USN-7464-1: Jupyter Notebook vulnerability

USN-7464-1: Jupyter Notebook vulnerability
28 April 2025

Jupyter Notebook could be made to crash if it received specially crafted input.

Releases

• Ubuntu 25.04
• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS

Packages
jupyter-notebook - Jupyter interactive notebook

Details
It was discovered that Jupyter Notebook did not properly parse HTML
comments under certain circumstances. An attacker could possibly use this
issue to cause a regular expression denial of service (ReDoS).

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 25.04

• jupyter-notebook - 6.4.13-5ubuntu0.1
• python3-notebook - 6.4.13-5ubuntu0.1
  Ubuntu 24.10
  jupyter-notebook - 6.4.13-2ubuntu0.1
  python3-notebook - 6.4.13-2ubuntu0.1
  Ubuntu 24.04
• jupyter-notebook - 6.4.12-2.2ubuntu1+esm1
• python3-notebook - 6.4.12-2.2ubuntu1+esm1
  Ubuntu 22.04
• jupyter-notebook - 6.4.8-1ubuntu0.1+esm1
• python3-notebook - 6.4.8-1ubuntu0.1+esm1

In general, a standard system update will make all the necessary changes.