IronLanguages / ironpython2

Implementation of the Python programming language for .NET Framework; built on top of the Dynamic Language Runtime (DLR).
http://ironpython.net
Apache License 2.0
1.08k stars 229 forks source link

Fix CVE-2022-0391 #808

Closed theta682 closed 2 years ago

theta682 commented 2 years ago

Implement the fix from the upstream https://github.com/python/cpython/pull/25595

dnfadmin commented 2 years ago

CLA assistant check
All CLA requirements met.

theta682 commented 2 years ago

@slozier can you merge this backport from the upstream and release a new version because CVE-2022-0391 has High severity?

slozier commented 2 years ago

Thanks for the PR!