Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Mageia: 2024-0256 Critical Python-js2py Sandbox Escape Advisory

mageia
Calendar Grey July 5, 2024
Dist Mageia Esm H88
Mageia has rolled out MGASA-2024-0256, providing updates for python-js2py to mitigate significant security vulnerabilities related to potential sandbox breaches.
CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code References: - https://bugs.mageia.org/show_bug.cgi?id=33354

Summary

CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code

References

- https://bugs.mageia.org/show_bug.cgi?id=33354

- https://lwn.net/Articles/980387/

- https://www.cve.org/CVERecord?id=CVE-2024-28397

Topics%20covered

Topics Covered

security advisory security update critical sandbox escape mageia untrusted code python-js2py

Resolution

SRPMS

- 9/core/python-js2py-0.70-3.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 05 Jul 2024
URL: https://advisories.mageia.org/MGASA-2024-0256.html
Type: security
CVE: CVE-2024-28397

Topics%20covered

Topics Covered

security advisory security update critical sandbox escape mageia untrusted code python-js2py

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here