MGASA-2023-0058
- Source
- https://advisories.mageia.org/MGASA-2023-0058.html
- Import Source
- https://advisories.mageia.org/MGASA-2023-0058.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2023-0058
- Related
- Published
- 2023-02-27T20:27:16Z
- Modified
- 2023-02-27T19:39:04Z
- Summary
- Updated ipython packages fix security vulnerability
- Details
-
Executed config files from the current working directory, which could result in cross-user attacks if run from a directory multiple users may write to. (CVE-2022-21699)
- References
-
- https://advisories.mageia.org/MGASA-2023-0058.html
- https://bugs.mageia.org/show_bug.cgi?id=29969
- https://www.debian.org/lts/security/2022/dla-2896
- https://www.debian.org/security/2022/dsa-5065
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DZ7LVZBB4D7KVSFNEQUBEHFO3JW6D2ZK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CRQRTWHYXMLDJ572VGVUZMUPEOTPM3KB/
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NTGOGG2ZEI7KLN4MVBRDQQ4FSIXPEKNL/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / ipython
Package
- Name
- ipython
- Purl
- pkg:rpm/mageia/ipython?distro=mageia-8