Page MenuHomeSolus

Update jupyter notebook to 5.7.8
ClosedPublic

Authored by maverick1 on May 18 2019, 10:22 AM.
Tags
None
Referenced Files
F10944705: D6318.diff
Sat, Jul 15, 12:53 AM
F10910794: D6318.diff
Jul 7 2023, 6:23 AM
F10896609: D6318.diff
Jul 2 2023, 1:27 AM
F10891654: D6318.id.diff
Jun 29 2023, 7:33 AM
F10874016: D6318.id.diff
Jun 19 2023, 9:25 PM
F10851185: D6318.id15343.diff
Jun 12 2023, 10:08 AM
F10850150: D6318.id15222.diff
Jun 12 2023, 1:18 AM
F10828449: D6318.id.diff
Jun 4 2023, 9:26 AM
Subscribers

Details

Summary

Update jupyter notebook to 5.7.8
Changes

  • Fix regression in restarting kernels in 5.7.5. The restart handler would return before restart was completed.
  • Fix Open Redirect vulnerability (CVE-2019-10255) where certain malicious URLs could redirect from the Jupyter login page to a malicious site after a successful login.
  • Security fix for a cross-site inclusion (XSSI) vulnerability (CVE-2019–9644), where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server.
  • Fixe a bug in which the list_running_servers() function attempts to parse HTML files as JSON, and consequently crashes
  • Upgrade bootstrap to 3.4, fixing an XSS vulnerability, which has been assigned CVE-2018-14041
  • Security fix preventing malicious directory names from being able to execute javascript.
  • Security fix preventing nbconvert endpoints from executing javascript with access to the server API.
Test Plan

Ran jupyter notebook and opened .ipnb files locally.

Diff Detail

Repository
R4602 python-notebook
Lint
Lint Not Applicable
Unit
Tests Not Applicable