-develUpgrade python311-idleUpgrade samba-winbind-libs-langUpgrade python39-base-32bitUpgrade ldb-toolsUpgrade samba-client-libs-32bitUpgrade python39-32bitUpgrade python3-doc-devhelpUpgrade python39-dbmUpgrade samba-libs-python3Upgrade samba-winbindUpgrade samba-dsdb-modulesUpgrade python311-base-32bitUpgrade python311-dbmUpgrade python39-testsuiteUpgrade samba-client-libsUpgrade python311-develUpgrade python311-32bitUpgrade samba-libsUpgrade python310-docUpgrade python310Upgrade python3-docUpgrade libsamba-policy0-python3Upgrade libpython3_11-1_0-32bitUpgrade samba-ldb-ldapUpgrade samba-winbind-libsUpgrade samba-python3Upgrade libpython3_10-1_0-32bitUpgrade python311-toolsUpgrade python310-tkUpgrade libpython3_9-1_0-32bitUpgrade python36-develUpgrade python3-testsuiteUpgrade python311-doc-devhelpUpgrade python3-toolsUpgrade python311-cursesUpgrade libldb2-32bitUpgrade samba-libs-32bitUpgrade python3Upgrade samba-client-langUpgrade python310-testsuiteUpgrade python39-doc-devhelpUpgrade samba-cephUpgrade sambaUpgrade python39-cursesUpgrade python310-base-32bit | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade python3.10Upgrade python3.11 | Nov 19, 2024 | Aug 28, 2007 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub