CVE-2019-16328

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

- Fixed `CVE-2019-16328`_ which was caused by a missing protocol security check
- Fixed RPyC over RPyC for mutable parameters and extended unit testing for `346`_

.. _CVE-2019-16328: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16328
.. _346: https://github.com/tomerfiliba/rpyc/issues/346

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16328
• https://rpyc.readthedocs.io/en/latest/docs/security.html
• https://github.com/tomerfiliba/rpyc
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00046.html
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00004.html