Execution with Unnecessary Privileges in ipython
概要
Execution with Unnecessary Privileges in ipython
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2022-21699 ipython 修正版: 7.20.0-1+deb11u1
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- package github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web ipython.readthedocs.io
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org