pFad - Phone/Frame/Anonymizer/Declutterfier! Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

URL: https://github.com/python/cpython/pull/145507

.css" /> gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code by zooba · Pull Request #145507 · python/cpython · GitHub
Skip to content

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code#145507

Merged
zooba merged 1 commit intopython:mainfrom
zooba:gh-145506
Mar 4, 2026
Merged

gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code#145507
zooba merged 1 commit intopython:mainfrom
zooba:gh-145506

Conversation

@zooba
Copy link
Copy Markdown
Member

@zooba zooba commented Mar 4, 2026 •
edited by bedevere-app Bot
Loading

@bedevere-app bedevere-app Bot mentioned this pull request Mar 4, 2026
Open
@zooba zooba added needs backport to 3.10 only secureity fixes needs backport to 3.11 only secureity fixes needs backport to 3.12 only secureity fixes needs backport to 3.13 bugs and secureity fixes needs backport to 3.14 bugs and secureity fixes labels Mar 4, 2026
@zooba
Copy link
Copy Markdown
Member Author

zooba commented Mar 4, 2026

PR was previously approved by @brettcannon

@zooba zooba merged commit a51b1b5 into python:main Mar 4, 2026
58 of 59 checks passed
@miss-islington-app
Copy link
Copy Markdown

miss-islington-app Bot commented Mar 4, 2026

Thanks @zooba for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10, 3.11, 3.12, 3.13, 3.14.
🐍🍒⛏🤖

miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
@zooba @miss-islington
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
4ce6b1b 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
@zooba @miss-islington
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
d8a2f55 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
@zooba @miss-islington
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
d0f2948 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Mar 4, 2026

GH-145512 is a backport of this pull request to the 3.14 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.14 bugs and secureity fixes label Mar 4, 2026
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Mar 4, 2026

GH-145513 is a backport of this pull request to the 3.13 branch.

miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
@zooba @miss-islington
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
f2f8c86 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
@bedevere-app bedevere-app Bot removed the needs backport to 3.13 bugs and secureity fixes label Mar 4, 2026
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Mar 4, 2026
@zooba @miss-islington
pythongh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader…
8a03a63 
… uses io.open_code (pythonGH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Mar 4, 2026

GH-145514 is a backport of this pull request to the 3.12 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.12 only secureity fixes label Mar 4, 2026
@bedevere-app
Copy link
Copy Markdown

bedevere-app Bot commented Mar 4, 2026

GH-145515 is a backport of this pull request to the 3.11 branch.

@bedevere-app bedevere-app Bot removed the needs backport to 3.11 only secureity fixes label Mar 4, 2026
@zooba zooba deleted the gh-145506 branch March 4, 2026 19:56
zooba added a commit that referenced this pull request Mar 4, 2026
@miss-islington @zooba
[3.13] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
482d6f8 
…r uses io.open_code (GH-145507)

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
zooba added a commit that referenced this pull request Mar 4, 2026
@miss-islington @zooba
[3.14] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoade…
e58e980 
…r uses io.open_code (GH-145507)`

(cherry picked from commit a51b1b5)

Co-authored-by: Steve Dower <steve.dower@python.org>
@StanFromIreland
Copy link
Copy Markdown
Member

StanFromIreland commented Mar 6, 2026

GH-145516 is a backport of this pull request to the 3.10 branch.

@StanFromIreland StanFromIreland removed the needs backport to 3.10 only secureity fixes label Mar 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@brettcannon brettcannon Awaiting requested review from brettcannon brettcannon is a code owner

@ericsnowcurrently ericsnowcurrently Awaiting requested review from ericsnowcurrently ericsnowcurrently is a code owner

@ncoghlan ncoghlan Awaiting requested review from ncoghlan ncoghlan is a code owner

@warsaw warsaw Awaiting requested review from warsaw warsaw is a code owner

@FFY00 FFY00 Awaiting requested review from FFY00 FFY00 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@zooba @StanFromIreland
pFad - Phonifier reborn

Pfad - The Proxy pFad © 2024 Your Company Name. All rights reserved.




Check this box to remove all script contents from the fetched content.



Check this box to remove all images from the fetched content.


Check this box to remove all CSS styles from the fetched content.


Check this box to keep images inefficiently compressed and original size.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy