CVE-2022-25883

Advisory

Rocketlogger 2.1.2 updates its dependency 'semver' to version '7.5.4' to include a fix for a ReDoS vulnerability.
https://github.com/ETHZ-TEC/RocketLogger/commit/6142c0e8d2bb6bcba2409f4a48ffaa2952d6d99f

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* [ADD] Document and test compatibility of Python support library with numpy 1.24 and 1.25
* [ADD] GitLab CI for testing documentation generation (relates to 105)
* [CHANGED] Update web server dependencies with security patches
* [FIX] Improved SD card mount reliability (107)
* [FIX] Automated release documentation generation (105)
* [FIX] Image patching script failure with latest docker images


_Notes:_

This bugfix release address SD card reliability problems, fixes release documentation generation, and updates web server dependencies with security patches.
Further, the compatibility of Python support library with latest numpy releases is tested and documented.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25883