FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code by zooba · Pull Request #145507 · python/cpython · GitHub

  1. python
  2. cpython

Repository navigation

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code - #145507

Merged
zooba merged 1 commit into
python:mainfrom
zooba:gh-145506
Mar 4, 2026
ConversationCommits (1)ChecksFiles changed
Merged

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code#145507
zooba merged 1 commit into
python:mainfrom
zooba:gh-145506

Conversation

zooba commented Mar 4, 2026 •
edited by bedevere-app Bot
Loading

Copy link
Copy Markdown
Member

bedevere-app Bot mentioned this pull request Mar 4, 2026
Closed
zooba added needs backport to 3.10 needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes needs backport to 3.13 only security fixes needs backport to 3.14 bugs and security fixes labels Mar 4, 2026

zooba commented Mar 4, 2026

Copy link
Copy Markdown
Member Author

PR was previously approved by @brettcannon

zooba merged commit a51b1b5 into python:main Mar 4, 2026
58 of 59 checks passed

miss-islington-app Bot commented Mar 4, 2026

Copy link
Copy Markdown

Thanks @zooba for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10, 3.11, 3.12, 3.13, 3.14.
🐍🍒⛏🤖

miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
4ce6b1b 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
d8a2f55 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
d0f2948 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>

bedevere-app Bot commented Mar 4, 2026

Copy link
Copy Markdown

GH-145512 is a backport of this pull request to the 3.14 branch.

bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label Mar 4, 2026

bedevere-app Bot commented Mar 4, 2026

Copy link
Copy Markdown

GH-145513 is a backport of this pull request to the 3.13 branch.

miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
f2f8c86 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
bedevere-app Bot removed the needs backport to 3.13 only security fixes label Mar 4, 2026
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
8a03a63 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>

bedevere-app Bot commented Mar 4, 2026

Copy link
Copy Markdown

GH-145514 is a backport of this pull request to the 3.12 branch.

bedevere-app Bot removed the needs backport to 3.12 only security fixes label Mar 4, 2026

bedevere-app Bot commented Mar 4, 2026

Copy link
Copy Markdown

GH-145515 is a backport of this pull request to the 3.11 branch.

bedevere-app Bot removed the needs backport to 3.11 only security fixes label Mar 4, 2026
zooba deleted the gh-145506 branch March 4, 2026 19:56
zooba added a commit that referenced this pull request Mar 4, 2026
[3.13] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
482d6f8 
…r uses io.open_code (GH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
zooba added a commit that referenced this pull request Mar 4, 2026
[3.14] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
e58e980 
…r uses io.open_code (GH-145507)`

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>

StanFromIreland commented Mar 6, 2026

Copy link
Copy Markdown
Member

GH-145516 is a backport of this pull request to the 3.10 branch.

ljfp pushed a commit to ljfp/cpython that referenced this pull request Apr 25, 2026
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
4d32387 
… uses io.open_code (pythonGH-145507)
pablogsal pushed a commit that referenced this pull request Apr 30, 2026
[3.10] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
876858c 
…r uses io.open_code (GH-145507) (#145516)

* gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)
(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>

* Regenerate importlib_external.h

* Fix blurb entry

The `:cve:` role is not available on this branch.

---------

Co-authored-by: Steve Dower <steve.dower@python.org>
Co-authored-by: Stan Ulbrych <stan@ulbrych.org>
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
pablogsal pushed a commit that referenced this pull request Apr 30, 2026
[3.11] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
69ddd9b 
…r uses io.open_code (GH-145507) (#145515)

* gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)
(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>

* Fix docs reference

---------

Co-authored-by: Steve Dower <steve.dower@python.org>
Yhg1s pushed a commit that referenced this pull request Aug 4, 2026
[3.12] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
c70adad 
…r uses io.open_code (GH-145507) (#145514)

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)
(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

brettcannon Awaiting requested review from brettcannon brettcannon is a code owner
ericsnowcurrently Awaiting requested review from ericsnowcurrently ericsnowcurrently is a code owner
ncoghlan Awaiting requested review from ncoghlan ncoghlan is a code owner
warsaw Awaiting requested review from warsaw warsaw is a code owner
FFY00 Awaiting requested review from FFY00 FFY00 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL