Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 9: MGASA-2024-0067 Critical: Jupyter-Notebook Path Traversal and DoS

mageia
Calendar Grey March 16, 2024
Dist Mageia Esm H88
The latest security patch for jupyter-notebook in Mageia mitigates various security flaws, notably path traversal issues and denial-of-service (DoS) vulnerabilities.
Path traversal in moment.locale

Summary

Path traversal in moment.locale. (CVE-2022-24785) Inefficient parsing algorithim resulting in DoS. (CVE-2022-31129)

References

- https://bugs.mageia.org/show_bug.cgi?id=30664

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/

- https://ubuntu.com/security/notices/USN-5559-1

- https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html

- https://www.cve.org/CVERecord?id=CVE-2022-24785

- https://www.cve.org/CVERecord?id=CVE-2022-31129

Topics%20covered

Topics Covered

security advisory security issue DoS path traversal Mageia Jupyter Notebook

Resolution

SRPMS

- 9/core/jupyter-notebook-6.4.12-1.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 16 Mar 2024
URL: https://advisories.mageia.org/MGASA-2024-0067.html
Type: security
CVE: CVE-2022-24785, CVE-2022-31129

Topics%20covered

Topics Covered

security advisory security issue DoS path traversal Mageia Jupyter Notebook

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here