]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.13] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_c...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Wed, 4 Mar 2026 20:17:04 +0000 (21:17 +0100)
committerGitHub <noreply@github.com>
Wed, 4 Mar 2026 20:17:04 +0000 (20:17 +0000)
commit482d6f8bdba9da3725d272e8bb4a2d25fb6a603e
treefe8537bf2ecd09cda0e765530d4dec42a50c62d8
parentfb83592b562b785e56b1bdb0fa52d90d8a29de6a
[3.13] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)

(cherry picked from commit a51b1b512de1d56b3714b65628a2eae2b07e535e)

Co-authored-by: Steve Dower <steve.dower@python.org>
Lib/importlib/_bootstrap_external.py
Misc/NEWS.d/next/Security/2026-03-04-18-59-17.gh-issue-145506.6hwvEh.rst [new file with mode: 0644]