1a3cef77d4
This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
22 lines
991 B
Diff
22 lines
991 B
Diff
diff -Nurp a/pip/_vendor/pep517/wrappers.py b/pip/_vendor/pep517/wrappers.py
|
|
--- a/pip/_vendor/pep517/wrappers.py 2020-05-19 10:39:38.000000000 +0800
|
|
+++ b/pip/_vendor/pep517/wrappers.py 2020-06-30 20:19:05.495033208 +0800
|
|
@@ -14,11 +14,16 @@ try:
|
|
import importlib.resources as resources
|
|
|
|
def _in_proc_script_path():
|
|
- return resources.path(__package__, '_in_process.py')
|
|
+ if resources.is_resource(__package__, '_in_process.py'):
|
|
+ return resources.path(__package__, '_in_process.py')
|
|
+ return resources.path(__package__, '_in_process.pyc')
|
|
except ImportError:
|
|
@contextmanager
|
|
def _in_proc_script_path():
|
|
- yield pjoin(dirname(abspath(__file__)), '_in_process.py')
|
|
+ _in_proc_script = pjoin(dirname(abspath(__file__)), '_in_process.py')
|
|
+ if not os.path.isfile(_in_proc_script):
|
|
+ _in_proc_script = pjoin(dirname(abspath(__file__)), '_in_process.pyc')
|
|
+ yield _in_proc_script
|
|
|
|
|
|
@contextmanager
|