ALT-BU-2025-6182-1
Branch c10f2 update bulletin.
Closed vulnerabilities
BDU:2022-05761
Уязвимость команды shell командной оболочки для интерактивных вычислений IPython, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2022-21699
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.
- https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668
- https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668
- https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x
- https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x
- https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
- https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699
- [debian-lts-announce] 20220124 [SECURITY] [DLA 2896-1] ipython security update
- [debian-lts-announce] 20220124 [SECURITY] [DLA 2896-1] ipython security update
- FEDORA-2022-b58d156ab0
- FEDORA-2022-b58d156ab0
- FEDORA-2022-b9e38f8a56
- FEDORA-2022-b9e38f8a56
Closed vulnerabilities
BDU:2022-01836
Уязвимость функции ReadInt32DataDouble библиотеки для чтения и записи файлов MATLAB MATIO, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2019-13107
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
- https://github.com/tbeu/matio/compare/f8cd397...fabac6c
- https://github.com/tbeu/matio/compare/f8cd397...fabac6c
- https://github.com/tbeu/matio/pull/118
- https://github.com/tbeu/matio/pull/118
- https://github.com/tbeu/matio/releases/tag/v1.5.16
- https://github.com/tbeu/matio/releases/tag/v1.5.16
- FEDORA-2019-a1a2f55fcf
- FEDORA-2019-a1a2f55fcf
Modified: 2024-11-21
CVE-2020-36428
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
Modified: 2024-11-21
CVE-2022-1515
A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.