New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Improve GlobaLeaks installer with PIP 1.5 (when it will be released) #549

Closed

fpietrosanti opened this issue Aug 26, 2013 · 1 comment

Labels

C: Build Scripts F: Security T: Bug

Contributor

fpietrosanti commented Aug 26, 2013

GlobaLeaks by default use PIP 1.3 to install it's own python dependencies, upgrading pip 1.3 from the globaleaks installer for safety purposes.

Pip 1.4 and pip 1.5 do fix important security weakness for what's related to the security of installation of python packages over HTTPS.

This ticket is about upgrading the installation procedure of globaleaks to pip 1.5, by testing and enforcing strict download of packages over https.

A reference ticket to look at could be:
pypa/pip#1167

Changelog:
http://www.pip-installer.org/en/latest/news.html#changelog

Member

evilaliv3 commented Dec 29, 2014

this ticket is oudated and we curretly use the latest pip automagically.

evilaliv3 closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment