Flask
Endless Lifecycle Support (ELS) for Flask from TuxCare provides security fixes for Flask. With ELS, you can continue running your Flask applications without vulnerability concerns, even after official support has ended.
Supported Versions
- Flask 0.12.5, 1.1.2, 1.1.4, 2.2.1, 2.2.5
Other versions upon request.
Installation
Prerequisites
- pip package manager installed
- Nexus repository access credentials (username and password) — contact [email protected]
- To browse available artifacts, visit TuxCare Nexus and click Sign in in the top right corner. You may need to refresh the page after logging in.
Option 1: Install via Command Line
You can install or upgrade a package directly using the ELS repository with your credentials:
pip install --upgrade -i https://USERNAME:[email protected]/repository/els_python/simple flask
Replace USERNAME and PASSWORD with your TuxCare credentials (see Prerequisites above).
Option 2: Configure pip to Use the ELS Repository (Full Replacement)
Use this method if you want to use only ELS-patched Python packages from TuxCare and replace the default PyPI source with the TuxCare ELS repository.
Create or update the
pipconfiguration file and add the following:[global] index-url = https://username:[email protected]/repository/els_python/simpleRun the command to install the latest package version:
pip install --upgrade flaskOr install a specific patched TuxCare version, for example:
pip install flask==0.12.5.post1+tuxcare
Option 3: Add the TuxCare ELS Repository as Additional (Recommended)
If you want to keep using public PyPI and fetch only specific patched packages from TuxCare, use extra-index-url instead. In this configuration, make sure to specify the exact patched version, otherwise pip may install the version from public PyPI.
Create or update the
pipconfiguration file and add the following:[global] extra-index-url = https://username:[email protected]/repository/els_python/simpleRun the command to install a specific patched TuxCare version, for example:
pip install flask==0.12.5.post1+tuxcare
