CVE-2019-10255

Advisory

Debianized-jupyterhub 0.9.5.1 updates its dependency 'notebook' to 5.7.7 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* jupyterhub: update to release 0.9.5 + NB 5.7.7 (fix for Open Redirect vulnerability)
* postinst: Configurable banner image by adding a "/etc/jupyterhub/banner.png" file (original size is 208 x 56 px)
* setup: Added plotly_express, colorcet, networkx, and jupyter-contrib-nbextensions
* setup: Put non-jhub packages into 'base' extra
* setup: Now on Tornado 6 (compatibility problems solved)
* docs: SSL off-loading with NginX (with config example)
* docs: Setting custom announcements in the web UI

> Juergen Hermann <jhweb.de> Fri, 29 Mar 2019 11:45:40 +0100

Resources

• https://pypi.org/project/debianized-jupyterhub
• https://pyup.io/changelogs/debianized-jupyterhub/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10255