PatchTheCVEpython-gnupg project vulnerabilities
Recent CVEs affecting python-gnupg project products. 3 tracked.
python-gnupg project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2014-10-25. Highest priority: CVE-2014-1927 (score 53/100).
- CVE-2014-1929 MEDIUM 4.4 DOWNGRADE python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors rela
- CVE-2014-1928 MEDIUM 4.6 UPGRADE The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-depen
- CVE-2014-1927 HIGH 7.5 DOWNGRADE The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent
FAQ
How do I fix python-gnupg project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is python-gnupg project being exploited right now?
None of the tracked python-gnupg project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which python-gnupg project CVE should I patch first?
CVE-2014-1927 currently ranks highest (53/100): The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent.