Files
buildroot/package/python3
Peter Korsgaard a0b9dc672b package/python3: security bump to version 3.8.7
Release notes:
https://www.python.org/downloads/release/python-387/

Changelog:
https://docs.python.org/release/3.8.7/whatsnew/changelog.html

Fixes the following security issues:

- bpo-42103: Prevented potential DoS attack via CPU and RAM exhaustion when
  processing malformed Apple Property List files in binary format.

- bpo-42051: The plistlib module no longer accepts entity declarations in
  XML plist files to avoid XML vulnerabilities.  This should not affect
  users as entity declarations are not used in regular plist files.

- bpo-40791: Add volatile to the accumulator variable in
  hmac.compare_digest, making constant-time-defeating optimizations less
  likely.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-05 23:25:11 +01:00
..