CVE:CVE-2014-3429
CNNVD:CNNVD-201407-675
IPython是IPython团队开发的一个Python的原生交互式shell的增强版。Notebook是其中的一个开发环境。
IPython Notebook 1.2之前0.12至1.x版本中存在安全漏洞，该漏洞源于程序没有验证websocket请求源。远程攻击者可通过已知的内核ID和特制的页面利用该漏洞执行任意代码。
solution:Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade ipython ipython_notebook to a higher version than 0.12,0.12.1,0.13,0.13.1,0.13.2,1.0.0,1.1.0,and avoid the version 0.12,0.12.1,0.13,0.13.1,0.13.2,1.0.0,1.1.0; Upgrade mageia mageia to a higher version than 3.0,4.0,and avoid the version 3.0,4.0