GNU bug report logs

#46631 Python CVE-2021-3177

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #11 received at 46631@debbugs.gnu.org (full text, mbox, reply):

Received: (at 46631) by debbugs.gnu.org; 19 Feb 2021 23:13:15 +0000
From debbugs-submit-bounces@debbugs.gnu.org Fri Feb 19 18:13:15 2021
Received: from localhost ([127.0.0.1]:50600 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lDExS-00015X-Bj
	for submit@debbugs.gnu.org; Fri, 19 Feb 2021 18:13:15 -0500
Received: from out2-smtp.messagingengine.com ([66.111.4.26]:41195)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <leo@famulari.name>) id 1lDExO-000151-GR
 for 46631@debbugs.gnu.org; Fri, 19 Feb 2021 18:13:09 -0500
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 7F8655C00C3;
 Fri, 19 Feb 2021 18:13:00 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
 by compute3.internal (MEProxy); Fri, 19 Feb 2021 18:13:00 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name;
 h=date:from:to:subject:message-id:mime-version:content-type; s=
 mesmtp; bh=2lOgx7UgEp86JOay2r39emB8w+E3d8i/q8qD2ljJlgY=; b=jmTVo
 MGByTF/Sjj5XYZ9pjXrOhktp+6Yy7xs/NSotxwf1ePas7qeZiQNpYPV831w6dgbk
 bXXZyz6mt4JJngW+2InbJb5Ikmk6qCKwyvMrTRCAWdOdw0CRGAIiqY85OxzX+B2u
 p/8fMi1meT/Egb9rPFXrTrxtKgSH0EXPuQTfhQ=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender
 :x-me-sender:x-sasl-enc; s=fm2; bh=2lOgx7UgEp86JOay2r39emB8w+E3d
 8i/q8qD2ljJlgY=; b=Hu94rLijc++4U+BjiL8fCJHumbbalZasJYBCmwO/hSRPn
 +GbZeFPgupaEGdX1c/GMjBWrRYLEZ2iMUrFIDnfyM7O1KrctOvp6A1DrwFh+gBcu
 2LeSHHyeR+RjMA2SZwBm9RoOcVtYZPdAUrFd6uZ7nAUeYZ5WwPKQsacDxWJhAIGL
 TItpd3UypEWpt6MqakqRATvjN1SJnH13R+SE/QLzaFUF43V7BPGOZNuDQDwcFZJl
 NN4dNz3pusErORLsrVUJf5ySaFCPEVX1mkXVEvbEige6Vq8fyxD/ewyEq2MJbEOT
 lWgzQKVTjFQqdegDYjyibGOUcir/gXRQ+q9Zw76QQ==
X-ME-Sender: <xms:_EUwYHA3fnPIYU2owLx_3QMUxhN6EtFRpIaSD_rQW3a4XHnohkTR4Q>
 <xme:_EUwYPil7kmyVYKJoQOw-ndO-pt06D5adFpTbbCd4C2B0Ws280FmtaELn_Ayo4mOT
 XqCjWTs_UDj7zLQVg>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrjeejgddtiecutefuodetggdotefrodftvf
 curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu
 uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfggtggusehmtderredttd
 dvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdr
 nhgrmhgvqeenucggtffrrghtthgvrhhnpeelleefvdffudeiueeihfeiiedvgeekheejie
 evhfeiteejfeefhfeglefhfffgieenucfkphepieelrdduvddtrdelvddrvddtkeenucev
 lhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrg
 hmuhhlrghrihdrnhgrmhgv
X-ME-Proxy: <xmx:_EUwYL_7zly7Ngvoca9SVtbiOhla2ZNDlOiYsRKjGwrjSqYerOSy_g>
 <xmx:_EUwYL-_h9FIW12zr75p7C20zIQei1fd-EcHaN-q-7jd0WsHM5K73w>
 <xmx:_EUwYEAr0VRHfGpaw8nFxGLyK8lnHimth3Wetu9eilCYkJdJAy2ooQ>
 <xmx:_EUwYAq-3nVvkLCcji3EgISJv9MTeTNRDPV2j7oKqhVYFoS3TiB59g>
Received: from localhost (ool-45785cd0.dyn.optonline.net [69.120.92.208])
 by mail.messagingengine.com (Postfix) with ESMTPA id 5B3EA108005C
 for <46631@debbugs.gnu.org>; Fri, 19 Feb 2021 18:13:00 -0500 (EST)
Date: Fri, 19 Feb 2021 18:12:58 -0500
From: Leo Famulari <leo@famulari.name>
To: 46631@debbugs.gnu.org
Subject: Re: Python CVE-2021-3177
Message-ID: <YDBF+l7hL3IzP185@jasmine.lan>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="/YZKjQU8EkpL8FB1"
Content-Disposition: inline
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 46631
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
[Message part 1 (text/plain, inline)]
I pushed a fix for Python 3.9 in commit
f08c7cb0c75e7d5305c82d6a4af68ddf74fb08b1.

But, we use Python 3.8 for everything, and my patch (attached) fails to
apply for some reason. It does work when I apply the new bug fix patch
"by hand" onto the Guix source code for our current python-3.8 package.
[0001-gnu-Python-Fix-CVE-2021-3177.patch (text/plain, attachment)]

Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sat Dec 21 16:54:27 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.