Nixpkgs security tracker
NIXPKGS-2026-0521
GitHub issue
published 3 months, 2 weeks ago
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
added
maintainer.add
2 maintainers
- @mweinelt
- @natsukium
- @LeSuisse ignored package haskellPackages.cpython
- @LeSuisse accepted
- @LeSuisse published on GitHub
SourcelessFileLoader does not use io.open_code()
The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.
References
-
https://github.com/python/cpython/issues/145506 issue-tracking
Affected products
CPython
- <3.15.0
Ignored packages (1)
pkgs.haskellPackages.cpython
Bindings for libpython
Package maintainers
Additional maintainers
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@natsukium Tomoya Otabi <nixpkgs@natsukium.com>