Ubuntu
jupyter-notebook package

Change log for jupyter-notebook package in Ubuntu

1 → 41 of 41 results First • Previous • Next • Last
Published in oracular-release
Published in noble-release
Deleted in noble-proposed (Reason: Moved to noble) 
jupyter-notebook (6.4.12-2.2ubuntu1) noble; urgency=medium

  * Fix usage of the deprecated assertDictContainsSubset.
  * Declare versioned dependency on python3-requests-unixsocket to pick up fix
    for a failure to connect to the server due to changes in chunked request
    support in python3-urllib3.

 -- Dan Bungert <email address hidden>  Thu, 15 Feb 2024 10:40:02 -0700
Superseded in noble-release
Published in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic) 
jupyter-notebook (6.4.12-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * python3-notebook: Add Breaks: cadabra2 (<< 2.4.3.2-1.1~).
  * Add python3-notebook.maintscript to restore the
    /usr/lib/python3/dist-packages/notebook/static/components/codemirror
    symlink in case buggy cadabra2 was installed first.  (Closes: #1036021)

 -- Andreas Beckmann <email address hidden>  Sun, 28 May 2023 01:18:59 +0200

Available diffs

Superseded in mantic-release
Published in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar) 
jupyter-notebook (6.4.12-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source change upload to rebuild with debhelper 13.10.

 -- Michael Biebl <email address hidden>  Sat, 15 Oct 2022 11:04:20 +0200

Available diffs

Published in jammy-updates
Published in jammy-security 
jupyter-notebook (6.4.8-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Crafted link to login page redirects to malicious site
    (LP: #1982670)
    - debian/patches/CVE-2019-10856.patch: Handle empty netloc being
      interpreted as first path part being the netloc by buggy browsers.
    - CVE-2019-10856
  * SECURITY UPDATE: Sensitive information disclosure leading to unauthorized
    access (LP: #1982670)
    - debian/patches/CVE-2022-24758.patch: Log only a non-sensitive subset of
      the headers when a HTTP 5xx error other than HTTP 502 is triggered.
    - CVE-2022-24758
  * SECURITY UPDATE: Access to hidden files or to files in hidden directories
    (LP: #1982670)
    - debian/patches/CVE-2022-29238-1.patch: Add checks for hidden file or path on
      file get.
    - debian/patches/CVE-2022-29238-2.patch: added hidden checks on
      FileContentsManager and accompanying tests.
    - debian/patches/CVE-2022-29238-3.patch: Added hidden checks on
      notebook/services/contents/handlers.py and accompanying tests.
    - debian/patches/CVE-2022-29238-4.patch: Update log message to mention
      hidden directories.
    - debian/patches/CVE-2022-29238-5.patch: Update error messages to not
      mention hidden files.
    - CVE-2022-29238
  * debian/source/lintian-overrides: Update to fix Lintian warnings.

 -- Luís Infante da Câmara <email address hidden>  Fri, 29 Jul 2022 21:35:10 +0100
Published in focal-updates
Published in focal-security 
jupyter-notebook (6.0.3-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Crafted link to login page redirects to malicious site
    (LP: #1982670)
    - debian/patches/CVE-2019-10856.patch: Handle empty netloc being
      interpreted as first path part being the netloc by buggy browsers.
    - CVE-2019-10856
  * SECURITY UPDATE: Crafted link to login page redirects to spoofed server
    (LP: #1982670)
    - debian/patches/CVE-2020-26215.patch: Validate redirect target in
      TrailingSlashHandler.
    - CVE-2020-26215
  * SECURITY UPDATE: Sensitive information disclosure leading to unauthorized
    access (LP: #1982670)
    - debian/patches/CVE-2022-24758.patch: Log only a non-sensitive subset of
      the headers when a HTTP 5xx error other than HTTP 502 is triggered.
    - CVE-2022-24758
  * SECURITY UPDATE: Access to hidden files or to files in hidden directories
    (LP: #1982670)
    - debian/patches/CVE-2022-29238-1.patch: Add checks for hidden file or path on
      file get.
    - debian/patches/CVE-2022-29238-2.patch: added hidden checks on
      FileContentsManager and accompanying tests.
    - debian/patches/CVE-2022-29238-3.patch: Added hidden checks on
      notebook/services/contents/handlers.py and accompanying tests.
    - debian/patches/CVE-2022-29238-4.patch: Update log message to mention
      hidden directories.
    - debian/patches/CVE-2022-29238-5.patch: Update error messages to not
      mention hidden files.
    - CVE-2022-29238

 -- Luís Infante da Câmara <email address hidden>  Sun, 28 Aug 2022 23:08:58 +0100
Published in bionic-updates
Published in bionic-security 
jupyter-notebook (5.2.2-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Cross-site scripting via untrusted notebook (LP: #1982670)
    - debian/patches/CVE-2018-19351.patch: Apply CSP sandboxing to nbconvert
      responses.
    - CVE-2018-19351
  * SECURITY UPDATE: Cross-site inclusion on malicious pages (LP: #1982670)
    - debian/patches/CVE-2019-9644-1.patch: Block cross-origin GET and HEAD
      requests with mismatched Referer.
    - debian/patches/CVE-2019-9644-2.patch: Add CSRF checks on files endpoints.
    - debian/patches/CVE-2019-9644-3.patch: Set X-Content-Type-Options: nosniff
      on all handlers for protecting non-script resources.
    - CVE-2019-9644
  * SECURITY UPDATE: Crafted link to login page redirects to malicious site
    (LP: #1982670)
    - debian/patches/CVE-2019-10255-1.patch: Parse URLs when validating redirect
      targets.
    - debian/patches/CVE-2019-10255-2.patch: Protect against Chrome mishandling
      backslashes as slashes in URLs.
    - debian/patches/CVE-2019-10255-3.patch: Handle empty netloc being
      interpreted as first path part being the netloc by buggy browsers.
    - CVE-2019-10255, CVE-2019-10856
  * SECURITY UPDATE: Cross-site scripting (LP: #1982670)
    - debian/patches/CVE-2018-21030-1.patch: Use CSP header to treat served
      files as belonging to a separate origin.
    - debian/patches/CVE-2018-21030-2.patch: Add a content_security_policy
      property instead of the CSP header.
    - CVE-2018-21030
  * SECURITY UPDATE: Crafted link to login page redirects to spoofed server
    (LP: #1982670)
    - debian/patches/CVE-2020-26215.patch: Validate redirect target in
      TrailingSlashHandler.
    - CVE-2020-26215
  * SECURITY UPDATE: Sensitive information disclosure leading to unauthorized
    access (LP: #1982670)
    - debian/patches/CVE-2022-24758.patch: Log only a non-sensitive subset of
      the headers when a HTTP 5xx error other than HTTP 502 is triggered.
    - CVE-2022-24758
  * Address Lintian warnings.

 -- Luís Infante da Câmara <email address hidden>  Sun, 28 Aug 2022 23:00:01 +0100
Superseded in lunar-release
Obsolete in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic) 
jupyter-notebook (6.4.8-2) unstable; urgency=medium

  * Team upload.
  * Add b-dep on python3-ipython-genutils (wasn't noticed for
    transitivity reasons!).

 -- Julien Puydt <email address hidden>  Tue, 03 May 2022 21:43:12 +0200

Available diffs

Superseded in kinetic-release
Published in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
jupyter-notebook (6.4.8-1) unstable; urgency=medium

  * New upstream version 6.4.8
  * d/control: bump send2trash version, add nest_asyncio

 -- Gordon Ball <email address hidden>  Fri, 28 Jan 2022 11:42:02 +0000

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
jupyter-notebook (6.4.5-4) unstable; urgency=medium

  * Patch javascript usage of marked for marked 4.x
  * Temporarily disable jquery-ui related functionality until a solution to
    #1003680 is found. This makes the help pager non-resizeable, but avoids a
    blank page when trying to open a notebook.
    (Closes: #1003613, #1003722, #1003881)

 -- Gordon Ball <email address hidden>  Mon, 17 Jan 2022 16:35:10 +0000

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
jupyter-notebook (6.4.5-3) unstable; urgency=medium

  * Fix FTBFS caused by files moves in node-po2json 0.4.5-2
  * Add picocolors to nodejs/extcopies, new dependency for postcss webpack build
  * Adjust paths for marked 4.x (Closes: #1000884)

 -- Gordon Ball <email address hidden>  Mon, 10 Jan 2022 16:14:45 +0000

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy) 
jupyter-notebook (6.4.5-2) unstable; urgency=medium

  * Drop test dependency on python3-nose
  * Patch test failures with jupyter-core 4.9.1 (Closes: #998525)

 -- Gordon Ball <email address hidden>  Sat, 06 Nov 2021 14:18:28 +0000

Available diffs

Superseded in jammy-proposed 
jupyter-notebook (6.4.5-1) unstable; urgency=medium

  * New upstream version 6.4.5
  * Drop Built-Using field on python3-notebook, as the licenses of the
    libraries listed did not require it
  * Standards-Version: 4.6.0

 -- Gordon Ball <email address hidden>  Fri, 22 Oct 2021 18:22:18 +0000

Available diffs

Superseded in jammy-proposed 
jupyter-notebook (6.4.4-1) unstable; urgency=medium

  * New upstream version 6.4.4 (Closes: #995593)
  * More fixes for the (fragile) javascript build process

 -- Gordon Ball <email address hidden>  Fri, 08 Oct 2021 19:45:38 +0000
Superseded in jammy-release
Obsolete in impish-release
Obsolete in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release) 
jupyter-notebook (6.2.0-1) unstable; urgency=medium

  * New upstream version 6.2.0
  * Version dependencies on tornado, send2trash
  * Disable all tests of notebook trashing; these are too sensitive to
    different mount and container layouts to be useful.

 -- Gordon Ball <email address hidden>  Sun, 17 Jan 2021 21:52:31 +0000
Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release) 
jupyter-notebook (6.1.6-2ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Handle TrashPermissionError, which gets thrown in autopkgtests.
    - Switch back to node-term.js AGAIN. node-xterm was removed from Ubuntu
      due to FTBFS.

Available diffs

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release) 
jupyter-notebook (6.1.5-1ubuntu1) hirsute; urgency=medium

  * Handle TrashPermissionError, which gets thrown in autopkgtests.
  * Switch back to node-term.js AGAIN. node-xterm was removed from Ubuntu due
    to FTBFS.

 -- Stefano Rivera <email address hidden>  Tue, 01 Dec 2020 12:11:29 -0800
Superseded in hirsute-proposed 
jupyter-notebook (6.1.5-1) unstable; urgency=medium

  * New upstream version 6.1.5

 -- Gordon Ball <email address hidden>  Sat, 07 Nov 2020 21:07:30 +0000

Available diffs

Superseded in hirsute-proposed 
jupyter-notebook (6.1.4-1) unstable; urgency=medium

  [ Gordon Ball ]
  * New upstream version 6.1.4
  * Mark the symlink autopkgtest as superficial

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

 -- Gordon Ball <email address hidden>  Thu, 24 Sep 2020 19:06:44 +0000

Available diffs

Superseded in hirsute-proposed
Deleted in groovy-proposed (Reason: From groovy-as-devel-series, now present in hirsute, not ...) 
jupyter-notebook (6.1.3-1) unstable; urgency=medium

  * New upstream version 6.1.3
  * Ensure XDG_DATA_HOME exists for autopkgtests
  * Update lintian-overrides for python3-notebook

 -- Gordon Ball <email address hidden>  Mon, 31 Aug 2020 15:46:05 +0000

Available diffs

Superseded in groovy-proposed 
jupyter-notebook (6.1.1-2) unstable; urgency=medium

  * Another attempt to fix autopkgtest errors related to cross-device renames

 -- Gordon Ball <email address hidden>  Thu, 13 Aug 2020 19:57:18 +0000

Available diffs

Superseded in groovy-proposed 
jupyter-notebook (6.1.1-1) unstable; urgency=medium

  * New upstream version 6.1.1
  * Refresh patches
  * Update versioned javascript dependencies
  * Use debhelper-compat 13
  * Exclude deletion tests from autopkgtest
  * New dependency: python3-argon2
  * New build/test dependency: python3-requests-unixsocket

 -- Gordon Ball <email address hidden>  Wed, 12 Aug 2020 18:12:45 +0000

Available diffs

Superseded in groovy-proposed 
jupyter-notebook (6.0.3-4) unstable; urgency=medium

  [ Gordon Ball ]
  * Set XDG_RUNTIME_DIR for autopkgtests to avoid (host-layout-specific)
    errors caused by trying to do cross-device renames.

  [ Debian Janitor ]
  * Set field Upstream-Name in debian/copyright.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.

 -- Gordon Ball <email address hidden>  Fri, 24 Jul 2020 19:32:18 +0000

Available diffs

Superseded in groovy-proposed 
jupyter-notebook (6.0.3-3) unstable; urgency=medium

  * Run the test suite as an autopkgtest
  * Check for broken symlinks in the notebook directory as an autopkgtest
  * Drop rebuilding of node-react artifacts from 6.0.0-1, since this is no
    longer necessary with a more recent version of node-react; update the b-d
    on node-react to >= 16.13 accordingly

 -- Gordon Ball <email address hidden>  Fri, 17 Jul 2020 17:58:21 +0000
Superseded in hirsute-release
Obsolete in groovy-release
Published in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
jupyter-notebook (6.0.3-2) unstable; urgency=medium

  * Bump xterm.js dependency to pick up a bug fix, change the way these
    modules are loaded. Should actually fix the web terminal.

 -- Gordon Ball <email address hidden>  Wed, 05 Feb 2020 11:56:03 +0000

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
jupyter-notebook (6.0.3-1) unstable; urgency=medium

  * New upstream version 6.0.3
  * d/control: update versioned python dependencies
  * d/control: update Standards-Version to 4.5.0
  * Refresh patches; drop 0001-Nodejs-binary-and-import-names.patch since
    node -> nodejs is no longer needed.
  * Re-enable the xtermjs-based web terminal, as node-xterm is available
    again (Closes: #935995, retires several related patches).
  * d/rules: Drop now-unneeded dh_auto_install override
  * Try and patch testsuite pythonpath issues
  * d/source/lintian-overrides: rename tag insane-line-length ->
    very-long-line-length

 -- Gordon Ball <email address hidden>  Fri, 31 Jan 2020 10:32:37 +0000

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
jupyter-notebook (6.0.2-1) unstable; urgency=medium

  * New upstream version 6.0.2
  * d/control: update versioned dependencies on jupyter-{core,client}

 -- Gordon Ball <email address hidden>  Wed, 01 Jan 2020 12:57:35 +0000

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
jupyter-notebook (6.0.0-2) unstable; urgency=medium

  * Remove postinst and postrm logic for handling merged notebook JSON config
    like /etc/jupyter/nbconfig/notebook in favour of dropping files in eg,
    /etc/jupyter/nbconfig/notebook.d/, which should be simpler and more
    robust. Accordingly, add breaks against the last version of ipywidgets
    which used the old mechanism.
  * Update build paths for node-react and version dependency after install
    location was moved.
  * Don't automatically enable the systemd user unit (Closes: #944743);
    incorrectly enabled instances for non-interactive users can be disabled
    with `systemctl --user --global disable jupyter-notebook`

 -- Gordon Ball <email address hidden>  Mon, 16 Dec 2019 19:56:28 +0000

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release) 
jupyter-notebook (6.0.0-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.1.

  [ Gordon Ball ]
  * New upstream release 6.0.0
  * Stop building python-notebook, since upstream has ceased to support python
    2.7 as of this version (Closes: #936775).
  * Add a copy of create-react-class, a new JS dependency that has been
    discontinued upstream, and is hence probably not a good candidate for
    standalone packaging.
  * Rebuild UMD artifacts from node-react using webpack, since the available
    version does not appear to be usable in a script context.
  * Use debhelper compat level 12

 -- Gordon Ball <email address hidden>  Fri, 01 Nov 2019 20:39:16 +0000

Available diffs

Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to release) 
jupyter-notebook (5.7.8-1) unstable; urgency=medium

  * New upstream release 5.7.8
  * Fixes CVE-2019-9644 (Closes: #924515)
  * Fixes CVE-2019-10255 (Closes: #925939)

 -- Gordon Ball <email address hidden>  Mon, 06 May 2019 18:12:38 +0000

Available diffs

Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release) 
jupyter-notebook (5.7.4-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix unhandled symlink to directory conversion for bootstrap, through
    python{,3}-notebook.maintscript. (Closes: #924232)

 -- Sébastien Villemot <email address hidden>  Sat, 30 Mar 2019 15:52:25 +0100

Available diffs

Superseded in eoan-release
Obsolete in disco-release
Deleted in disco-proposed (Reason: moved to release) 
jupyter-notebook (5.7.4-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Remove ancient X-Python-Version field
  * d/control: Remove ancient X-Python3-Version field
  * d/changelog: Remove trailing whitespaces
  * Use 'python3 -m sphinx' instead of sphinx-build for building docs

  [ Gordon Ball ]
  * New upstream release 5.7.4
  * Refresh existing patches
  * Update to Standards-Version 4.3.0
  * Patch terminal support to work with the currently packaged version
    of node-xterm
  * Use packaged po2json for translations
  * New dependencies: prometheus_client, ipaddress, mock

 -- Gordon Ball <email address hidden>  Thu, 14 Feb 2019 07:49:43 +0000

Available diffs

Superseded in disco-release
Obsolete in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release) 
jupyter-notebook (5.4.1-1) unstable; urgency=medium

  * New upstream release 5.4.1
  * Fixes CVE-2018-8768 (malicious notebook can execute javascript)
  * Remove d/.git-dpm and switch to a gbp-style patches-unapplied main branch

 -- Gordon Ball <email address hidden>  Tue, 03 Apr 2018 14:14:27 +0000

Available diffs

Superseded in cosmic-release
Published in bionic-release
Deleted in bionic-proposed (Reason: moved to release) 
jupyter-notebook (5.2.2-1) unstable; urgency=medium

  * New upstream release.

 -- Gordon Ball <email address hidden>  Wed, 06 Dec 2017 22:25:37 +0100

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release) 
jupyter-notebook (5.2.1-2) unstable; urgency=medium

  * Patch tools/build-main.js which should fix being unable to use the
    built-in web terminal, due to failing to load xterm.js

 -- Gordon Ball <email address hidden>  Thu, 23 Nov 2017 21:15:08 +0000

Available diffs

Superseded in bionic-proposed 
jupyter-notebook (5.2.1-1) unstable; urgency=medium

  * New upstream release.
  * Update lintian-overrides with a very-long-line regex related to
    bidirectional text support
  * Install upstream changelog

 -- Gordon Ball <email address hidden>  Thu, 16 Nov 2017 20:58:44 +0000

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release) 
jupyter-notebook (5.1.0-2) unstable; urgency=medium

  * Explicitly set HOME and XDG_RUNTIME_DIR due to tests failing
    on the buildds

 -- Gordon Ball <email address hidden>  Mon, 06 Nov 2017 19:47:56 +0000

Available diffs

Superseded in bionic-proposed 
jupyter-notebook (5.1.0-1) unstable; urgency=medium

  [ Ximin Luo ]
  * New upstream release.

  [ Gordon Ball ]
  * Binary package jupyter-notebook now depends on jupyter-core, to ensure
    it is possible to run "jupyter notebook"
  * Man page added for new command "jupyter bundlerextension"
  * libjs-term.js has been replaced by libjs-xterm
  * Update Standards-Version to 4.1.1
  * Documentation now includes sample notebooks; a patch is added to ignore
    errors while building these
  * New dependencies: libjs-jed, libjs-requirejs-text
  * New missing-sources: json.js from requirejs-plugins
  * This version is built with a dummy shim replacing the unpackaged
    preact, preact-compat and proptypes javascript libraries. Consequently,
    the shortcut editor will not work.

 -- Gordon Ball <email address hidden>  Sun, 05 Nov 2017 18:52:40 +0000
Superseded in bionic-release
Obsolete in artful-release
Obsolete in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
jupyter-notebook (4.2.3-4) unstable; urgency=medium

  * Clean up handling of the /etc/jupyter/nbconfig dir in maintscripts
  * Patch out the attempt to automatically import ipywidgets, which isn't
    required for ipywidgets > 4, and avoids an unneeded warning
    (closes: #848252)

 -- Gordon Ball <email address hidden>  Sat, 07 Jan 2017 11:46:16 +0100

Available diffs

Superseded in zesty-release
Deleted in zesty-proposed (Reason: moved to release) 
jupyter-notebook (4.2.3-3) unstable; urgency=medium

  * Team upload.

  [ Gordon Ball ]
  * Fix build breakage with requirejs 2.3
  * Add a systemd user unit (jupyter-notebook.service)

  [ Ximin Luo ]
  * Notify people that this package exists. (Closes: #844569)

 -- Ximin Luo <email address hidden>  Mon, 12 Dec 2016 11:32:55 +0100

Available diffs

Superseded in zesty-proposed 
jupyter-notebook (4.2.3-2) unstable; urgency=medium

  * Team upload.
  * Build source maps reproducibly (Closes: #847192)
  * Add some maintscripts to claim ownership of nbextension config files.
    Otherwise piuparts will fail notebook extension packages.

 -- Ximin Luo <email address hidden>  Wed, 07 Dec 2016 22:51:21 +0100

Available diffs

Superseded in zesty-proposed 
jupyter-notebook (4.2.3-1) unstable; urgency=medium

  * Initial release (closes: #801366).

 -- Gordon Ball <email address hidden>  Fri, 04 Nov 2016 14:54:21 +0100
1 → 41 of 41 results First • Previous • Next • Last