portage-ng / portage / www-apps / zeppelin-bin / 0.11.2
version « ‹ 0.11.2 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference www-apps/zeppelin-bin · none place version 0.11.2 in a vulnerable range
▸ GLSA 202311-04 Zeppelin: Multiple Vulnerabilities this version unaffected high remote 2023-11-24

Multiple vulnerabilities have been discovered in Zeppelin, the worst of which could lead to remote code execution.

Announced
2023-11-24
Revised
2023-11-24
Access
remote
Bugs
#811447
Advisory
https://security.gentoo.org/glsa/202311-04

Affected packages

PackageArchVulnerableUnaffected
www-apps/zeppelin-bin*< 0.10.1>= 0.10.1

Background

Apache Zeppelin is a web-based notebook that enables data-driven, interactive data analytics and collaborative documents with SQL, Scala, Python, R and more.

Description

Multiple vulnerabilities have been discovered in Zeppelin. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Zeppelin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/zeppelin-bin-0.10.1"

References