From 29704ec7e5755207abcd2a1cfe48ecf353c37a9c Mon Sep 17 00:00:00 2001 From: Ivan Chvets Date: Thu, 6 Jul 2023 14:32:53 -0400 Subject: [PATCH 1/4] cve: adding CVE-2022-29458 --- security/active/CVE-2022-29458 | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 security/active/CVE-2022-29458 diff --git a/security/active/CVE-2022-29458 b/security/active/CVE-2022-29458 new file mode 100644 index 00000000..bd186e16 --- /dev/null +++ b/security/active/CVE-2022-29458 @@ -0,0 +1,7 @@ +Notes-Kubeflow: + i-chvets> Compromised package libncursesw6 is not unitilised by Jupyter Web UI component. + i-chvets> Not exploitable from frontend. Ignoring. + +https://git.launchpad.net/ubuntu-cve-tracker/tree/retired/CVE-2022-29458 + +jupyter-ui: ignored (not expolitable) From 2f0d70639ad6934b19d1f9434b48a9b1396a9c41 Mon Sep 17 00:00:00 2001 From: Ivan Chvets Date: Thu, 6 Jul 2023 14:40:41 -0400 Subject: [PATCH 2/4] fix: updated language --- security/active/CVE-2022-29458 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/active/CVE-2022-29458 b/security/active/CVE-2022-29458 index bd186e16..573256f5 100644 --- a/security/active/CVE-2022-29458 +++ b/security/active/CVE-2022-29458 @@ -1,5 +1,5 @@ Notes-Kubeflow: - i-chvets> Compromised package libncursesw6 is not unitilised by Jupyter Web UI component. + i-chvets> Compromised package libncursesw6 is not used by Jupyter Web UI component. i-chvets> Not exploitable from frontend. Ignoring. https://git.launchpad.net/ubuntu-cve-tracker/tree/retired/CVE-2022-29458 From a700da35c070873cf5d972cc7b659681340d2b7b Mon Sep 17 00:00:00 2001 From: Ivan Chvets Date: Thu, 6 Jul 2023 14:43:53 -0400 Subject: [PATCH 3/4] fix: updated component --- security/active/CVE-2022-29458 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/active/CVE-2022-29458 b/security/active/CVE-2022-29458 index 573256f5..26991aa6 100644 --- a/security/active/CVE-2022-29458 +++ b/security/active/CVE-2022-29458 @@ -4,4 +4,4 @@ Notes-Kubeflow: https://git.launchpad.net/ubuntu-cve-tracker/tree/retired/CVE-2022-29458 -jupyter-ui: ignored (not expolitable) +container: jupyter-web-app:v1.7.0 ignored (not expolitable) From c7b153f7df0db5b6d015f067f68bcb53b0876e57 Mon Sep 17 00:00:00 2001 From: Ivan Chvets Date: Thu, 6 Jul 2023 14:44:40 -0400 Subject: [PATCH 4/4] fix: fixed format --- security/active/CVE-2022-29458 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/active/CVE-2022-29458 b/security/active/CVE-2022-29458 index 26991aa6..5ea08580 100644 --- a/security/active/CVE-2022-29458 +++ b/security/active/CVE-2022-29458 @@ -4,4 +4,4 @@ Notes-Kubeflow: https://git.launchpad.net/ubuntu-cve-tracker/tree/retired/CVE-2022-29458 -container: jupyter-web-app:v1.7.0 ignored (not expolitable) +container jupyter-web-app:v1.7.0: ignored (not expolitable)