Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-psycopg2Upgrade python38-CythonUpgrade python2-pytzUpgrade python38-more-itertoolsUpgrade python38-asn1cryptoUpgrade python2-wheel-wheelUpgrade python38-plyUpgrade python2-docsUpgrade python2-funcsigsUpgrade python38-pytzUpgrade python2-pytest-mockUpgrade python2-pysocksUpgrade python38-pytestUpgrade python2-pymongo-gridfsUpgrade python38-psycopg2-testsUpgrade python2-numpyUpgrade python2-scipyUpgrade python2-pluggyUpgrade python38-jinja2Upgrade python38-pycparserUpgrade python38-requestsUpgrade python2-virtualenvUpgrade python2-bsonUpgrade python2-requestsUpgrade python2-attrsUpgrade python2-pytestUpgrade python38-wheelUpgrade python2-dnsUpgrade python2-numpy-docUpgrade python2-setuptoolsUpgrade python2-PyMySQLUpgrade python2-setuptools_scmUpgrade python38-wheel-wheelUpgrade python-sqlalchemy-docUpgrade python2-pymongoUpgrade babelUpgrade python38-wcwidthUpgrade python2-sqlalchemyUpgrade python38-pluggyUpgrade python38-numpy-docUpgrade python2-psycopg2-debugUpgrade python38-packagingUpgrade python38-pyparsingUpgrade python2-docutilsUpgrade python2-markupsafeUpgrade python2-pyUpgrade python38-sixUpgrade python2-backportsUpgrade python38-pyyamlUpgrade python38-idnaUpgrade python2-pygmentsUpgrade python38-chardetUpgrade python2-coverageUpgrade python2-sixUpgrade python38-urllib3Upgrade python-psycopg2-docUpgrade python2-ipaddressUpgrade python2-babelUpgrade python38-numpyUpgrade python2-jinja2Upgrade python2-rpm-macrosUpgrade python2-wheelUpgrade python38-pyUpgrade python38-mod_wsgiUpgrade python38-numpy-f2pyUpgrade python2-pyyamlUpgrade python2-chardetUpgrade python38-scipyUpgrade python38-setuptoolsUpgrade python38-setuptools-wheelUpgrade python38-PyMySQLUpgrade python38-attrsUpgrade python3-babelUpgrade python38-atomicwritesUpgrade python38-pysocksUpgrade python2-noseUpgrade python38-cffiUpgrade python2-numpy-f2pyUpgrade python2-urllib3Upgrade python38-cryptographyUpgrade python2-docs-infoUpgrade python2-psycopg2-testsUpgrade python2-CythonUpgrade python2-mockUpgrade python2-psycopg2Upgrade python38-markupsafeUpgrade python38-babelUpgrade python2-backports-ssl_match_hostnameUpgrade python38-psycopg2-docUpgrade python38-psutilUpgrade python-nose-docsUpgrade python2-idnaUpgrade python2-setuptools-wheel | May 4, 2022 | Oct 20, 2021 |
| Alpine Linux | — | Upgrade py3-babel | Aug 22, 2024 | Oct 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-babelUpgrade babel | Apr 6, 2023 | Oct 20, 2021 |
| Amazon_linux | — | Upgrade python-babel | Apr 6, 2023 | Oct 20, 2021 |
| Centos_linux | — | Upgrade python38-asn1cryptoUpgrade python38-debugsourceUpgrade python38-numpyUpgrade python2-mockUpgrade python2-setuptools-wheelUpgrade python38-psycopg2-debuginfoUpgrade python38-jinja2Upgrade python38-setuptools-wheelUpgrade python38-pycparserUpgrade python-psutil-debugsourceUpgrade scipy-debugsourceUpgrade python2Upgrade python38-rpm-macrosUpgrade python2-pysocksUpgrade python2-sixUpgrade python2-pipUpgrade python3-babelUpgrade python2-lxml-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-numpy-docUpgrade python38-cryptography-debuginfoUpgrade python38-libsUpgrade python38-numpy-debuginfoUpgrade python2-jinja2Upgrade python-psycopg2-docUpgrade python2-chardetUpgrade python38-sixUpgrade python2-urllib3Upgrade python38-scipy-debuginfoUpgrade python38-psycopg2-docUpgrade python38-pipUpgrade python38-psycopg2-testsUpgrade python38-testUpgrade python2-rpm-macrosUpgrade python38Upgrade python38-requestsUpgrade numpy-debugsourceUpgrade python2-psycopg2-testsUpgrade python2-wheelUpgrade python2-psycopg2-debugUpgrade python2-coverage-debuginfoUpgrade python38-pyyaml-debuginfoUpgrade python2-testUpgrade python2-backports-ssl_match_hostnameUpgrade python38-pytzUpgrade python38-psutilUpgrade python2-numpy-f2pyUpgrade python38-cffiUpgrade python38-idnaUpgrade python-nose-docsUpgrade python2-pygmentsUpgrade python2-markupsafeUpgrade python-coverage-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-lxmlUpgrade python-cffi-debugsourceUpgrade python2-requestsUpgrade python38-chardetUpgrade python2-pytzUpgrade python38-CythonUpgrade python2-Cython-debuginfoUpgrade python38-plyUpgrade python2-pymongoUpgrade python2-pymongo-gridfsUpgrade python2-babelUpgrade python2-wheel-wheelUpgrade python38-Cython-debuginfoUpgrade python38-wheel-wheelUpgrade python38-babelUpgrade python-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-dnsUpgrade python38-idleUpgrade python2-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-pip-wheelUpgrade python2-pyyaml-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-backportsUpgrade python2-attrsUpgrade python38-pysocksUpgrade python2-numpy-debuginfoUpgrade python2-docs-infoUpgrade python-sqlalchemy-docUpgrade python-pymongo-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python38-lxmlUpgrade python2-tkinterUpgrade python38-pyyamlUpgrade python2-coverageUpgrade python38-lxml-debuginfoUpgrade python38-debuginfoUpgrade python2-setuptools_scmUpgrade python2-pymongo-debuginfoUpgrade python2-noseUpgrade python2-debugUpgrade python38-setuptoolsUpgrade python38-tkinterUpgrade python2-docutilsUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python2-scipyUpgrade python2-pyyamlUpgrade python2-numpy-docUpgrade python2-pytest-mockUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-urllib3Upgrade python2-setuptoolsUpgrade python2-libsUpgrade python2-funcsigsUpgrade python-lxml-debugsourceUpgrade python38-debugUpgrade python38-scipyUpgrade python38-psutil-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-PyMySQLUpgrade python-markupsafe-debugsourceUpgrade python38-numpy-f2pyUpgrade python2-idnaUpgrade python38-PyMySQLUpgrade python2-pytestUpgrade python2-debugsourceUpgrade python2-CythonUpgrade python2-numpyUpgrade python-cryptography-debugsourceUpgrade python38-psycopg2Upgrade Cython-debugsourceUpgrade babelUpgrade python38-cryptographyUpgrade python2-pyUpgrade python2-sqlalchemyUpgrade python2-psycopg2Upgrade python2-pluggyUpgrade python2-ipaddressUpgrade python2-docsUpgrade python2-develUpgrade python2-bsonUpgrade python38-wheelUpgrade python38-mod_wsgiUpgrade python38-markupsafeUpgrade python38-develUpgrade python38-cffi-debuginfoUpgrade python38-pip-wheel | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade python-babel | Nov 29, 2021 | Oct 20, 2021 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-babel | Feb 28, 2022 | Oct 20, 2021 |
| Oracle Solaris | — | Upgrade library/python/mako-39 to version 1.1.5-11.4.40.0.1.107.2 on Solaris 11.4Upgrade library/python/mako-37 to version 1.1.5-11.4.40.0.1.107.2 on Solaris 11.4Upgrade library/python/babel-37 to version 2.9.1-11.4.40.0.1.107.2 on Solaris 11.4Upgrade library/python/mako to version 1.1.5-11.4.40.0.1.107.2 on Solaris 11.4Upgrade library/python/babel to version 2.9.1-11.4.40.0.1.107.2 on Solaris 11.4Upgrade library/python/babel-39 to version 2.9.1-11.4.40.0.1.107.2 on Solaris 11.4 | Dec 13, 2021 | Oct 20, 2021 |
| Oracle_linux | — | Upgrade python38-wheelUpgrade python38-pip-wheelUpgrade python2-requestsUpgrade python2-attrsUpgrade python2-pluggyUpgrade python38-psycopg2Upgrade python2-markupsafeUpgrade python2-numpyUpgrade python2-pip-wheelUpgrade python2-CythonUpgrade python2-testUpgrade python38-develUpgrade python2-pyUpgrade python2-pygmentsUpgrade python38-numpy-docUpgrade python38-markupsafeUpgrade python38-PyMySQLUpgrade python38-atomicwritesUpgrade python38-pyparsingUpgrade python38-tkinterUpgrade python2-backportsUpgrade python2-pysocksUpgrade python2-pytest-mockUpgrade python2-setuptoolsUpgrade python2-jinja2Upgrade python2-numpy-docUpgrade python38-attrsUpgrade python-sqlalchemy-docUpgrade python2-chardetUpgrade python2Upgrade python38-testUpgrade python2-docs-infoUpgrade python38-psycopg2-docUpgrade python2-sqlalchemyUpgrade python2-libsUpgrade python38-pytestUpgrade python38-CythonUpgrade python38-numpyUpgrade python38-numpy-f2pyUpgrade python38-psutilUpgrade python38-pipUpgrade python38-psycopg2-testsUpgrade python38-packagingUpgrade python38-sixUpgrade python-nose-docsUpgrade python2-pytzUpgrade python2-psycopg2-debugUpgrade python38-scipyUpgrade python2-PyMySQLUpgrade python2-idnaUpgrade python2-scipyUpgrade python38-pytzUpgrade python2-develUpgrade python2-docutilsUpgrade python38-pluggyUpgrade python2-pymongo-gridfsUpgrade python38-idnaUpgrade python38-libsUpgrade python38-cffiUpgrade python2-urllib3Upgrade python38-pycparserUpgrade python2-babelUpgrade python2-ipaddressUpgrade python2-dnsUpgrade python38-pysocksUpgrade python38-jinja2Upgrade python38-wcwidthUpgrade python2-numpy-f2pyUpgrade python38-requestsUpgrade python2-rpm-macrosUpgrade python38-cryptographyUpgrade python38-setuptoolsUpgrade python2-psycopg2-testsUpgrade python2-noseUpgrade python2-bsonUpgrade python38-wheel-wheelUpgrade python38-plyUpgrade python38-asn1cryptoUpgrade python2-tkinterUpgrade python2-setuptools_scmUpgrade python2-funcsigsUpgrade python2-debugUpgrade python38-debugUpgrade babelUpgrade python2-pyyamlUpgrade python2-psycopg2Upgrade python2-lxmlUpgrade python2-mockUpgrade python38-lxmlUpgrade python38-babelUpgrade python38-more-itertoolsUpgrade python38-mod_wsgiUpgrade python2-coverageUpgrade python2-pytestUpgrade python2-wheel-wheelUpgrade python2-pymongoUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python38-idleUpgrade python2-sixUpgrade python2-wheelUpgrade python38-rpm-macrosUpgrade python2-virtualenvUpgrade python38Upgrade python3-babelUpgrade python38-urllib3Upgrade python38-chardetUpgrade python2-toolsUpgrade python38-pyUpgrade python38-setuptools-wheelUpgrade python38-pyyamlUpgrade python2-pip | Nov 17, 2021 | Apr 28, 2021 |
| Redhat_linux | — | Upgrade python38Upgrade python38-psutil-debuginfoUpgrade python38-psycopg2Upgrade python38-pyparsingUpgrade python38-testUpgrade python38-markupsafe-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python2-docs-infoUpgrade python2-coverage-debuginfoUpgrade python38-pytestUpgrade python38-wheel-wheelUpgrade python2-numpy-f2pyUpgrade python-nose-docsUpgrade python38-urllib3Upgrade python2-pygmentsUpgrade python2-urllib3Upgrade python38-cryptographyUpgrade python2-setuptools-wheelUpgrade python2-wheel-wheelUpgrade python38-psycopg2-testsUpgrade python2-Cython-debuginfoUpgrade python2-setuptoolsUpgrade python2-jinja2Upgrade python2-babelUpgrade python38-atomicwritesUpgrade python2-lxml-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-numpy-docUpgrade python2-scipy-debuginfoUpgrade python2-backports-ssl_match_hostnameUpgrade python-pymongo-debugsourceUpgrade python2-pyyaml-debuginfoUpgrade python2-idnaUpgrade python38-tkinterUpgrade python2-psycopg2-debuginfoUpgrade python2-pysocksUpgrade python38-numpy-f2pyUpgrade python2-pymongo-debuginfoUpgrade python2-pluggyUpgrade python-psycopg2-docUpgrade python38-psycopg2-debuginfoUpgrade python2-pyUpgrade python38-psutilUpgrade python2-numpyUpgrade python38-idnaUpgrade python2-pipUpgrade python38-packagingUpgrade python2-markupsafeUpgrade python-lxml-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python38-sixUpgrade python2-backportsUpgrade numpy-debugsourceUpgrade python38-Cython-debuginfoUpgrade python2-chardetUpgrade python38-setuptools-wheelUpgrade python-markupsafe-debugsourceUpgrade python2-pip-wheelUpgrade python38-libsUpgrade python38-wheelUpgrade python38-numpyUpgrade python38-PyMySQLUpgrade python2Upgrade python2-sixUpgrade python-cffi-debugsourceUpgrade python38-cffiUpgrade python38-psycopg2-docUpgrade python2-pytzUpgrade python2-lxmlUpgrade python38-requestsUpgrade python38-attrsUpgrade python-psutil-debugsourceUpgrade python38-pycparserUpgrade Cython-debugsourceUpgrade python3-babelUpgrade python38-lxml-debuginfoUpgrade python38-more-itertoolsUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-pluggyUpgrade python38-pyUpgrade python2-debugsourceUpgrade python38-chardetUpgrade python2-funcsigsUpgrade python38-mod_wsgiUpgrade python2-bson-debuginfoUpgrade python2-noseUpgrade python2-attrsUpgrade python38-cffi-debuginfoUpgrade python-sqlalchemy-docUpgrade python2-requestsUpgrade python38-scipy-debuginfoUpgrade python38-asn1cryptoUpgrade python2-pymongo-gridfsUpgrade python2-numpy-debuginfoUpgrade python2-debugUpgrade python2-psycopg2-debugUpgrade python2-setuptools_scmUpgrade python38-rpm-macrosUpgrade python-coverage-debugsourceUpgrade python2-psycopg2Upgrade python2-rpm-macrosUpgrade python2-docsUpgrade python38-lxmlUpgrade python38-markupsafeUpgrade python38-jinja2Upgrade python38-pytzUpgrade python2-mockUpgrade python38-pysocksUpgrade python2-pyyamlUpgrade python38-babelUpgrade python38-develUpgrade python2-toolsUpgrade python2-tkinterUpgrade python38-idleUpgrade python38-numpy-debuginfoUpgrade python38-setuptoolsUpgrade python38-debugUpgrade python2-dnsUpgrade python38-pyyaml-debuginfoUpgrade python2-debuginfoUpgrade python2-bsonUpgrade python-pymongo-debuginfoUpgrade python38-wcwidthUpgrade python38-CythonUpgrade python38-pyyamlUpgrade scipy-debugsourceNo solution existsUpgrade python2-testUpgrade python38-pipUpgrade python2-virtualenvUpgrade python38-debugsourceUpgrade python2-docutilsUpgrade python2-PyMySQLUpgrade python2-psycopg2-testsUpgrade babelUpgrade python38-debuginfoUpgrade python2-pytest-mockUpgrade python2-develUpgrade python38-scipyUpgrade python-psycopg2-debugsourceUpgrade python2-coverageUpgrade python2-pymongoUpgrade python2-pytestUpgrade python2-wheelUpgrade python2-scipyUpgrade python2-numpy-docUpgrade python2-ipaddressUpgrade python2-CythonUpgrade python2-libsUpgrade python38-pip-wheelUpgrade python38-plyUpgrade python2-sqlalchemyUpgrade python-cryptography-debugsource | Nov 10, 2021 | Nov 9, 2021 |
| Rocky_linux | — | Upgrade python2-tkinterUpgrade python2-markupsafeUpgrade python38-mod_wsgiUpgrade python2-pymongoUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-pyyamlUpgrade python38-markupsafe-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-sqlalchemyUpgrade python2-pyyaml-debuginfoUpgrade python2-scipyUpgrade python38-Cython-debuginfoUpgrade python38-psycopg2-testsUpgrade python38-cffi-debuginfoUpgrade python38-debugUpgrade python38-psycopg2Upgrade python-cryptography-debugsourceUpgrade python-psutil-debugsourceUpgrade numpy-debugsourceUpgrade python2-psycopg2Upgrade python-psycopg2-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python38-develUpgrade python2-lxmlUpgrade python-markupsafe-debugsourceUpgrade python2-develUpgrade python2-toolsUpgrade python38-tkinterUpgrade python38-psutil-debuginfoUpgrade python38-debuginfoUpgrade python2-scipy-debuginfoUpgrade python38-numpy-f2pyUpgrade scipy-debugsourceUpgrade python2-debugsourceUpgrade python2-numpyUpgrade python38-psutilUpgrade python2-Cython-debuginfoUpgrade python2-pyyamlUpgrade python2-coverageUpgrade python-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python38-lxmlUpgrade python38-CythonUpgrade python2-backportsUpgrade python38-libsUpgrade python-pymongo-debuginfoUpgrade python2-psycopg2-debugUpgrade python-coverage-debugsourceUpgrade python2-debugUpgrade python2-bson-debuginfoUpgrade python2Upgrade python-lxml-debugsourceUpgrade python2-psycopg2-testsUpgrade python38-numpy-debuginfoUpgrade python-psycopg2-docUpgrade python2-CythonUpgrade PyYAML-debugsourceUpgrade python38-psycopg2-docUpgrade python2-libsUpgrade python38-scipyUpgrade python38-pyyaml-debuginfoUpgrade python38-idleUpgrade python38-debugsourceUpgrade python38-cffiUpgrade python2-bsonUpgrade python-pymongo-debugsourceUpgrade python38-scipy-debuginfoUpgrade python2-pymongo-gridfsUpgrade python-cffi-debugsourceUpgrade python38-lxml-debuginfoUpgrade python2-coverage-debuginfoUpgrade python38-markupsafeUpgrade python2-numpy-debuginfoUpgrade python2-lxml-debuginfoUpgrade python38-numpyUpgrade python2-numpy-f2pyUpgrade python38Upgrade python2-debuginfoUpgrade python2-testUpgrade python38-testUpgrade python38-psycopg2-debuginfoUpgrade python38-cryptography | Mar 12, 2024 | Oct 20, 2021 |
| Suse | — | Upgrade python2-babelUpgrade python3-babel-docUpgrade python-babel-docUpgrade python-babelUpgrade python3-babel | Dec 7, 2021 | Oct 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub