-
Notifications
You must be signed in to change notification settings - Fork 397
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[python]-setuptools-GHSA-r9hx-vwmv-q579-remove setuptools-65.5.0-py3-none-any.whl #866
[python]-setuptools-GHSA-r9hx-vwmv-q579-remove setuptools-65.5.0-py3-none-any.whl #866
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Super cool, thank you so much for taking a stab at fixing it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Great, looks good to me! Left one minor comment.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚡
Feature name:
Description:
This PR patches the following vulnerability:
setuptools
package;Changelog:
Updated
install.sh
filesetuptools-65.5.0-py3-none-any.whl
withsetuptools-69.1.0-py3-none-any.whl
setuptools
source distribution;__init__.py
file insideensurepip
folder to have the corresponding correct version ofsetuptools
.Updated tests to verify that the vulnerable file
setuptools-65.5.0-py3-none-any.whl
no longer exists, which fixes GHSA-r9hx-vwmv-q579);Checklist: