jupyterlab - Debian Package Tracker

general

source: jupyterlab (main)
version: 4.0.11+ds1+~cs11.25.27-9
maintainer: Debian Javascript Maintainers (archive) (DMD)
arch: all
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 4.0.11+ds1+~cs11.25.27-7
testing: 4.0.11+ds1+~cs11.25.27-9
unstable: 4.0.11+ds1+~cs11.25.27-9

versioned links

4.0.11+ds1+~cs11.25.27-7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0.11+ds1+~cs11.25.27-9: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

jupyterlab

action needed

A new upstream version is available: 4.6.0a0+~cs12.34.21 high

A new upstream version 4.6.0a0+~cs12.34.21 is available, you should consider packaging it.

Created: 2025-12-04 Last update: 2025-12-17 22:30

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2025-59842: jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in LaTeX (typically visibly different from other links). This issue has been patched in version 4.4.8.

Created: 2025-09-27 Last update: 2025-12-09 05:46

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2025-59842: jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in LaTeX (typically visibly different from other links). This issue has been patched in version 4.4.8.

Created: 2025-09-27 Last update: 2025-12-09 05:46

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit e0eb48e9f8ba162c4563f6ae6056adea834d5fa0
Author: Bastien Roucariès <rouca@debian.org>
Date:   Wed Dec 3 19:13:05 2025 +0100

    Use glob instead of @types/glob

commit c00374f89e4c12cec1a0c5ddcdc51593b872f579
Author: Bastien Roucariès <rouca@debian.org>
Date:   Wed Dec 3 18:39:52 2025 +0100

    Port to glob10

Created: 2025-12-04 Last update: 2025-12-17 07:03

lintian reports 22 warnings normal

Lintian reports 22 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-12-04 Last update: 2025-12-04 12:01

AppStream hints: 1 warning for jupyterlab normal

AppStream found metadata issues for packages:

jupyterlab: 1 warning

You should get rid of them to provide more metadata about this software.

Created: 2025-06-05 Last update: 2025-06-05 23:30

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2025-59842: (needs triaging) jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in LaTeX (typically visibly different from other links). This issue has been patched in version 4.4.8.

You can find information about how to handle this issue in the security team's documentation.

Created: 2025-09-27 Last update: 2025-12-09 05:46

news

[rss feed]

[2025-12-09] jupyterlab 4.0.11+ds1+~cs11.25.27-9 MIGRATED to testing (Debian testing watch)
[2025-12-03] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-9 (source) into unstable (Bastien Roucariès) (signed by: Bastien ROUCARIÈS)
[2025-11-13] jupyterlab 4.0.11+ds1+~cs11.25.27-8 MIGRATED to testing (Debian testing watch)
[2025-11-07] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-8 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2025-06-26] jupyterlab 4.0.11+ds1+~cs11.25.27-7 MIGRATED to testing (Debian testing watch)
[2025-06-05] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-7 (source) into unstable (Picca Frédéric-Emmanuel)
[2025-04-08] jupyterlab 4.0.11+ds1+~cs11.25.27-6 MIGRATED to testing (Debian testing watch)
[2025-04-02] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-6 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2025-03-28] jupyterlab 4.0.11+ds1+~cs11.25.27-5 MIGRATED to testing (Debian testing watch)
[2025-03-22] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-5 (source) into unstable (Roland Mas)
[2024-12-31] jupyterlab 4.0.11+ds1+~cs11.25.27-4 MIGRATED to testing (Debian testing watch)
[2024-12-26] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-4 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2024-12-01] jupyterlab 4.0.11+ds1+~cs11.25.27-3 MIGRATED to testing (Debian testing watch)
[2024-11-25] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-3 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2024-09-03] jupyterlab 4.0.11+ds1+~cs11.25.27-2 MIGRATED to testing (Debian testing watch)
[2024-08-27] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-2 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2024-08-12] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-1 (source all) into unstable (Debian FTP Masters) (signed by: Xavier Guimard)
[2024-05-14] jupyterlab REMOVED from testing (Debian testing watch)
[2024-04-07] jupyterlab 4.0.11+ds1-2 MIGRATED to testing (Debian testing watch)
[2024-03-19] Accepted jupyterlab 4.0.11+ds1-2 (source) into unstable (Roland Mas)
[2024-01-22] Accepted jupyterlab 4.0.11+ds1-1 (source) into unstable (Roland Mas)
[2024-01-12] Accepted jupyterlab 4.0.10+ds1-1 (source all) into unstable (Roland Mas)
[2023-12-26] Accepted jupyterlab 4.0.9+ds1-1 (source) into unstable (Roland Mas)
[2023-11-14] Accepted jupyterlab 4.0.8+ds1-2 (source) into unstable (Roland Mas)
[2023-11-11] Accepted jupyterlab 4.0.8+ds1-1 (source all) into unstable (Debian FTP Masters) (signed by: Roland Mas)

bugs [bug history graph]

all: 3
RC: 0
I&N: 3
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 22)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.0.11+ds1+~cs11.25.27-8