VDB
Sign up
—

PYSEC-2018-105

Quick fix

PYSEC-2018-105 — borgbackup: upgrade to the fixed version with the command below.

pip install --upgrade 'borgbackup>=1.1.3'

Details

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/borgbackup
Introduced in: 1.1.0b1Fixed in: 1.1.3
Fixpip install --upgrade 'borgbackup>=1.1.3'

References