[IPython-dev] IPython 2.2 release, including security fix

Fernando Perez fperez.net at gmail.com
Wed Aug 6 19:32:54 EDT 2014


Thanks everyone!!


On Wed, Aug 6, 2014 at 4:25 PM, Thomas Kluyver <takowl at gmail.com> wrote:

> Hi all,
>
> We've just released IPython 2.2, which rolls up a few bugfixes that have
> been backported since the last release. This includes a fix for a security
> issue posted a few days ago, which could have allowed an attacker who could
> intercept network traffic (e.g. on insecure wifi) to intercept a request
> for Mathjax and send back malicious javascript which would run in the
> notebook. The fix was simply to always load mathjax over HTTPS:
> https://github.com/ipython/ipython/pull/6249
>
> You can see the full list of issues and PRs for this release here:
>
> http://ipython.org/ipython-doc/stable/whatsnew/github-stats-2.0.html#issues-closed-in-2-2-0
>
> You can install this release in any of the usual ways.
> http://ipython.org/install.html
>
> Thomas
>
> _______________________________________________
> IPython-dev mailing list
> IPython-dev at scipy.org
> http://mail.scipy.org/mailman/listinfo/ipython-dev
>
>


-- 
Fernando Perez (@fperez_org; http://fperez.org)
fperez.net-at-gmail: mailing lists only (I ignore this when swamped!)
fernando.perez-at-berkeley: contact me here for any direct mail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20140806/27d5560b/attachment.html>


More information about the IPython-dev mailing list