Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Temporarily add an explicit bump from setuptools 65.5.0 to 65.5.1#783

Merged
yosifkit merged 1 commit into
docker-library:masterdocker-library/python:masterfrom
infosiftr:setuptools-65.5.1infosiftr/python:setuptools-65.5.1Copy head branch name to clipboard
Jan 6, 2023
Merged

Temporarily add an explicit bump from setuptools 65.5.0 to 65.5.1#783
yosifkit merged 1 commit into
docker-library:masterdocker-library/python:masterfrom
infosiftr:setuptools-65.5.1infosiftr/python:setuptools-65.5.1Copy head branch name to clipboard

Conversation

@tianon

@tianon tianon commented Jan 5, 2023

Copy link
Copy Markdown
Member

Closes #781

@Quinncuatro

Copy link
Copy Markdown

Excellent! Thanks for the fix!

@tianon

tianon commented Jan 5, 2023

Copy link
Copy Markdown
Member Author

Copying the real important bit from #781 (comment) to be explicit here:

if you're using 3.7, 3.8, or 3.9, you'll have no choice but to either update setuptools in your own image or try to make a case upstream for them bumping the versions; that being said, I'm guessing they're going to hesitate for the same breaking-changes reason I am, and the likelihood of getting new 57.x or 58.x releases of setuptools that fix this CVE with minimal other changes is probably low

(This PR only updates Python 3.10, 3.11, and 3.12-rc.)

@yosifkit yosifkit merged commit 29c5505 into docker-library:master Jan 6, 2023
@yosifkit yosifkit deleted the setuptools-65.5.1 branch January 6, 2023 00:29
docker-library-bot added a commit to docker-library-bot/official-images that referenced this pull request Jan 6, 2023
Changes:

- docker-library/python@29c5505: Merge pull request docker-library/python#783 from infosiftr/setuptools-65.5.1
- docker-library/python@a660dab: Ditch "tac|tac" for more reliable scraping
- docker-library/python@046374f: Temporarily add an explicit bump from setuptools 65.5.0 to 65.5.1
- docker-library/python@826fc07: Update 3.11
- docker-library/python@095cb43: Update 3.11
- docker-library/python@3fa0ae0: Update generated README
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update setuptools version following CVE-2022-40897

3 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.