-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 17 Nov 2022 12:16:23 +0100 Source: jupyter-core Architecture: source Version: 4.4.0-2+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org> Changed-By: Dominik George <natureshadow@debian.org> Closes: 1023361 Changes: jupyter-core (4.4.0-2+deb10u1) buster-security; urgency=medium . * Non-maintainer upload by the LTS Security Team. * CVE-2022-39286: Fix arbitrarycode execution when loading config files. (Closes: #1023361) Checksums-Sha1: 44746d77c534fc8e9d71f9dfcebdf61aadb609d9 2167 jupyter-core_4.4.0-2+deb10u1.dsc 04fe74c545381a0b6894cdb840189adf09090072 59781 jupyter-core_4.4.0.orig.tar.gz 55e34bb480f8b219851ffb7e47a692652d2555ba 7316 jupyter-core_4.4.0-2+deb10u1.debian.tar.xz 82a73d62978a1b988c093e4a178aa0f3f2f15d4c 9654 jupyter-core_4.4.0-2+deb10u1_amd64.buildinfo Checksums-Sha256: ff34a1d59fb12284838492f6b4dbcfae5f97a6661fd06ae0ab01ea62eba87702 2167 jupyter-core_4.4.0-2+deb10u1.dsc a3c693cb4cd1251f887f034eba4b74e5ad1beab5baef43cc3ae9387450e72367 59781 jupyter-core_4.4.0.orig.tar.gz 3b59cd37b2aad175af5530f3738a97cb63cb3a9f9544704bd20f71f73dc7c8fe 7316 jupyter-core_4.4.0-2+deb10u1.debian.tar.xz 5b863bcbc1b45bafb83ad5253a102151211eeb3355d7895c102d6f45cf942db6 9654 jupyter-core_4.4.0-2+deb10u1_amd64.buildinfo Files: 7a53997710eebb0ee44b1b1a1e1ab26c 2167 python optional jupyter-core_4.4.0-2+deb10u1.dsc f2bdb8be2959d3043b77508dd6498687 59781 python optional jupyter-core_4.4.0.orig.tar.gz 6bb18ec98d8c53842fee4e105e451406 7316 python optional jupyter-core_4.4.0-2+deb10u1.debian.tar.xz 261438669ae2f83771717ca46fc1ebff 9654 python optional jupyter-core_4.4.0-2+deb10u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iKcEARYKAE8WIQSk6zxRYJYchegBkTEK5VTlRg4b3QUCY3YcETEaaHR0cHM6Ly93 d3cuZG9taW5pay1nZW9yZ2UuZGUvZ3BnLXBvbGljeS50eHQuYXNjAAoJEArlVOVG Dhvdg5IBAPZcAlizeVOHV2jBSSRCVq/MjO62vm9Vxz7Qc+iPhUPfAQDmvXVQfTVG LwONn5KcI2h85xZwO2V6/4Kx72zlmDqoAQ== =6iE6 -----END PGP SIGNATURE-----