Skip to content

Update bundled setuptools provided by ensurepip in current 3.8.x through 3.11.x to include fix for CVE-2022-40897? #102202

New issue
Jump to bottom
New issue
Jump to bottom
Closed as not planned
Closed as not planned
Update bundled setuptools provided by ensurepip in current 3.8.x through 3.11.x to include fix for CVE-2022-40897?#102202
Labels
3.10only security fixes3.8 (EOL)end of life3.9only security fixesrelease-blockerstdlibPython modules in the Lib dirtopic-ensurepiptype-bugAn unexpected behavior, bug, or errortype-securityA security issue
@LianwMS

Description

@LianwMS
LianwMS
opened on Feb 24, 2023

Just found the image are impacted. Any fix plan?
GHSA-r9hx-vwmv-q579

Linked PRs

Metadata

Assignees

No one assigned

    Labels

    3.10only security fixes3.8 (EOL)end of life3.9only security fixesrelease-blockerstdlibPython modules in the Lib dirtopic-ensurepiptype-bugAn unexpected behavior, bug, or errortype-securityA security issue

    Type

    No type

    Projects

    Release and Deferred blockers 🚫

    • Status

      Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions