[IPython-dev] IPython 2.2 release, including security fix

Thomas Kluyver takowl at gmail.com
Wed Aug 6 19:25:16 EDT 2014

Hi all,

We've just released IPython 2.2, which rolls up a few bugfixes that have
been backported since the last release. This includes a fix for a security
issue posted a few days ago, which could have allowed an attacker who could
intercept network traffic (e.g. on insecure wifi) to intercept a request
for Mathjax and send back malicious javascript which would run in the
notebook. The fix was simply to always load mathjax over HTTPS:

You can see the full list of issues and PRs for this release here:

You can install this release in any of the usual ways.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20140806/e87f82ed/attachment.html>

More information about the IPython-dev mailing list