Debian Patches

Status for sentry-python/1.9.10-2+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
debian-hacks/docs-Use-local-inventory-for-Python3.patch docs: Use local inventory for Python3
Patch requires package python3-doc to be installed.
Carsten Schoenert <c.schoenert@t-online.de> not-needed 2022-06-12
CVE-2024-40647-dont-send-full-env-to-subprocess.patch fix(integrations): don't send full env to subprocess (#3251)
During the arguments modification to `subprocess.Popen.__init__`,
an explicitly empty environment of `{}` is incorrectly confused with a `None`
environment. This causes sentry to pass the entire environment of the
parent process instead of sending just the injected environment variables.

Fix it by only replacing the environment with `os.environ` if the variable
is None, and not just falsy.

This fixes CVE-2024-40647.
Ivana Kellyer <ivana.kellyer@sentry.io> no debian upstream, https://github.com/getsentry/sentry-python/commit/763e40aa4cb57ecced467f48f78f335c87e9bdff 2026-05-25

All known versions for source package 'sentry-python'

Links