Skip to content

[python] - setuptools - GHSA-cx63-2mw6-8hw5 - reqd. to be updated to v70.0.0 #1054

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Gaurav Saini (gauravsaini04) wants to merge 10 commits into from
Closed

[python] - setuptools - GHSA-cx63-2mw6-8hw5 - reqd. to be updated to v70.0.0 #1054

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
9ad3737
[python] - setuptools - GHSA-cx63-2mw6-8hw5 - reqd. to be updated to…
gauravsaini04 Jul 23, 2024
d50b3b5
pipx preference over pip
gauravsaini04 Jul 23, 2024
836ac28
mistake correction
gauravsaini04 Jul 23, 2024
7dd40cb
change
gauravsaini04 Jul 23, 2024
6dd788c
depending on debian or non-debian, changed code
gauravsaini04 Jul 23, 2024
786c2ad
misc. change
gauravsaini04 Jul 23, 2024
80c8929
more changes
gauravsaini04 Jul 23, 2024
0cb6a5f
in a separate function
gauravsaini04 Jul 23, 2024
851191b
small change
gauravsaini04 Jul 23, 2024
665f022
another change
gauravsaini04 Jul 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 26 additions & 4 deletions src/python/install.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -799,6 +799,28 @@ else
PYTHON_SRC=$(which python)
fi

# for vulnerability patching - https://github.com/advisories/GHSA-cx63-2mw6-8hw5
patch_setuptools() {
if [ "$(grep '^ID=' /etc/os-release | cut -d'=' -f2)" != "debian" ]; then
# Check if pipx is installed
export PYTHONUSERBASE=/tmp/pip-tmp
export PIP_CACHE_DIR=/tmp/pip-tmp/cache
PIPX_DIR=""
if ! type pipx > /dev/null 2>&1; then
if python_is_externally_managed ${PYTHON_SRC}; then
check_packages pipx
"${PIPX_DIR}pipx" install 'setuptools==70.0.0'
else
pip install setuptools==70.0.0
fi
fi
else
install_user_package "$INSTALL_UNDER_ROOT" "setuptools==70.0.0"
fi
}

patch_setuptools

# Install Python tools if needed
if [[ "${INSTALL_PYTHON_TOOLS}" = "true" ]] && [[ -n "${PYTHON_SRC}" ]]; then
echo 'Installing Python tools...'
Expand Down Expand Up @@ -857,23 +879,23 @@ if [[ "${INSTALL_PYTHON_TOOLS}" = "true" ]] && [[ -n "${PYTHON_SRC}" ]]; then
mkdir -p /tmp/setuptools_downloaded
cd /tmp/setuptools_downloaded
# download the source distribution for setuptools using pip
pip download setuptools==65.5.1 --no-binary :all:
pip download setuptools==70.0.0 --no-binary :all:
# extract the filename of the setuptools-*.tar.gz file
filename=$(find . -maxdepth 1 -type f)
# create a directory to store unpacked contents of the source distribution
mkdir -p /tmp/setuptools_src_dist
# extract the contents inside the new directory
tar -xzf $filename -C /tmp/setuptools_src_dist
# move to the setuptools-* directory inside /setuptools_src_dist
cd /tmp/setuptools_src_dist/setuptools-65.5.1/
cd /tmp/setuptools_src_dist/setuptools-70.0.0/
# look for setup.py file in the current directory and create a wheel file
python setup.py bdist_wheel
# move inside the dist directory in pwd
cd dist
# copy this file to the ensurepip/_bundled directory
cp setuptools-65.5.1-py3-none-any.whl /usr/local/lib/python${PY_MAJOR_MINOR_VER}/ensurepip/_bundled/
cp setuptools-70.0.0-py3-none-any.whl /usr/local/lib/python${PY_MAJOR_MINOR_VER}/ensurepip/_bundled/
# replace the version in __init__.py file with the installed version
sed -i 's/_SETUPTOOLS_VERSION = \"65\.5\.0\"/_SETUPTOOLS_VERSION = "65.5.1"/g' /usr/local/lib/"python${PY_MAJOR_MINOR_VER}"/ensurepip/__init__.py
sed -i 's/_SETUPTOOLS_VERSION = \"65\.5\.0\"/_SETUPTOOLS_VERSION = "70.0.0"/g' /usr/local/lib/"python${PY_MAJOR_MINOR_VER}"/ensurepip/__init__.py
# cleanup created dir's
rm -rf /tmp/setuptools_downloaded /tmp/setuptools_src_dist
fi
Expand Down