topic Re: ⬆ Bump IPython to 7.31.1 in Data Engineering

⬆ Bump IPython to 7.31.1

merca — Mon, 07 Feb 2022 13:02:39 GMT

Any plans to bump IPython version to 7.31.1 on the DBR 9.1 LTS runtime?

If no other motivation

Re: ⬆ Bump IPython to 7.31.1

merca — Sat, 12 Feb 2022 09:31:43 GMT

@Kaniz Fatma : looks like there is a spamming bot in here... Any functionality to report this kind of stuff?

Re: ⬆ Bump IPython to 7.31.1

Anonymous — Mon, 14 Feb 2022 18:07:56 GMT

@Merca Ovnerud - Yep. It was awful. I'm sorry I wasn't able to get to it sooner. We are working on better solutions. Thank you for letting us know.

Re: ⬆ Bump IPython to 7.31.1

merca — Thu, 17 Feb 2022 02:42:31 GMT

Hi @Kaniz Fatma .

Thank you for the reply.

It was tough not what I asked. What I really would like to know are you going to plan upgrade iPython to 7,31.1, especially since the current version installed is containing known vulnerabilities.

I'm reading the maintenance notes already every time in hope that the bump is already in place.

-Merca-

Re: ⬆ Bump IPython to 7.31.1

merca — Wed, 23 Feb 2022 12:06:26 GMT

Great, but again - as in my original question I do point out that there is known security risk in the iPython version 7.22.0 and it is patched in 7.31.1

Maybe the link is not easy to see, but here is link to annonced vureneabilty

or if you prefer full links in the comment: https://github.com/advisories/GHSA-pq7m-3gw7-gq5x

Re: ⬆ Bump IPython to 7.31.1

merca — Tue, 24 May 2022 14:18:18 GMT

Hi @Kaniz Fatma !

I just checked DBR 10.5 release notes and the IPython version listed there is 7.22.0 installed, but the version that is patched for this security issue is 7.31.1 Did I misread your last comment that it will be upgraded to safe version in DBR 10.5?

Re: ⬆ Bump IPython to 7.31.1

merca — Wed, 13 Jul 2022 03:02:37 GMT

exactly - I'm pointing to the same release notes. Notes states that the IPython version is 7.22.0 not 7.31.1