Skip to content

Temporarily add an explicit bump from setuptools 65.5.0 to 65.5.1 #783

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 6, 2023

Conversation

tianon
Copy link
Member

@tianon tianon commented Jan 5, 2023

Closes #781

@Quinncuatro
Copy link

Excellent! Thanks for the fix!

@tianon
Copy link
Member Author

tianon commented Jan 5, 2023

Copying the real important bit from #781 (comment) to be explicit here:

if you're using 3.7, 3.8, or 3.9, you'll have no choice but to either update setuptools in your own image or try to make a case upstream for them bumping the versions; that being said, I'm guessing they're going to hesitate for the same breaking-changes reason I am, and the likelihood of getting new 57.x or 58.x releases of setuptools that fix this CVE with minimal other changes is probably low

(This PR only updates Python 3.10, 3.11, and 3.12-rc.)

@yosifkit yosifkit merged commit 29c5505 into docker-library:master Jan 6, 2023
@yosifkit yosifkit deleted the setuptools-65.5.1 branch January 6, 2023 00:29
docker-library-bot added a commit to docker-library-bot/official-images that referenced this pull request Jan 6, 2023
Changes:

- docker-library/python@29c5505: Merge pull request docker-library/python#783 from infosiftr/setuptools-65.5.1
- docker-library/python@a660dab: Ditch "tac|tac" for more reliable scraping
- docker-library/python@046374f: Temporarily add an explicit bump from setuptools 65.5.0 to 65.5.1
- docker-library/python@826fc07: Update 3.11
- docker-library/python@095cb43: Update 3.11
- docker-library/python@3fa0ae0: Update generated README
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update setuptools version following CVE-2022-40897
3 participants