Updated ipython packages fix CVE-2015-6938

2015-09-1517:55:06

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.7%

JSON

Updated ipython packages fix security vulnerability: In IPython, local folder name was used in HTML templates without escaping, allowing XSS in said pages by carefully crafting folder name and URL to access it (CVE-2015-6938).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchipython< 2.3.0-1.2ipython-2.3.0-1.2.mga4
Mageia5noarchipython< 2.3.0-2.3ipython-2.3.0-2.3.mga5