CVE-2024-55459

Publication date 8 January 2025

Last updated 15 January 2025


Ubuntu priority

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

Status

Package Ubuntu Release Status
keras 24.10 oracular Not in release
24.04 LTS noble Not in release
22.04 LTS jammy Not in release
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation