[IPython-dev] IPython 2.2 release, including security fix

Raymond Yee raymond.yee at gmail.com
Thu Aug 7 13:40:14 EDT 2014


Thanks for the security fixes of 2.2.   I'm using conda to install
IPython.  Anyone know when continuum might release IPython 2.2 via
conda?   Should I be contacting continuum to ask?

-Raymond

On 8/6/14 4:25 PM, Thomas Kluyver wrote:
> Hi all,
>
> We've just released IPython 2.2, which rolls up a few bugfixes that
> have been backported since the last release. This includes a fix for a
> security issue posted a few days ago, which could have allowed an
> attacker who could intercept network traffic (e.g. on insecure wifi)
> to intercept a request for Mathjax and send back malicious javascript
> which would run in the notebook. The fix was simply to always load
> mathjax over HTTPS:
> https://github.com/ipython/ipython/pull/6249
>
> You can see the full list of issues and PRs for this release here:
> http://ipython.org/ipython-doc/stable/whatsnew/github-stats-2.0.html#issues-closed-in-2-2-0
>
> You can install this release in any of the usual ways.
> http://ipython.org/install.html
>
> Thomas
>
>
> _______________________________________________
> IPython-dev mailing list
> IPython-dev at scipy.org
> http://mail.scipy.org/mailman/listinfo/ipython-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20140807/90e0fe9a/attachment.html>


More information about the IPython-dev mailing list