jupyterlab - Debian Package Tracker

general

source: jupyterlab (main)
version: 4.0.11+ds1+~cs11.25.27-2
maintainer: Debian Javascript Maintainers (archive) (DMD)
uploaders: Yadd [DMD] – Roland Mas [DMD]
arch: all
std-ver: 4.7.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

testing: 4.0.11+ds1+~cs11.25.27-2
unstable: 4.0.11+ds1+~cs11.25.27-2

versioned links

4.0.11+ds1+~cs11.25.27-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

jupyterlab (1 bugs: 1, 0, 0, 0)

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In debian/watch no matching files for watch line
  https://github.com/jupyter-server/jupyter_ydoc/tags .*/archive.*/v?([\d\.]+)(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) checksum

Created: 2024-08-31 Last update: 2024-10-11 11:00

A new upstream version is available: 4.2.5 high

A new upstream version 4.2.5 is available, you should consider packaging it.

Created: 2024-02-03 Last update: 2024-10-11 11:00

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2024-43805: jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2 have been patched to resolve this issue. Users are advised to upgrade. There is no workaround for the underlying DOM Clobbering susceptibility. However, select plugins can be disabled on deployments which cannot update in a timely fashion to minimise the risk. These are: 1. `@jupyterlab/mathjax-extension:plugin` - users will loose ability to preview mathematical equations. 2. `@jupyterlab/markdownviewer-extension:plugin` - users will loose ability to open Markdown previews. 3. `@jupyterlab/mathjax2-extension:plugin` (if installed with optional `jupyterlab-mathjax2` package) - an older version of the mathjax plugin for JupyterLab 4.x. To disable these extensions run: ```jupyter labextension disable @jupyterlab/markdownviewer-extension:plugin && jupyter labextension disable @jupyterlab/mathjax-extension:plugin && jupyter labextension disable @jupyterlab/mathjax2-extension:plugin ``` in bash.

Created: 2024-09-03 Last update: 2024-09-27 16:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2024-43805: jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2 have been patched to resolve this issue. Users are advised to upgrade. There is no workaround for the underlying DOM Clobbering susceptibility. However, select plugins can be disabled on deployments which cannot update in a timely fashion to minimise the risk. These are: 1. `@jupyterlab/mathjax-extension:plugin` - users will loose ability to preview mathematical equations. 2. `@jupyterlab/markdownviewer-extension:plugin` - users will loose ability to open Markdown previews. 3. `@jupyterlab/mathjax2-extension:plugin` (if installed with optional `jupyterlab-mathjax2` package) - an older version of the mathjax plugin for JupyterLab 4.x. To disable these extensions run: ```jupyter labextension disable @jupyterlab/markdownviewer-extension:plugin && jupyter labextension disable @jupyterlab/mathjax-extension:plugin && jupyter labextension disable @jupyterlab/mathjax2-extension:plugin ``` in bash.

Created: 2024-08-28 Last update: 2024-09-27 16:00

lintian reports 23 warnings high

Lintian reports 23 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2024-02-20 Last update: 2024-08-13 03:11

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2024-09-03 Last update: 2024-10-11 08:00

debian/patches: 1 patch to forward upstream low

Among the 12 debian patches available in version 4.0.11+ds1+~cs11.25.27-2 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-11-19 Last update: 2024-08-27 15:18

news

[rss feed]

[2024-09-03] jupyterlab 4.0.11+ds1+~cs11.25.27-2 MIGRATED to testing (Debian testing watch)
[2024-08-27] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-2 (source) into unstable (Yadd) (signed by: Xavier Guimard)
[2024-08-12] Accepted jupyterlab 4.0.11+ds1+~cs11.25.27-1 (source all) into unstable (Debian FTP Masters) (signed by: Xavier Guimard)
[2024-05-14] jupyterlab REMOVED from testing (Debian testing watch)
[2024-04-07] jupyterlab 4.0.11+ds1-2 MIGRATED to testing (Debian testing watch)
[2024-03-19] Accepted jupyterlab 4.0.11+ds1-2 (source) into unstable (Roland Mas)
[2024-01-22] Accepted jupyterlab 4.0.11+ds1-1 (source) into unstable (Roland Mas)
[2024-01-12] Accepted jupyterlab 4.0.10+ds1-1 (source all) into unstable (Roland Mas)
[2023-12-26] Accepted jupyterlab 4.0.9+ds1-1 (source) into unstable (Roland Mas)
[2023-11-14] Accepted jupyterlab 4.0.8+ds1-2 (source) into unstable (Roland Mas)
[2023-11-11] Accepted jupyterlab 4.0.8+ds1-1 (source all) into unstable (Debian FTP Masters) (signed by: Roland Mas)

bugs [bug history graph]

all: 2
RC: 1
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 23)
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.0.11+ds1+~cs11.25.27-1