The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3256575fc8 advisory.

    Automatic update for python-notebook-7.0.0-1.fc39.

    ##### **Changelog**

    ```
    * Thu Jul 20 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0-1
    - Update to 7.0.0 (rhbz#2224039)
    * Mon Jul 10 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0rc2-1
    - Update to 7.0.0 RC2
    * Mon Jul 10 2023 Miro Hronok <miro@hroncok.cz> - 7.0.0b3-3
    - Workaround a possible Python 3.12 regression in importlib.resources
    * Tue Jul  4 2023 Python Maint <python-maint@redhat.com> - 7.0.0b3-2
    - Rebuilt for Python 3.12
    * Thu Jun  1 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0b3-1
    - Update to 7.0.0 beta 3 (rhbz#2184443)
    * Wed Mar 29 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0a18-1
    - Update to 7.0.0a18 (rhbz#2181597)
    * Wed Mar 22 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0a17-1
    - Update to 7.0.0 alpha 17 (rhbz#2178583)
    * Fri Mar 10 2023 Lumir Balhar <lbalhar@redhat.com> - 7.0.0a15-1
    - Update to 7.0.0a15
    * Mon Mar  6 2023 Lumr Balhar <lbalhar@redhat.com> - 6.5.3-1
    - Update to 6.5.3 (rhbz#2062405)
    * Wed Feb  1 2023 Lumr Balhar <lbalhar@redhat.com> - 6.5.2-1
    - Update to 6.5.2 (#2062405)
    * Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 6.4.12-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
    * Wed Aug  3 2022 Karolina Surma <ksurma@redhat.com> - 6.4.12-1
    - Update to 6.4.12
    * Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 6.4.11-4
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Wed Jul 13 2022 Miro Hronok <mhroncok@redhat.com> - 6.4.11-3
    - Fix CVE-2022-24785 and CVE-2022-31129 in bundled moment
    - Fixes: rhbz#2075263
    * Thu Jun 16 2022 Python Maint <python-maint@redhat.com> - 6.4.11-2
    - Rebuilt for Python 3.11
    * Mon May 30 2022 Miro Hronok <mhroncok@redhat.com> - 6.4.11-1
    - Update to 6.4.11
    * Tue Mar 22 2022 Miro Hronok <mhroncok@redhat.com> - 6.4.10-1
    - Update to 6.4.10
    * Tue Jan 25 2022 Miro Hronok <mhroncok@redhat.com> - 6.4.8-1
    - Update to 6.4.8
    - Fixes: rhbz#2045852
    * Tue Jan 25 2022 Miro Hronok <mhroncok@redhat.com> - 6.4.7-1
    - Update to 6.4.7
    - Fixes: rhbz#2039905
    * Fri Jan 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 6.4.6-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
    * Mon Nov 29 2021 Karolina Surma <ksurma@redhat.com> - 6.4.6-2
    - Remove -s from Python shebang in `jupyter-*` executables       to let Jupyter see pip installed extensions
    * Wed Nov 24 2021 Karolina Surma <ksurma@redhat.com> - 6.4.6-1
    - Update to 6.4.6     Resolves: rhbz#2023994
    * Tue Oct 26 2021 Lumr Balhar <lbalhar@redhat.com> - 6.4.5-1
    - Update to 6.4.5     Resolves: rhbz#2004590
    * Wed Aug 11 2021 Tomas Hrnciar <thrnciar@redhat.com> - 6.4.3-1
    - Update to 6.4.3
    - Fixes: rhbz#1990615
    - Fixes: rhbz#1992573
    * Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 6.4.0-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 39 : python-notebook (2023-3256575fc8)

high Nessus Plugin ID 185336

Version 1.1