⬆ Bump IPython to 7.31.1

[merca]

Any plans to bump IPython version to 7.31.1 on the DBR 9.1 LTS runtime?

If no other motivation

[merca]

@Kaniz Fatma​ : looks like there is a spamming bot in here... Any functionality to report this kind of stuff?

[Anonymous]

@Merca Ovnerud​ - Yep. It was awful. I'm sorry I wasn't able to get to it sooner. We are working on better solutions. Thank you for letting us know.

[merca]

Hi @Kaniz Fatma​ .

Thank you for the reply.

It was tough not what I asked. What I really would like to know are you going to plan upgrade iPython to 7,31.1, especially since the current version installed is containing known vulnerabilities.

I'm reading the maintenance notes already every time in hope that the bump is already in place.

-Merca-

[merca]

Great, but again - as in my original question I do point out that there is known security risk in the iPython version 7.22.0 and it is patched in 7.31.1

Maybe the link is not easy to see, but here is link to annonced vureneabilty

or if you prefer full links in the comment: https://github.com/advisories/GHSA-pq7m-3gw7-gq5x

[merca]

Hi @Kaniz Fatma​ !

I just checked DBR 10.5 release notes and the IPython version listed there is 7.22.0 installed, but the version that is patched for this security issue is 7.31.1 Did I misread your last comment that it will be upgraded to safe version in DBR 10.5?

[merca]

exactly - I'm pointing to the same release notes. Notes states that the IPython version is 7.22.0 not 7.31.1