Skip to content

Harden Python agent and align uv tooling - #1180

Open
gerardcl wants to merge 1 commit into
masterfrom
fix/python-security-vuln-emudhra-emsign-ca-chain
Open

gerardcl wants to merge 1 commit into
masterfrom
fix/python-security-vuln-emudhra-emsign-ca-chain

Conversation

@gerardcl

Copy link
Copy Markdown
Member

Python agent and Python quickstarter fixes for CVE-2026-115557.

This is a BREAKING CHANGE as we stop supporting, by default, in the agent EOL Python versions (which means versions that are no longer provided security fixes). But, users can still pursue uv tooling for their needs if still really requiring older Python versions.

In this PR we do not remove the flag --trusted-host in both Jenkins agent and Python quickstarter Dockerfile as this shall be tackled in a separate PR/context, which might imply Jenkins base agent updates too.

Fixes #1179

Tasks:

  • Updated documentation in docs/modules/... directory
  • Ran tests in <quickstarter>/testdata directory

@gerardcl
gerardcl requested review from BraisVQ and removed request for buegelbeatz and henrjk October 26, 2026 20:08
@gerardcl gerardcl self-assigned this Oct 26, 2026
@gerardcl gerardcl added bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request breaking change a change that is NOT backwards compatible python Pull requests that update Python code maintenance only for maintenance of components labels Oct 26, 2026
@gerardcl
gerardcl force-pushed the fix/python-security-vuln-emudhra-emsign-ca-chain branch from 0831850 to 389a0fe Compare October 26, 2026 20:16
@gerardcl
gerardcl force-pushed the fix/python-security-vuln-emudhra-emsign-ca-chain branch from 770cf66 to 347461d Compare October 26, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking change a change that is NOT backwards compatible bug Something isn't working documentation Improvements or additions to documentation enhancement New feature or request maintenance only for maintenance of components python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Security] Update Python to mitigate eMudhra/emSign compromised CA certificate vulnerability (CVE-2026-115557)

1 participant