Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0078-1

Опубликовано: 16 янв. 2021
Источник: suse-cvrf

Описание

Security update for python-jupyter_notebook

This update for python-jupyter_notebook fixes the following issue:

  • CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458).

Список пакетов

openSUSE Leap 15.1
python-jupyter_notebook-doc-5.7.7-lp151.2.3.1
python2-jupyter_notebook-5.7.7-lp151.2.3.1
python2-jupyter_notebook-lang-5.7.7-lp151.2.3.1
python2-jupyter_notebook-latex-5.7.7-lp151.2.3.1
python3-jupyter_notebook-5.7.7-lp151.2.3.1
python3-jupyter_notebook-lang-5.7.7-lp151.2.3.1
python3-jupyter_notebook-latex-5.7.7-lp151.2.3.1

Ссылки

Описание

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.

Затронутые продукты
openSUSE Leap 15.1:python-jupyter_notebook-doc-5.7.7-lp151.2.3.1
openSUSE Leap 15.1:python2-jupyter_notebook-5.7.7-lp151.2.3.1
openSUSE Leap 15.1:python2-jupyter_notebook-lang-5.7.7-lp151.2.3.1
openSUSE Leap 15.1:python2-jupyter_notebook-latex-5.7.7-lp151.2.3.1
Ссылки