[Git][security-tracker-team/security-tracker][master] new jupyter-issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
86356e00 by Moritz Muehlenhoff at 2023-09-04T12:20:34+02:00
new jupyter-issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1062,7 +1062,11 @@ CVE-2023-40825 (An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker
 CVE-2023-40781 (Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remo ...)
 	- ming <removed>
 CVE-2023-39968 (jupyter-server is the backend for Jupyter web applications. Open Redir ...)
-	TODO: check
+	- jupyter-server <unfixed>
+	[bookworm] - jupyter-server <no-dsa> (Minor issue)
+	[bullseye] - jupyter-server <no-dsa> (Minor issue)
+	NOTE: https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-r726-vmfq-j9j3
+	NOTE: https://github.com/jupyter-server/jupyter_server/commit/290362593b2ffb23c59f8114d76f77875de4b925 (v2.7.2)
 CVE-2023-39650 (Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a  ...)
 	NOT-FOR-US: Theme Volty CMS Blog
 CVE-2023-39059 (An issue in ansible semaphore v.2.8.90 allows a remote attacker to exe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86356e005b4953b8a9f88ba21527d07ed157ffab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/86356e005b4953b8a9f88ba21527d07ed157ffab
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230904/b0d739c4/attachment.htm>