Fedora 37 : python-joblib (2022-c83ce1c000)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c83ce1c000 advisory. Security fix for CVE-2022-21797 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

GLSA-202401-01 : Joblib: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202401-01 Joblib: Arbitrary Code Execution - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement. CVE-2022-21797 Note that Ness...

FreeBSD : py39-joblib -- arbitrary code execution (845f8430-d0ee-4134-ae35-480a3e139b8a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 845f8430-d0ee-4134-ae35-480a3e139b8a advisory. - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the...

[SECURITY] [DLA 3193-2] joblib security update

Debian LTS Advisory DLA-3193-2 [email protected] https://www.debian.org/lts/security/ Helmut Grohne March 30, 2023 https://wiki.debian.org/LTS Package : joblib Version : 0.13.0-2+deb10u2 CVE ID : CVE-2022-21797 Debian Bug : 1020820 It was discovered that joblib did not completely saniti...

SUSE CVE-2022-21797

The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...

openSUSE 15 Security Update : python-joblib (openSUSE-SU-2022:10214-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10214-1 advisory. - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval...

OPENSUSE-SU-2022:10214-1 Security update for python-joblib

This update for python-joblib fixes the following issues: - CVE-2022-21797: Fixed arbitrary code execution in joblib boo1204232...

Security update for python-joblib (important)

openSUSE Security Update: Security update for python-joblib Announcement ID: openSUSE-SU-2022:10214-1 Rating: important References: 1204232 Cross-References: CVE-2022-21797 CVSS scores: CVE-2022-21797 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that enable the assisted mapping capability may be vulnerable to arbitrary code injection due to CVE-2022-21797

Summary Python module Joblib used by IBM App Connect Enterprise Certified Container for mapping assistance in flow development. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that enable mapping assistance may be vulnerable to arbitrary code injection. This bulletin...

Updated python-joblib packages fix security vulnerability

Arbitrary Code Execution in joblib CVE-2022-21797...

OESA-2022-1990 python-joblib security update

Joblib is a set of tools to provide lightweight pipelining in Python. Security Fixes: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement.CVE-2022-21797...

annif (>=0.50.0, <=0.52.0), aquariumlearning (>=0.0.19, <=1.0.0) +47 more potentially affected by CVE-2022-21797 via joblib (0.17.0)

joblib PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - annif =0.50.0, =0.0.19, =0.1.7, =1.1.19, =0.0.1, =0.4.0, =0.0.3, =0.1.0, =0.0.13, =0.1.1, =0.1.1, =0.3.1 and more Source cves: CVE-2022-21797 Sourc...

a2g (2020.0.1), arus (>=1.1.10, <=1.1.18) +51 more potentially affected by CVE-2022-21797 via joblib (0.16.0)

joblib PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - a2g 2020.0.1 - arus =1.1.10, =0.1.0, =1.0.0, =1.1.0, =0.2.4, =0.0.1, =0.1.0, =0.1.5.0, =0.1.6.1 and more Source cves: CVE-2022-21797 Source advisor...

azureml-designer-classic-modules (>=0.0.118, <=0.0.129), dimepy (1.0.1) +15 more potentially affected by CVE-2022-21797 via joblib (0.14.0)

joblib PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - azureml-designer-classic-modules =0.0.118, =1.0.0rc1, =0.0.1, =2019.0.2, =0.0.3, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2022-21797 Source...

111752 (1.1.1), a2ml (>=0.3.8, <=0.5.0rc9) +81 more potentially affected by CVE-2022-21797 via joblib (0.14.1)

joblib PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - 111752 1.1.1 - a2ml =0.3.8, =0.1.1, =0.45.0, =0.1.2, =1.37.0, =1.37.0, =1.13.0, =1.13.0, =1.13.0, =1.13.0, =1.38.1, =0.13.0, =1.0.0, =1.0.1 and mor...

actinia-core (4.2.0), ailab-lite (>=0.1.1, <=0.1.14) +23 more potentially affected by CVE-2022-21797 via joblib (0.15.1)

joblib PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - actinia-core 4.2.0 - ailab-lite =0.1.1, =0.0.3, =1.1.0, =0.1.4, =0.1.0a1, =1.0.0, =0.1.0, =0.0.2, =0.1.1, =0.3.6 and more Source cves: CVE-2022-217...

a2ml (>=1.0.20, <=1.0.55), accelerometer (>=4.2.1, <=7.5.0) +332 more potentially affected by CVE-2022-21797 via joblib (>=1.0.0, <=1.1.1)

joblib PYPI version =1.0.0, =1.0.20, =4.2.1, =1.0.88, =1.0.32, =1.3.0, =1.0.0, =0.20211108144632.0, =0.2.7, =0.1.0, =0.1.5, =0.53.0, =0.0.1, =1.0.1, =1.3.1 and more Source cves: CVE-2022-21797 Source advisory: GHSA-6HRG-QMVC-2XH8...

adversarial-labeller (>=0.1.2, <=0.1.7), aggmap (>=1.1.1, <=1.1.7) +39 more potentially affected by CVE-2022-21797 via joblib (0.13.2)

joblib PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - adversarial-labeller =0.1.2, =1.1.1, =0.42.0, =0.1.0, =2.0.0a4, =0.1.0, =0.65.0, =0.0.1, =1.21.0, =7.0.0rc0, =1.3.0, =0.2.0, =0.2.2 and more Source...

learn2clean (0.2.1.1) potentially affected by CVE-2022-21797 via joblib (0.13.1)

joblib PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - learn2clean 0.2.1.1 Source cves: CVE-2022-21797 Source advisory: OSV:PYSEC-2022-288...

breidablik (>=0.6.4, <=0.6.5), cif2bin (>=0.0.4, <=0.0.6) +5 more potentially affected by CVE-2022-21797 via joblib (0.13.0)

joblib PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on joblib and may be impacted: - breidablik =0.6.4, =0.0.4, =0.0.1, =0.1.2, =0.9.0, =0.11.1 Source cves: CVE-2022-21797 Source advisory: OSV:PYSEC-2022-288...