发布于3月6日3月6日 Members SUSE: CVE-2024-39705: SUSE Linux Security Advisory Severity 4 CVSS (AV:L/AC:M/Au:N/C:P/I:P/A:P) Published 06/27/2024 Created 07/30/2024 Added 07/29/2024 Modified 07/29/2024 Description NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt. Solution(s) suse-upgrade-python3-nltk References https://attackerkb.com/topics/cve-2024-39705 CVE - 2024-39705