Subject: bug#53670: closed (Re: bug#53670: ipython CVE-2022-21699)

From: [email-masked] (GNU bug Tracking System)
Date: Sat, 14 May 2022 05:24:02 +0000

Your bug report

#53670: ipython CVE-2022-21699

which was filed against the guix package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
53670: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=53670
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#53670: ipython CVE-2022-21699
From: Maxim Cournoyer <[email-masked]>
To: Leo Famulari <[email-masked]>
Cc: [email-masked]
Date: Sat, 14 May 2022 01:23:43 -0400
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi,

Leo Famulari <[email-masked]> writes:

> Python (Interactive Python) is a command shell for interactive computing
> in multiple programming languages, originally developed for the Python
> programming language. Affected versions are subject to an arbitrary code
> execution vulnerability achieved by not properly managing cross user
> temporary files. This vulnerability allows one user to run code as
> another on the same machine. 
>
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21699
> https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x

Fixed with 1c8264d62e16f404786d9b526511cea29138ab9f.

Thanks for the report!

Maxim

Subject: ipython CVE-2022-21699
From: Leo Famulari <[email-masked]>
To: [email-masked]
Date: Mon, 31 Jan 2022 15:28:21 -0500
List-Id: <debbugs-submit.debbugs.gnu.org>

Python (Interactive Python) is a command shell for interactive computing
in multiple programming languages, originally developed for the Python
programming language. Affected versions are subject to an arbitrary code
execution vulnerability achieved by not properly managing cross user
temporary files. This vulnerability allows one user to run code as
another on the same machine. 

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21699
https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x