Skip to content

Commit 50bdefc

Browse files
sirutBuasaisirutBuasai
authored
Patch jupyter allowlist (#4962)
* Patch jupyter notebook allowlist * patch arm64 images * fix pinned version * add tf 218 * revert core packages
1 parent c15892a commit 50bdefc

10 files changed

+421
-49
lines changed

‎pytorch/training/docker/2.4/py3/Dockerfile.ec2.cpu.os_scan_allowlist.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,5 +58,36 @@
5858
"title": "CVE-2025-32434 - torch",
5959
"reason_to_ignore": "N/A"
6060
}
61+
],
62+
"jupyter_core": [
63+
{
64+
"description": "Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user).",
65+
"vulnerability_id": "CVE-2025-30167",
66+
"name": "CVE-2025-30167",
67+
"package_name": "jupyter_core",
68+
"package_details": {
69+
"file_path": "/opt/conda/lib/python3.11/site-packages/jupyter_core-5.7.2.dist-info/METADATA",
70+
"name": "jupyter_core",
71+
"package_manager": "PYTHON",
72+
"version": "5.7.2",
73+
"release": null
74+
},
75+
"remediation": {
76+
"recommendation": {
77+
"text": "None Provided"
78+
}
79+
},
80+
"cvss_v3_score": 7.3,
81+
"cvss_v30_score": 0.0,
82+
"cvss_v31_score": 7.3,
83+
"cvss_v2_score": 0.0,
84+
"cvss_v3_severity": "HIGH",
85+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30167",
86+
"source": "NVD",
87+
"severity": "HIGH",
88+
"status": "ACTIVE",
89+
"title": "CVE-2025-30167 - jupyter_core",
90+
"reason_to_ignore": "N/A"
91+
}
6192
]
6293
}

‎pytorch/training/docker/2.4/py3/Dockerfile.sagemaker.cpu.os_scan_allowlist.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -118,5 +118,36 @@
118118
"title": "CVE-2025-32414 - libxml2",
119119
"reason_to_ignore": "N/A"
120120
}
121+
],
122+
"jupyter_core": [
123+
{
124+
"description": "Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user).",
125+
"vulnerability_id": "CVE-2025-30167",
126+
"name": "CVE-2025-30167",
127+
"package_name": "jupyter_core",
128+
"package_details": {
129+
"file_path": "/opt/conda/lib/python3.11/site-packages/jupyter_core-5.7.2.dist-info/METADATA",
130+
"name": "jupyter_core",
131+
"package_manager": "PYTHON",
132+
"version": "5.7.2",
133+
"release": null
134+
},
135+
"remediation": {
136+
"recommendation": {
137+
"text": "None Provided"
138+
}
139+
},
140+
"cvss_v3_score": 7.3,
141+
"cvss_v30_score": 0.0,
142+
"cvss_v31_score": 7.3,
143+
"cvss_v2_score": 0.0,
144+
"cvss_v3_severity": "HIGH",
145+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30167",
146+
"source": "NVD",
147+
"severity": "HIGH",
148+
"status": "ACTIVE",
149+
"title": "CVE-2025-30167 - jupyter_core",
150+
"reason_to_ignore": "N/A"
151+
}
121152
]
122153
}

‎pytorch/training/docker/2.4/py3/cu124/Dockerfile.ec2.gpu.os_scan_allowlist.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -907,5 +907,36 @@
907907
"title": "CVE-2025-32434 - torch",
908908
"reason_to_ignore": "N/A"
909909
}
910+
],
911+
"jupyter_core": [
912+
{
913+
"description": "Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user).",
914+
"vulnerability_id": "CVE-2025-30167",
915+
"name": "CVE-2025-30167",
916+
"package_name": "jupyter_core",
917+
"package_details": {
918+
"file_path": "/opt/conda/lib/python3.11/site-packages/jupyter_core-5.7.2.dist-info/METADATA",
919+
"name": "jupyter_core",
920+
"package_manager": "PYTHON",
921+
"version": "5.7.2",
922+
"release": null
923+
},
924+
"remediation": {
925+
"recommendation": {
926+
"text": "None Provided"
927+
}
928+
},
929+
"cvss_v3_score": 7.3,
930+
"cvss_v30_score": 0.0,
931+
"cvss_v31_score": 7.3,
932+
"cvss_v2_score": 0.0,
933+
"cvss_v3_severity": "HIGH",
934+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30167",
935+
"source": "NVD",
936+
"severity": "HIGH",
937+
"status": "ACTIVE",
938+
"title": "CVE-2025-30167 - jupyter_core",
939+
"reason_to_ignore": "N/A"
940+
}
910941
]
911942
}

‎pytorch/training/docker/2.4/py3/cu124/Dockerfile.sagemaker.gpu.os_scan_allowlist.json

Lines changed: 53 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -784,19 +784,17 @@
784784
"status": "ACTIVE",
785785
"title": "CVE-2023-39325 - golang.org/x/net",
786786
"reason_to_ignore": "N/A"
787-
}
788-
],
789-
"org.apache.ant:ant": [
787+
},
790788
{
791-
"description": "As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.",
792-
"vulnerability_id": "CVE-2020-11979",
793-
"name": "CVE-2020-11979",
794-
"package_name": "org.apache.ant:ant",
789+
"description": "An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.",
790+
"vulnerability_id": "CVE-2023-45288",
791+
"name": "CVE-2023-45288",
792+
"package_name": "golang.org/x/net",
795793
"package_details": {
796-
"file_path": "/usr/local/cuda-12.4/libnvvp/plugins/org.apache.ant_1.9.2.v201404171502/lib/ant.jar",
797-
"name": "org.apache.ant:ant",
798-
"package_manager": "JAVA",
799-
"version": "1.9.2",
794+
"file_path": "/opt/nvidia/nsight-systems/2023.4.4/host-linux-x64/Scripts/WebRTCContainer/setup/neko/server/bin/neko",
795+
"name": "golang.org/x/net",
796+
"package_manager": "GO",
797+
"version": "v0.1.0",
800798
"release": null
801799
},
802800
"remediation": {
@@ -809,25 +807,25 @@
809807
"cvss_v31_score": 7.5,
810808
"cvss_v2_score": 0.0,
811809
"cvss_v3_severity": "HIGH",
812-
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11979",
810+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45288",
813811
"source": "NVD",
814812
"severity": "HIGH",
815813
"status": "ACTIVE",
816-
"title": "CVE-2020-11979 - org.apache.ant:ant",
814+
"title": "CVE-2023-45288 - go/stdlib, golang.org/x/net",
817815
"reason_to_ignore": "N/A"
818816
}
819817
],
820-
"golang.org/x/net": [
818+
"org.apache.ant:ant": [
821819
{
822-
"description": "An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.",
823-
"vulnerability_id": "CVE-2023-45288",
824-
"name": "CVE-2023-45288",
825-
"package_name": "golang.org/x/net",
820+
"description": "As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.",
821+
"vulnerability_id": "CVE-2020-11979",
822+
"name": "CVE-2020-11979",
823+
"package_name": "org.apache.ant:ant",
826824
"package_details": {
827-
"file_path": "/opt/nvidia/nsight-systems/2023.4.4/host-linux-x64/Scripts/WebRTCContainer/setup/neko/server/bin/neko",
828-
"name": "golang.org/x/net",
829-
"package_manager": "GO",
830-
"version": "v0.1.0",
825+
"file_path": "/usr/local/cuda-12.4/libnvvp/plugins/org.apache.ant_1.9.2.v201404171502/lib/ant.jar",
826+
"name": "org.apache.ant:ant",
827+
"package_manager": "JAVA",
828+
"version": "1.9.2",
831829
"release": null
832830
},
833831
"remediation": {
@@ -840,11 +838,11 @@
840838
"cvss_v31_score": 7.5,
841839
"cvss_v2_score": 0.0,
842840
"cvss_v3_severity": "HIGH",
843-
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45288",
841+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11979",
844842
"source": "NVD",
845843
"severity": "HIGH",
846844
"status": "ACTIVE",
847-
"title": "CVE-2023-45288 - go/stdlib, golang.org/x/net",
845+
"title": "CVE-2020-11979 - org.apache.ant:ant",
848846
"reason_to_ignore": "N/A"
849847
}
850848
],
@@ -967,5 +965,36 @@
967965
"title": "CVE-2025-32414 - libxml2",
968966
"reason_to_ignore": "N/A"
969967
}
968+
],
969+
"jupyter_core": [
970+
{
971+
"description": "Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user).",
972+
"vulnerability_id": "CVE-2025-30167",
973+
"name": "CVE-2025-30167",
974+
"package_name": "jupyter_core",
975+
"package_details": {
976+
"file_path": "/opt/conda/lib/python3.11/site-packages/jupyter_core-5.7.2.dist-info/METADATA",
977+
"name": "jupyter_core",
978+
"package_manager": "PYTHON",
979+
"version": "5.7.2",
980+
"release": null
981+
},
982+
"remediation": {
983+
"recommendation": {
984+
"text": "None Provided"
985+
}
986+
},
987+
"cvss_v3_score": 7.3,
988+
"cvss_v30_score": 0.0,
989+
"cvss_v31_score": 7.3,
990+
"cvss_v2_score": 0.0,
991+
"cvss_v3_severity": "HIGH",
992+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30167",
993+
"source": "NVD",
994+
"severity": "HIGH",
995+
"status": "ACTIVE",
996+
"title": "CVE-2025-30167 - jupyter_core",
997+
"reason_to_ignore": "N/A"
998+
}
970999
]
9711000
}

‎pytorch/training/docker/2.5/py3/Dockerfile.ec2.cpu.os_scan_allowlist.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,5 +58,36 @@
5858
"title": "CVE-2025-32434 - torch",
5959
"reason_to_ignore": "N/A"
6060
}
61+
],
62+
"jupyter_core": [
63+
{
64+
"description": "Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by unauthorized users; or as administrator, create the `%PROGRAMDATA%\\jupyter` directory with appropriately restrictive permissions; or as user or administrator, set the `%PROGRAMDATA%` environment variable to a directory with appropriately restrictive permissions (e.g. controlled by administrators _or_ the current user).",
65+
"vulnerability_id": "CVE-2025-30167",
66+
"name": "CVE-2025-30167",
67+
"package_name": "jupyter_core",
68+
"package_details": {
69+
"file_path": "/opt/conda/lib/python3.11/site-packages/jupyter_core-5.7.2.dist-info/METADATA",
70+
"name": "jupyter_core",
71+
"package_manager": "PYTHON",
72+
"version": "5.7.2",
73+
"release": null
74+
},
75+
"remediation": {
76+
"recommendation": {
77+
"text": "None Provided"
78+
}
79+
},
80+
"cvss_v3_score": 7.3,
81+
"cvss_v30_score": 0.0,
82+
"cvss_v31_score": 7.3,
83+
"cvss_v2_score": 0.0,
84+
"cvss_v3_severity": "HIGH",
85+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30167",
86+
"source": "NVD",
87+
"severity": "HIGH",
88+
"status": "ACTIVE",
89+
"title": "CVE-2025-30167 - jupyter_core",
90+
"reason_to_ignore": "N/A"
91+
}
6192
]
6293
}

0 commit comments

Comments
 (0)