—

PYSEC-2015-35

Quick fix

PYSEC-2015-35 — dulwich: upgrade to the fixed version with the command below.

pip install --upgrade 'dulwich>=0.9.9'

Details

Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/dulwich

Introduced in: 0Fixed in: 0.9.9

Fixpip install --upgrade 'dulwich>=0.9.9'

References

http://www.debian.org/security/2015/dsa-3206[ADVISORY]
https://lists.launchpad.net/dulwich-users/msg00829.html[WEB]
https://github.com/advisories/GHSA-vjjf-3rvg-gv3v[ADVISORY]