Update bundled setuptools provided by ensurepip in current 3.8.x through 3.11.x to include fix for CVE-2022-40897? · Issue #102202 · python/cpython · GitHub

python / cpython Public

• Notifications You must be signed in to change notification settings
• Fork 35.3k
• Star 74.9k

• Code
• Issues 5k+
• Pull requests 2.5k
• Actions
• Projects
• Security and quality
• Insights

Additional navigation options

Update bundled setuptools provided by ensurepip in current 3.8.x through 3.11.x to include fix for CVE-2022-40897? #102202

Copy link

Copy link

Closed as not planned

Closed as not planned

Update bundled setuptools provided by ensurepip in current 3.8.x through 3.11.x to include fix for CVE-2022-40897?#102202

Copy link

Labels

3.10only security fixesonly security fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of liferelease-blockerstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytopic-ensurepiptype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-securityA security issueA security issue

Description

LianwMS

opened on Feb 24, 2023

Issue body actions

Just found the image are impacted. Any fix plan?
GHSA-r9hx-vwmv-q579

Linked PRs

• gh-102202: Update bundled setuptools to 67.4.0 #102208

Reactions are currently unavailable

Metadata

Metadata

Assignees

No one assigned

Labels

3.10only security fixesonly security fixes3.8 (EOL)end of lifeend of life3.9 (EOL)end of lifeend of liferelease-blockerstdlibStandard Library Python modules in the Lib/ directoryStandard Library Python modules in the Lib/ directorytopic-ensurepiptype-bugAn unexpected behavior, bug, or errorAn unexpected behavior, bug, or errortype-securityA security issueA security issue

Projects

Release and Deferred blockers 🚫

Status

Done

Show more project fields

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions