Skip to content

[3.13] gh-151544: Fixes CVE-2026-12003 by removing the fallback to %VPATH%/Modules/Setup.local for discovering sources in getpath.py (GH-151545) #197420

[3.13] gh-151544: Fixes CVE-2026-12003 by removing the fallback to %VPATH%/Modules/Setup.local for discovering sources in getpath.py (GH-151545)

[3.13] gh-151544: Fixes CVE-2026-12003 by removing the fallback to %VPATH%/Modules/Setup.local for discovering sources in getpath.py (GH-151545) #197420

Triggered via pull request June 22, 2026 13:23
Status Success
Total duration 22m 12s
Artifacts 1

build.yml

on: pull_request
Change detection  /  Create context from changed files
11s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-san
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Matrix: cifuzz
Waiting for pending jobs
Docs  /  Docs
1m 56s
Docs / Docs
Docs  /  Doctest
6m 15s
Docs / Doctest
Docs  /  Check EPUB
2m 12s
Docs / Check EPUB
Check if Autoconf files are up to date
29s
Check if Autoconf files are up to date
Check if generated files are up to date
4m 29s
Check if generated files are up to date
WASI  /  build and test
5m 29s
WASI / build and test
Hypothesis tests on Ubuntu
7m 37s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 34s
Check if the ABI has changed
Matrix: build-android
All required checks pass
5s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 7 warnings
Docs / Docs
Process completed with exit code 2.
Docs / Check EPUB
Process completed with exit code 1.
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Windows / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Windows (free-threading) / build (arm64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Hypothesis tests on Ubuntu
No files were found with the provided path: /home/runner/work/cpython/cpython-builddir/.hypothesis/examples/. No artifacts will be uploaded.
Address sanitizer (ubuntu-24.04)
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Windows / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]
Windows (free-threading) / build and test (x64): Modules/unicodedata.c#L1568
'function': conversion from 'size_t' to 'int', possible loss of data [D:\a\cpython\cpython\PCbuild\unicodedata.vcxproj]

Artifacts

Produced during runtime
Name Size Digest
TSan-logs-free-threading
1.8 KB
sha256:e433208b13dd7122a9e2b8933338e72b0695fc43b1428b2892cacd1b32852fb8