You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello Maintainers - I am hoping to mitigate CVE-2023-24329 present in python3 versions prior to 3.11.4. The python3.vm.nuspec file prevents the updates > 3.11.0.
PS C:\temp> choco upgrade python3 --version=3.11.9
Chocolatey v2.3.0
Upgrading the following packages:
python3
By upgrading, you accept licenses for the packages.
You have python3 v3.10.11 installed. Version 3.11.9 is available based on your source(s).
[NuGet] One or more unresolved package dependency constraints detected in the Chocolatey lib folder. All dependency constraints must be resolved to add or update packages. If these packages are being updated this message may be ignored, if not the following error(s) may be blocking the current package operation: 'python3.vm 0.0.0.20231019 constraint: python3 (>= 3.10.0 && < 3.11.0)'
Re-attempting package dependency resolution using additional available package information...
[NuGet] One or more unresolved package dependency constraints detected in the Chocolatey lib folder. All dependency constraints must be resolved to add or update packages. If these packages are being updated this message may be ignored, if not the following error(s) may be blocking the current package operation: 'python3.vm 0.0.0.20231019 constraint: python3 (>= 3.10.0 && < 3.11.0)'
Unable to resolve dependency 'python3': Unable to resolve dependencies. 'python3 3.11.9' is not compatible with 'python3.vm 0.0.0.20231019 constraint: python3 (>= 3.10.0 && < 3.11.0)'.
Chocolatey upgraded 0/1 packages. 1 packages failed.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
Failures
- python3 - Unable to resolve dependency 'python3': Unable to resolve dependencies. 'python3 3.11.9' is not compatible with 'python3.vm 0.0.0.20231019 constraint: python3 (>= 3.10.0 && < 3.11.0)'.
PS C:\temp>
The text was updated successfully, but these errors were encountered:
Note our packages should only be installed in a virtual machine. In the case of FLARE-VM, I prefer not to install security patches as it ensures that malware exploiting them work, which normally makes the analysis easier.
Note also that in order to update to Python 3.11 we need to ensure all Python libraries and tools we install currently work in Python 3.11 as well.
Ana06
changed the title
Allow updating python3 > 3.11.0
Update Python to 3.11
Jul 22, 2024
Details
Hello Maintainers - I am hoping to mitigate CVE-2023-24329 present in python3 versions prior to 3.11.4. The python3.vm.nuspec file prevents the updates > 3.11.0.
Info at NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-24329
and at MITRE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24329
The text was updated successfully, but these errors were encountered: