Skip to content

bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900#31731

Merged
zooba merged 1 commit intopython:mainfrom
zooba:bpo-44549
Mar 7, 2022
Merged

bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900#31731
zooba merged 1 commit intopython:mainfrom
zooba:bpo-44549

Conversation

@zooba
Copy link
Member

@zooba zooba commented Mar 7, 2022 •
edited by bedevere-bot
Loading

@zooba zooba requested a review from a team as a code owner March 7, 2022 17:48
@zooba zooba merged commit 105b9ac into python:main Mar 7, 2022
@miss-islington
Copy link
Contributor

miss-islington commented Mar 7, 2022

Thanks @zooba for the PR 🌮🎉.. I'm working now to backport this PR to: 3.7, 3.8, 3.9, 3.10.
🐍🍒⛏🤖

@miss-islington
Copy link
Contributor

miss-islington commented Mar 7, 2022

Sorry @zooba, I had trouble checking out the 3.10 backport branch.
Please backport using cherry_picker on command line.
cherry_picker 105b9ac00174d7bcc653f9e9dc5052215e197c77 3.10

@miss-islington
Copy link
Contributor

miss-islington commented Mar 7, 2022

Sorry, @zooba, I could not cleanly backport this to 3.9 due to a conflict.
Please backport using cherry_picker on command line.
cherry_picker 105b9ac00174d7bcc653f9e9dc5052215e197c77 3.9

@miss-islington
Copy link
Contributor

miss-islington commented Mar 7, 2022

Sorry @zooba, I had trouble checking out the 3.8 backport branch.
Please backport using cherry_picker on command line.
cherry_picker 105b9ac00174d7bcc653f9e9dc5052215e197c77 3.8

@miss-islington
Copy link
Contributor

miss-islington commented Mar 7, 2022

Sorry, @zooba, I could not cleanly backport this to 3.7 due to a conflict.
Please backport using cherry_picker on command line.
cherry_picker 105b9ac00174d7bcc653f9e9dc5052215e197c77 3.7

@bedevere-bot
Copy link

bedevere-bot commented Mar 7, 2022

GH-31732 is a backport of this pull request to the 3.10 branch.

@bedevere-bot bedevere-bot removed the needs backport to 3.10 only security fixes label Mar 7, 2022
zooba added a commit to zooba/cpython that referenced this pull request Mar 7, 2022
@zooba
bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-20…
ee6dcab 
…16-3189 and CVE-2019-12900 (pythonGH-31731)
@zooba zooba deleted the bpo-44549 branch March 7, 2022 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@zooba zooba

Labels

OS-windows type-security A security issue

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@zooba @miss-islington @bedevere-bot @hugovk @the-knights-who-say-ni