Show More
| @@ -3,16 +3,41 b'' | |||||
| 3 | ============ |
|
3 | ============ | |
| 4 |
|
4 | |||
| 5 |
|
5 | |||
| 6 | IPython 8.9.1 |
|
6 | .. _version 8.10.0: | |
| 7 | ------------- |
|
7 | ||
|
|
8 | IPython 8.10 | |||
|
|
9 | ------------ | |||
| 8 |
|
10 | |||
| 9 | Out of schedule release of IPython with minor fixes to patch a potential CVE-2023-24816. |
|
11 | Out of schedule release of IPython with minor fixes to patch a potential CVE-2023-24816. | |
| 10 | This is a really low severity CVE that you most likely are not affected by unless: |
|
12 | This is a really low severity CVE that you most likely are not affected by unless: | |
| 11 |
|
13 | |||
| 12 | - You are on windows. |
|
14 | - You are on windows. | |
| 13 | - You have a custom build of Python without ``_ctypes`` |
|
15 | - You have a custom build of Python without ``_ctypes`` | |
| 14 |
- You cd or start IPython or Jupyter in untrusted directory which names may be |
|
16 | - You cd or start IPython or Jupyter in untrusted directory which names may be | |
|
|
17 | valid shell commands. | |||
|
|
18 | ||||
|
|
19 | You can read more on `the advisory | |||
|
|
20 | <https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7>`__. | |||
|
|
21 | ||||
|
|
22 | In addition to fixing this CVE we also fix a couple of outstanding bugs and issues. | |||
|
|
23 | ||||
|
|
24 | As usual you can find the full list of PRs on GitHub under `the 8.10 milestone | |||
|
|
25 | <https://github.com/ipython/ipython/milestone/112?closed=1>`__. | |||
|
|
26 | ||||
|
|
27 | In Particular: | |||
|
|
28 | ||||
|
|
29 | - bump minimum numpy to `>=1.21` version following NEP29. :ghpull:`13930` | |||
|
|
30 | - fix for compatibility with MyPy 1.0. :ghpull:`13933` | |||
|
|
31 | - fix nbgrader stalling when IPython's ``showtraceback`` function is | |||
|
|
32 | monkeypatched. :ghpull:`13934` | |||
|
|
33 | ||||
|
|
34 | ||||
|
|
35 | ||||
|
|
36 | As this release also contains those minimal changes in addition to fixing the | |||
|
|
37 | CVE I decided to bump the minor version anyway. | |||
| 15 |
|
38 | |||
|
|
39 | This will not affect the normal release schedule, so IPython 8.11 is due in | |||
|
|
40 | about 2 weeks. | |||
| 16 |
|
41 | |||
| 17 | .. _version 8.9.0: |
|
42 | .. _version 8.9.0: | |
| 18 |
|
43 | |||
General Comments 0
You need to be logged in to leave comments.
Login now