devpi-dev

Download

devpi-dev@python.org

June 2026

1 participants
2 discussions

Security bug-fix in devpi-server 6.20.2
by Florian Schulze June 11, 2026

June 11, 2026

Hi! I released devpi-server 6.20.2 with a critical security bug-fix for the replication protocol. See https://pypi.org/project/devpi-server/ and https://github.com/devpi/devpi/security/advisories/GHSA-m5pq-69xg-vcq3 Regards, Florian Schulze

1 0

Security bug-fix coming soon for devpi-server
by Florian Schulze June 8, 2026

June 8, 2026

Hi! Security bug-fix for devpi-server incoming on Thursday, June 11th 2026 at 14:00 UTC! If your instance is behind nginx with devpi-lockdown or not accessible to untrusted users at all (local/private network only), you are good, same with default settings for anything besides --serverdir, --host and --port. More details coming with the release. If you are on the Fediverse, please boost https://mastodon.social/@devpi/116714926995556500 Regards, Florian Schulze

1 0