[AutoPR- Security] Patch python3 for CVE-2025-8194 [HIGH] #14443
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
microsoft-github-policy-service
bot
added
Packaging
fasttrack/3.0
|
/azurepipelines run |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
/azurepipelines run |
|
Azure Pipelines successfully started running 1 pipeline(s). |
Kanishk-Bansal
approved these changes
Aug 11, 2025
Kanishk-Bansal
added
the
CVEFixReadyForMaintainerReview
PawelWMS
removed
the
CVEFixReadyForMaintainerReview
|
@Kanishk-Bansal Looks like the upstream PR has not been merged yet. Could you please monitor and re-add the ready for reviewer label once the fix is merged? You could also reach out to Nikhil (from MSRC) to learn what the final fix is. In the comment section in the upstream PR, there seems to be an ongoing conversation on an alternative backport which suggests they have not fully agreed on the final fix. |
|
@abadawi591 The PR python/cpython#137171 has been merged, We can go ahead with the patch |
Kanishk-Bansal
added
the
CVEFixReadyForMaintainerReview
CBL-Mariner-Bot
pushed a commit
that referenced
this pull request
Aug 12, 2025
Co-authored-by: Kevin Lockwood <[email protected]> Co-authored-by: Kevin Lockwood <[email protected]> (cherry picked from commit 1be1fe0)
|
Auto cherry-pick results:
Auto cherry-pick pipeline run -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=897049&view=results |
aaruag
pushed a commit
that referenced
this pull request
Aug 12, 2025
Co-authored-by: Kevin Lockwood <[email protected]> Co-authored-by: Kevin Lockwood <[email protected]> (cherry picked from commit 1be1fe0)
aaruag
pushed a commit
that referenced
this pull request
Aug 21, 2025
Co-authored-by: Kevin Lockwood <[email protected]> Co-authored-by: Kevin Lockwood <[email protected]> (cherry picked from commit 1be1fe0)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Auto Patch python3 for CVE-2025-8194.
Autosec pipeline run -> https://dev.azure.com/mariner-org/mariner-chatbot/_build/results?buildId=891155&view=results
Merge Checklist
All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)
*-staticsubpackages, etc.) have had theirReleasetag incremented../cgmanifest.json,./toolkit/scripts/toolchain/cgmanifest.json,.github/workflows/cgmanifest.json)./LICENSES-AND-NOTICES/SPECS/data/licenses.json,./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md,./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)*.signatures.jsonfilessudo make go-tidy-allandsudo make go-test-coveragepassSummary
What does the PR accomplish, why was it needed?
Change Log
Does this affect the toolchain?
YES
Associated issues
Links to CVEs
Test Methodology