[Git][security-tracker-team/security-tracker][master] new jupyter-server issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6f34cd39 by Moritz Muehlenhoff at 2023-09-04T12:29:36+02:00
new jupyter-server issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1137,7 +1137,11 @@ CVE-2023-40748 (PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) v
 CVE-2023-40590 (GitPython is a python library used to interact with Git repositories.  ...)
 	- python-git <not-affected> (Only affects python-git on Windows)
 CVE-2023-40170 (jupyter-server is the backend for Jupyter web applications. Improper c ...)
-	TODO: check
+	- jupyter-server <unfixed>
+	[bookworm] - jupyter-server <no-dsa> (Minor issue)
+	[bullseye] - jupyter-server <no-dsa> (Minor issue)
+	NOTE: https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-64x5-55rw-9974
+	NOTE: https://github.com/jupyter-server/jupyter_server/commit/87a4927272819f0b1cae1afa4c8c86ee2da002fd (v2.7.2)
 CVE-2023-39810 (An issue in the CPIO command of Busybox v1.33.2 allows attackers to ex ...)
 	- busybox <unfixed>
 	[bookworm] - busybox <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f34cd3942e1708c3f64e018642f2c686b23dc59

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6f34cd3942e1708c3f64e018642f2c686b23dc59
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230904/657488ce/attachment.htm>