100 matches found
Debian: Security Advisory (DLA-3193-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3193-1] joblib security update
Debian LTS Advisory DLA-3193-1 [email protected] https://www.debian.org/lts/security/ Dominik George November 17, 2022 https://wiki.debian.org/LTS Package : joblib Version : 0.13.0-2+deb10u1 CVE ID : CVE-2022-21797 Debian Bug : 1020820 It was discovered that joblib did not properly...
Debian dla-3193 : python-joblib - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3193 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3193-1 [email protected] https://www.debian.org/lts/security/...
Fedora: Security Advisory for python-joblib (FEDORA-2022-c83ce1c000)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: python-joblib-1.2.0-1.fc37
Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that enable the assisted mapping capability may be vulnerable to arbitrary code injection due to CVE-2022-21797
Summary Python module Joblib used by IBM App Connect Enterprise Certified Container for mapping assistance in flow development. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that enable mapping assistance may be vulnerable to arbitrary code injection. This bulletin...
Mageia: Security Advisory (MGASA-2022-0375)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated python-joblib packages fix security vulnerability
Arbitrary Code Execution in joblib CVE-2022-21797...
MGASA-2022-0375 Updated python-joblib packages fix security vulnerability
Arbitrary Code Execution in joblib CVE-2022-21797...
OESA-2022-1990 python-joblib security update
Joblib is a set of tools to provide lightweight pipelining in Python. Security Fixes: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement.CVE-2022-21797...
Fedora: Security Advisory for python-joblib (FEDORA-2022-c0bfe37ae5)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: python-joblib-1.2.0-1.fc36
Joblib is a set of tools to provide lightweight pipelining in Python. In particular, joblib offers: transparent disk-caching of the output values and lazy re-evaluation memorize pattern easy simple parallel computing logging and tracing of the execution...
Arbitrary Code Execution
joblib is vulnerable to arbitrary code execution. The vulnerability exists in batchedcallsreducercallback function of parallel.py via the predispatched flag in Parallel class due to the eval statement. When the attacker enters a statement in the flag predispatch it will run whatever the attacker...
GHSA-6HRG-QMVC-2XH8 joblib vulnerable to arbitrary code execution
The package joblib from 0 and before 1.2.0 is vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...
joblib vulnerable to arbitrary code execution
The package joblib from 0 and before 1.2.0 is vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...
CVE-2022-21797
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...
DEBIAN-CVE-2022-21797
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...
Code injection
The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement...
