Merge pull request #22798 from smoser/cve/python-3.10-CVE-2024-4032

python-3.10 - address CVE-2024-4032
wolfi-dev · Jun 27, 2024 · b007b5c · b007b5c
2 parents d6df7ca + 3f8caf6
commit b007b5c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/python-3.10.yaml b/python-3.10.yaml
@@ -1,7 +1,7 @@
 package:
   name: python-3.10
   version: 3.10.14
-  epoch: 3
+  epoch: 4
   description: "the Python programming language"
   copyright:
     - license: PSF-2.0
@@ -48,6 +48,9 @@ pipeline:
       expected-commit: 976ea78599d71f22e9c0fefc2dc37c1d9fc835a4
       repository: https://github.com/python/cpython.git
       tag: v${{package.version}}
+      cherry-picks: |
+        # https://github.com/python/cpython/issues/113171
+        3.10/c62c9e518b784fe44432a3f4fc265fb95b651906: CVE-2024-4032
 
   - name: Force use of system libraries
     runs: |