[SECURITY] [DSA 5065-1] ipython security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5065-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2022 https://www.debian.org/security/faq -...

Mageia: Security Advisory (MGASA-2014-0320)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2896-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2896-1] ipython security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2896-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 24, 2022 https://wiki.debian.org/LTS -...

DLA-2896-1 ipython - security update

Bulletin has no description...

Debian DLA-2896-1 : ipython - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2896 advisory. It was discovered that there was a potential arbitrary code execution vulnerability in IPython, the interactive Python shell. This issue stemmed from IPython executing...

aiida-core (=1.0.0), biocommons-seqrepo (>=0.3.5 <=0.4.5) +15 more potentially affected by CVE-2022-21699 via ipython (>=4.1.1 <=5.10.0)

ipython PYPI version =4.1.1, =0.3.5, =0.2.0, =2.0.0, =1.0.0b1, =1.0.0.post2, =0.0.7, =0.1.0, =0.1.6, =1.3.1, =0.4.0, =0.1.0, =0.10.0 - sklearn-plus =0.0.5 and more Source cves: CVE-2022-21699 Source advisory: OSV:GHSA-PQ7M-3GW7-GQ5X...

abracadabra (>=0.0.0 <=0.0.5), ai-economist (>=1.0.0 <=1.1.1) +106 more potentially affected by CVE-2022-21699 via ipython (>=6.0.0 <=7.16.1)

ipython PYPI version =6.0.0, =0.0.0, =1.0.0, =0.1.2, =0.0.4, =1.0.2, =0.10.0, =1.0.0, =0.0.4, =1.0.0rc1, =20210206.0.0, =2.2.2b1, =0.1.0, =0.3.4, =0.1.0rc1, =1.0.2 - civis-compute =0.2.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:GHSA-PQ7M-3GW7-GQ5X...

abracadabra (>=0.0.6 <=0.0.7), ai-economist (>=1.2.3 <=1.7.0) +133 more potentially affected by CVE-2022-21699 via ipython (>=7.17.0 <=7.31.0)

ipython PYPI version =7.17.0, =0.0.6, =1.2.3, =0.1.0, =0.1.2, =0.0.1b1, =0.0.27, =0.1.3, =1.0.1, =0.12.1, =1.1.1, =1.4.3 - c =0.1.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:GHSA-PQ7M-3GW7-GQ5X...

ang (=0.0.2), astx (>=0.5.0 <=0.6.0) +5 more potentially affected by CVE-2022-21699 via ipython (>=8.0.0 <=8.0.0rc1)

ipython PYPI version =8.0.0, =0.5.0, =1.3.0, =0.1.23, =0.1.3, =0.1.5 - quantum-viz =1.0.3 Source cves: CVE-2022-21699 Source advisory: OSV:GHSA-PQ7M-3GW7-GQ5X...

GHSA-PQ7M-3GW7-GQ5X Execution with Unnecessary Privileges in ipython

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. Proof of concept User1: mkdir -m 777 /tmp/profiledefault mkdir -m 777 /tmp/profiledefault/startup echo...

Execution with Unnecessary Privileges in ipython

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. Proof of concept User1: mkdir -m 777 /tmp/profiledefault mkdir -m 777 /tmp/profiledefault/startup echo...

Arbitrary Code Execution

ipython is vulnerable to arbitrary code execution. The vulnerability exists because the library does not properly manage the cross-user temporary files, allowing an attacker to run code as another user by executing malicious untrusted files through the current working directory...

DEBIAN-CVE-2022-21699

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

abracadabra (>=0.0.6 <=0.0.7), ai-economist (>=1.2.3 <=1.7.0) +133 more potentially affected by CVE-2022-21699 via ipython (>=7.17.0 <=7.31.0)

ipython PYPI version =7.17.0, =0.0.6, =1.2.3, =0.1.0, =0.1.2, =0.0.1b1, =0.0.27, =0.1.3, =1.0.1, =0.12.1, =1.1.1, =1.4.3 - c =0.1.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

Remote code execution

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

PYSEC-2022-12

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

UBUNTU-CVE-2022-21699

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...