Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 40: python-notebook security advisory FEDORA-2024-c4377d35e6

fedora
Calendar Grey December 17, 2024
Scroller Fedora
Fedora 40 enhancements for Python notebook address vulnerabilities such as cross-site scripting and flaws in input validation.
New jupyterlab and notebook fixing security vulnerabilities.

Summary

The Jupyter Notebook is a web application that allows you to create and

share documents that contain live code, equations, visualizations, and

explanatory text. The Notebook has support for multiple programming

languages, sharing, and interactive widgets.

Update Information:

New jupyterlab and notebook fixing security vulnerabilities.

Topics%20covered

Topics Covered

security advisory update Fedora cross-site scripting input validation Jupyter notebook

Change Log

* Sat Dec 7 2024 Lumir Balhar - 7.3.1-1 - Update to 7.3.1 (rhbz#2330305)

References


[ 1 ] Bug #2318704 - CVE-2024-21535 jupyterlab: Cross-site Scripting vulnerability in markdown-to-jsx [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2318704 [ 2 ] Bug #2322770 - jupyterlab-4.3.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2322770 [ 3 ] Bug #2328666 - CVE-2023-44270 jupyterlab: Improper input validation in PostCSS [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2328666 [ 4 ] Bug #2330305 - python-notebook-7.2.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2330305

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c4377d35e6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-notebook
Product: Fedora 40
Version: 7.3.1
Release: 1.fc40
URL: https://jupyter.org
Summary: A web-based notebook environment for interactive computing

Topics%20covered

Topics Covered

security advisory update Fedora cross-site scripting input validation Jupyter notebook

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.