Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Fedora 30: FEDORA-2019-a6e1287e76 Critical: Python-Notebook Open Redirect

fedora
Calendar Grey April 7, 2019
Dist Fedora Esm H88
Essential security patch released for python-notebook on Fedora to mitigate XSSI and open redirect vulnerabilities. Upgrade recommended.
Security fix for CVE-2019-10255, CVE-2019-9644.

Summary

The Jupyter Notebook is a web application that allows you to create and

share documents that contain live code, equations, visualizations, and

explanatory text. The Notebook has support for multiple programming

languages, sharing, and interactive widgets.

Security fix for CVE-2019-10255, CVE-2019-9644.

[ 1 ] Bug #1694274 - CVE-2019-10255 python-notebook: Open redirect vulnerability in the login page

https://bugzilla.redhat.com/show_bug.cgi?id=1694274

[ 2 ] Bug #1689855 - CVE-2019-9644 python-notebook: XSSI due to invalid javascript

https://bugzilla.redhat.com/show_bug.cgi?id=1689855

su -c 'dnf upgrade --advisory FEDORA-2019-a6e1287e76' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 5.7.8
Release: 1.fc30
Summary: A web-based notebook environment for interactive computing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here