Fedora 42, Fedora 41, and Fedora 43 Beta have all been updated to version 4.4.9 of JupyterLab, a computational environment. This update fixes CVE-2025-59842, which affected the LaTeX typesetter in JupyterLab by not enforcing the "noopener" attribute in links.

Fedora 42 Update: jupyterlab-4.4.9-1.fc42
Fedora 41 Update: jupyterlab-4.4.9-1.fc41
Fedora 43 Update: jupyterlab-4.4.9-1.fc43

[SECURITY] Fedora 42 Update: jupyterlab-4.4.9-1.fc42

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-547bc6efdc
2025-10-06 01:12:07.878005+00:00
--------------------------------------------------------------------------------

Name : jupyterlab
Product : Fedora 42
Version : 4.4.9
Release : 1.fc42
URL : https://jupyter.org
Summary : JupyterLab computational environment
Description :
JupyterLab is the next-generation user interface for Project Jupyter
offering all the familiar building blocks of the classic Jupyter
Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.)
in a flexible and powerful user interface.

--------------------------------------------------------------------------------
Update Information:

jupyterlab 4.4.9 fixing CVE-2025-59842.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Sep 27 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.9-1
- Update to 4.4.9 (rhbz#2398238)
* Fri Sep 26 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.8-1
- Update to 4.4.8 (rhbz#2398238)
* Fri Sep 19 2025 Python Maint - 4.4.7-2
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2399849 - CVE-2025-59842 jupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2399849
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-547bc6efdc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--

[SECURITY] Fedora 41 Update: jupyterlab-4.4.9-1.fc41

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-136667dc88
2025-10-06 00:54:43.804365+00:00
--------------------------------------------------------------------------------

Name : jupyterlab
Product : Fedora 41
Version : 4.4.9
Release : 1.fc41
URL : https://jupyter.org
Summary : JupyterLab computational environment
Description :
JupyterLab is the next-generation user interface for Project Jupyter
offering all the familiar building blocks of the classic Jupyter
Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.)
in a flexible and powerful user interface.

--------------------------------------------------------------------------------
Update Information:

jupyterlab 4.4.9 fixing CVE-2025-59842.
--------------------------------------------------------------------------------
ChangeLog:

* Sat Sep 27 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.9-1
- Update to 4.4.9 (rhbz#2398238)
* Fri Sep 26 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.8-1
- Update to 4.4.8 (rhbz#2398238)
* Fri Sep 19 2025 Python Maint - 4.4.7-2
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2399845 - CVE-2025-59842 jupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2399845
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-136667dc88' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--

[SECURITY] Fedora 43 Update: jupyterlab-4.4.9-1.fc43

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-5ce0931fe3
2025-10-06 00:15:24.238190+00:00
--------------------------------------------------------------------------------

Name : jupyterlab
Product : Fedora 43
Version : 4.4.9
Release : 1.fc43
URL : https://jupyter.org
Summary : JupyterLab computational environment
Description :
JupyterLab is the next-generation user interface for Project Jupyter
offering all the familiar building blocks of the classic Jupyter
Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.)
in a flexible and powerful user interface.

--------------------------------------------------------------------------------
Update Information:

jupyterlab 4.4.9 fixing CVE-2025-59842.
Rebuilt for Python 3.14.0rc3 bytecode change
--------------------------------------------------------------------------------
ChangeLog:

* Sat Sep 27 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.9-1
- Update to 4.4.9 (rhbz#2398238)
* Fri Sep 26 2025 Lumir Balhar [lbalhar@redhat.com] - 4.4.8-1
- Update to 4.4.8 (rhbz#2398238)
* Fri Sep 19 2025 Python Maint - 4.4.7-2
- Rebuilt for Python 3.14.0rc3 bytecode
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2399845 - CVE-2025-59842 jupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute [fedora-41]
https://bugzilla.redhat.com/show_bug.cgi?id=2399845
[ 2 ] Bug #2399849 - CVE-2025-59842 jupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute [fedora-42]
https://bugzilla.redhat.com/show_bug.cgi?id=2399849
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-5ce0931fe3' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

--