New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ignore CVE-2023-5752 in pip, we don't install from hg repos #26

Merged

cfm merged 1 commit into main from CVE-2023-5752

Oct 31, 2023

Member

legoktm commented Oct 30, 2023

Already suppressed in freedomofpress/securedrop#7039, covers the repos not included in #25.


          Ignore CVE-2023-5752 in pip, we don't install from hg repos

782f368

Already suppressed in <freedomofpress/securedrop#7039>.

legoktm requested review from cfm and zenmonkeykstop

October 30, 2023 21:00

cfm approved these changes

View reviewed changes

Member

cfm left a comment

Thanks for catching this, @legoktm. I'd glazed over the securedrop/fpf-misc-resources duplication in my triage scan this morning.

cfm merged commit 81dedfc into main

2 checks passed

legoktm deleted the CVE-2023-5752 branch

June 12, 2024 20:15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet