Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 22.04 LTS: USN-7464-1 critical: Jupyter Notebook ReDoS

ubuntu
Calendar Grey April 28, 2025
Dist Ubuntu Esm H88
A significant vulnerability in Jupyter Notebook permits system crashes triggered by specially designed input. Ensure you update your Ubuntu packages without delay.
Jupyter Notebook could be made to crash if it received specially crafted input.

Summary

Jupyter Notebook could be made to crash if it received specially crafted

input.

Software Description:

- jupyter-notebook: Jupyter interactive notebook

Details:

It was discovered that Jupyter Notebook did not properly parse HTML

comments under certain circumstances. An attacker could possibly use this

issue to cause a regular expression denial of service (ReDoS).

Topics%20covered

Topics Covered

security advisory denial of service update instructions jupyter notebook ubuntu 22.04 input parsing

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   jupyter-notebook                6.4.13-5ubuntu0.1
   python3-notebook                6.4.13-5ubuntu0.1

Ubuntu 24.10
   jupyter-notebook                6.4.13-2ubuntu0.1
   python3-notebook                6.4.13-2ubuntu0.1

Ubuntu 24.04 LTS
   jupyter-notebook                6.4.12-2.2ubuntu1+esm1
                                   Available with Ubuntu Pro
   python3-notebook                6.4.12-2.2ubuntu1+esm1
                                   Available with Ubuntu Pro

Ubuntu 22.04 LTS
   jupyter-notebook                6.4.8-1ubuntu0.1+esm1
                                   Available with Ubuntu Pro
   python3-notebook                6.4.8-1ubuntu0.1+esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7464-1

  CVE-2022-25887

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7464-1

Topics%20covered

Topics Covered

security advisory denial of service update instructions jupyter notebook ubuntu 22.04 input parsing

Package Information

https://launchpad.net/ubuntu/+source/jupyter-notebook/6.4.13-5ubuntu0.1
https://launchpad.net/ubuntu/+source/jupyter-notebook/6.4.13-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here