python27: add patches for known security issues#203362
Merged
mweinelt merged 1 commit intoNixOS:stagingfrom Nov 28, 2022
thiagokokada:add-patches-to-python27-cves
Merged
python27: add patches for known security issues#203362mweinelt merged 1 commit intoNixOS:stagingfrom thiagokokada:add-patches-to-python27-cves
mweinelt merged 1 commit intoNixOS:stagingfrom
thiagokokada:add-patches-to-python27-cves
Conversation
thiagokokada
added
the
1.severity: security
github-actions
bot
added
the
6.topic: python
thiagokokada
added
backport release-22.11
and removed
6.topic: python
github-actions
bot
added
the
6.topic: python
Add patches from Arch Linux package (that itself source its patches from Gentoo) to the following known security issues in Python 2.7: - CVE-2020-26116 - CVE-2020-27619 - CVE-2020-8492 This should cover all security issues currently listed in https://www.activestate.com/products/python/python-2-end-of-life-security-updates/.
13 tasks
ofborg
bot
added
10.rebuild-darwin: 101-500
1 task
Contributor
|
Successfully created backport PR #203382 for |
This was referenced Nov 28, 2022
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description of changes
Add patches from Arch Linux package (that itself source its patches from Gentoo) to the following known security issues in Python 2.7:
This should cover all security issues currently listed in https://www.activestate.com/products/python/python-2-end-of-life-security-updates/.
Substitute for #201859 since this should fix all CVEs listed in that PR.
Things done
sandbox = trueset innix.conf? (See Nix manual)nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/)nixos/doc/manual/md-to-db.shto update generated release notes