Skip to content

Bump Python 3.7.8 to Python 3.7.9 - #119

Closed
servusdei2018 wants to merge 1 commit into
heroku:mainfrom
archivest:patch-2
Closed

Bump Python 3.7.8 to Python 3.7.9#119
servusdei2018 wants to merge 1 commit into
heroku:mainfrom
archivest:patch-2

Conversation

@servusdei2018

Copy link
Copy Markdown
Contributor

Bumped Python version from 3.7.8 to 3.7.9; Python 3.7.9 has several security patches over Python 3.7.8, including:

  • CVE-2020-15801: Fixes python3x._pth being ignored on Windows
  • CVE-2020-15523: Ensure python3.dll is loaded from correct locations when Python is embedded
  • CVE-2020-14422: The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This resulted in always causing hash collisions.
  • bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(…).

@edmorley

Copy link
Copy Markdown
Member

Hi! Thank you for the PR -- the Python version has just been updated to 3.9.2 in #115.

@edmorley edmorley closed this Mar 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants