Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 41: FEDORA-2024-01e170c1ac moderate: python-nbdime security issue

fedora
Calendar Grey December 19, 2024
Dist Fedora Esm H88
This patch addresses a significant bug in python-nbdime impacting Fedora 41 users. For information on mitigating CVE-2024-55565, refer to the guidance provided.
This update fixes CVE-2024-55565 by updating the vendored JavaScript to include a version of nanoid without the security issue.

Summary

Nbdime provides tools for diffing and merging of Jupyter notebooks.

- nbdiff: compare notebooks in a terminal-friendly way

- nbmerge: three-way merge of notebooks with automatic conflict resolution

- nbdiff-web: shows you a rich rendered diff of notebooks

- nbmerge-web: gives you a web-based three-way merge tool for notebooks

- nbshow: present a single notebook in a terminal-friendly way

Update Information:

This update fixes CVE-2024-55565 by updating the vendored JavaScript to include a version of nanoid without the security issue.

Change Log

* Mon Dec 9 2024 Jerry James - 4.0.2-2 - CVE-2024-55565: update vendored nanoid

References


[ 1 ] Bug #2331111 - CVE-2024-55565 python-nbdime: nanoid mishandles non-integer values [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2331111

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-01e170c1ac' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: python-nbdime
Product: Fedora 41
Version: 4.0.2
Release: 2.fc41
Summary: Diff and merge of Jupyter notebooks

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here