Test ID:	1.3.6.1.4.1.25623.1.1.9.2023.3256575102998
Category:	Fedora Local Security Checks
Title:	Fedora: Security Advisory (FEDORA-2023-3256575fc8)
Summary:	The remote host is missing an update for the 'python-notebook' package(s) announced via the FEDORA-2023-3256575fc8 advisory.
Description:	Summary: The remote host is missing an update for the 'python-notebook' package(s) announced via the FEDORA-2023-3256575fc8 advisory. Vulnerability Insight: Automatic update for python-notebook-7.0.0-1.fc39. ##### **Changelog** ``` * Thu Jul 20 2023 Lumir Balhar - 7.0.0-1 - Update to 7.0.0 (rhbz#2224039) * Mon Jul 10 2023 Lumir Balhar - 7.0.0rc2-1 - Update to 7.0.0 RC2 * Mon Jul 10 2023 Miro Hroncok - 7.0.0b3-3 - Workaround a possible Python 3.12 regression in importlib.resources * Tue Jul 4 2023 Python Maint - 7.0.0b3-2 - Rebuilt for Python 3.12 * Thu Jun 1 2023 Lumir Balhar - 7.0.0b3-1 - Update to 7.0.0 beta 3 (rhbz#2184443) * Wed Mar 29 2023 Lumir Balhar - 7.0.0a18-1 - Update to 7.0.0a18 (rhbz#2181597) * Wed Mar 22 2023 Lumir Balhar - 7.0.0a17-1 - Update to 7.0.0 alpha 17 (rhbz#2178583) * Fri Mar 10 2023 Lumir Balhar - 7.0.0a15-1 - Update to 7.0.0a15 * Mon Mar 6 2023 Lumir Balhar - 6.5.3-1 - Update to 6.5.3 (rhbz#2062405) * Wed Feb 1 2023 Lumir Balhar - 6.5.2-1 - Update to 6.5.2 (#2062405) * Fri Jan 20 2023 Fedora Release Engineering - 6.4.12-2 - Rebuilt for [link moved to references] * Wed Aug 3 2022 Karolina Surma - 6.4.12-1 - Update to 6.4.12 * Fri Jul 22 2022 Fedora Release Engineering - 6.4.11-4 - Rebuilt for [link moved to references] * Wed Jul 13 2022 Miro Hroncok - 6.4.11-3 - Fix CVE-2022-24785 and CVE-2022-31129 in bundled moment - Fixes: rhbz#2075263 * Thu Jun 16 2022 Python Maint - 6.4.11-2 - Rebuilt for Python 3.11 * Mon May 30 2022 Miro Hroncok - 6.4.11-1 - Update to 6.4.11 * Tue Mar 22 2022 Miro Hroncok - 6.4.10-1 - Update to 6.4.10 * Tue Jan 25 2022 Miro Hroncok - 6.4.8-1 - Update to 6.4.8 - Fixes: rhbz#2045852 * Tue Jan 25 2022 Miro Hroncok - 6.4.7-1 - Update to 6.4.7 - Fixes: rhbz#2039905 * Fri Jan 21 2022 Fedora Release Engineering - 6.4.6-3 - Rebuilt for [link moved to references] * Mon Nov 29 2021 Karolina Surma - 6.4.6-2 - Remove -s from Python shebang in `jupyter-*` executables to let Jupyter see pip installed extensions * Wed Nov 24 2021 Karolina Surma - 6.4.6-1 - Update to 6.4.6 Resolves: rhbz#2023994 * Tue Oct 26 2021 Lumir Balhar - 6.4.5-1 - Update to 6.4.5 Resolves: rhbz#2004590 * Wed Aug 11 2021 Tomas Hrnciar - 6.4.3-1 - Update to 6.4.3 - Fixes: rhbz#1990615 - Fixes: rhbz#1992573 * Fri Jul 23 2021 Fedora Release Engineering - 6.4.0-3 - Rebuilt for [link moved to references] ``` Affected Software/OS: 'python-notebook' package(s) on Fedora 39. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-24785 https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/ https://github.com/moment/moment/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5 https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html Common Vulnerability Exposure (CVE) ID: CVE-2022-31129 https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O/ https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3 https://github.com/moment/moment/pull/6015#issuecomment-1152961973 https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633/
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.