Files
buildroot/package/python3/python3.hash
Peter Korsgaard a0b9dc672b package/python3: security bump to version 3.8.7
Release notes:
https://www.python.org/downloads/release/python-387/

Changelog:
https://docs.python.org/release/3.8.7/whatsnew/changelog.html

Fixes the following security issues:

- bpo-42103: Prevented potential DoS attack via CPU and RAM exhaustion when
  processing malformed Apple Property List files in binary format.

- bpo-42051: The plistlib module no longer accepts entity declarations in
  XML plist files to avoid XML vulnerabilities.  This should not affect
  users as entity declarations are not used in regular plist files.

- bpo-40791: Add volatile to the accumulator variable in
  hmac.compare_digest, making constant-time-defeating optimizations less
  likely.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-01-05 23:25:11 +01:00

6 lines
314 B
Plaintext

# From https://www.python.org/downloads/release/python-387/
md5 60fe018fffc7f33818e6c340d29e2db9 Python-3.8.7.tar.xz
# Locally computed
sha256 ddcc1df16bb5b87aa42ec5d20a5b902f2d088caa269b28e01590f97a798ec50a Python-3.8.7.tar.xz
sha256 1dceef1677a39befa8bf0285ab2db441ba117520bb2de839547ace006a17750d LICENSE