[IPython-dev] IPython 2.2 release, including security fix

[Aaron Meurer]

Some time next week at the latest.

Aaron Meurer


On Thu, Aug 7, 2014 at 12:40 PM, Raymond Yee <raymond.yee at gmail.com> wrote:

>  Thanks for the security fixes of 2.2.   I'm using conda to install
> IPython.  Anyone know when continuum might release IPython 2.2 via conda?
> Should I be contacting continuum to ask?
>
> -Raymond
>
>
> On 8/6/14 4:25 PM, Thomas Kluyver wrote:
>
>   Hi all,
>
>  We've just released IPython 2.2, which rolls up a few bugfixes that have
> been backported since the last release. This includes a fix for a security
> issue posted a few days ago, which could have allowed an attacker who could
> intercept network traffic (e.g. on insecure wifi) to intercept a request
> for Mathjax and send back malicious javascript which would run in the
> notebook. The fix was simply to always load mathjax over HTTPS:
> https://github.com/ipython/ipython/pull/6249
>
>  You can see the full list of issues and PRs for this release here:
>
> http://ipython.org/ipython-doc/stable/whatsnew/github-stats-2.0.html#issues-closed-in-2-2-0
>
>  You can install this release in any of the usual ways.
> http://ipython.org/install.html
>
>  Thomas
>
>
> _______________________________________________
> IPython-dev mailing listIPython-dev at scipy.orghttp://mail.scipy.org/mailman/listinfo/ipython-dev
>
>
>
> _______________________________________________
> IPython-dev mailing list
> IPython-dev at scipy.org
> http://mail.scipy.org/mailman/listinfo/ipython-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20140807/54ab1981/attachment.html>