socket<\/code> or asyncio<\/code> related name resolution functions no longer involves a quadratic algorithm to fix CVE-2022-45061<\/a>.
\n This prevents a potential CPU denial of service if an out-of-spec
\nexcessive length hostname involving bidirectional characters were
\ndecoded. Some protocols such as urllib<\/code> http 3xx redirects potentially allow for an attacker to supply such a name.<\/li>\n- 3.7 – 3.12: gh-100001<\/a>:
python -m http.server<\/code> no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.<\/li>\n- 3.8 – 3.12: gh-87604<\/a>: Avoid publishing list of active per-interpreter audit hooks via the
gc<\/code> module.<\/li>\n- 3.9 – 3.10 (already released in 3.11+ before): gh-97514<\/a>: On Linux the
multiprocessing<\/code>
\n module returns to using filesystem backed unix domain sockets for
\ncommunication with the forkserver process instead of the Linux abstract
\nsocket namespace. Only code that chooses to use the \u201cforkserver\u201d start
\nmethod is affected. This prevents Linux CVE-2022-42919<\/a>
\n (potential privilege escalation) as abstract sockets have no
\npermissions and could allow any user on the system in the same network
\nnamespace (often the whole system) to inject code into the multiprocessing<\/code>
\n forkserver process. This was a potential privilege escalation.
\nFilesystem based socket permissions restrict this to the forkserver
\nprocess user as was the default in Python 3.8 and earlier.<\/li>\n- 3.7 – 3.10: gh-98517<\/a>: Port XKCP\u2019s fix for the buffer overflows in SHA-3 to fix CVE-2022-37454<\/a>.<\/li>\n
- 3.7 – 3.9 (already released in 3.10+ before): gh-68966<\/a>:
\n The deprecated mailcap module now refuses to inject unsafe text
\n(filenames, MIME types, parameters) into shell commands to address CVE-2015-20107<\/a>. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed).<\/li>\n<\/ul>\n\n<\/a>Python 3.12.0 alpha 3<\/h3>\nGet it here, read the change log, sing a GPT-3-generated Sinterklaas song:<\/p>\n
https:\/\/www.python.org\/downloads\/release\/python-3120a3\/<\/a> <\/p>\n216 new commits since 3.12.0 alpha 2 last month.<\/p>\n
\n<\/a>Python 3.11.1<\/h3>\nGet it here, see the change log, read the recipe for quark soup:<\/p>\n
https:\/\/www.python.org\/downloads\/release\/python-3111\/<\/a> <\/p>\nA whopping 495 new commits since 3.11.0.<\/strong> This is a
\nmassive increase of changes comparing to 3.10 at the same stage in the
\nrelease cycle: there were \u201conly\u201d 339 commits between 3.10.0 and 3.10.1.<\/p>\n\n<\/a>Python 3.10.9<\/h3>\nGet it here, read the change log, see circular patterns:<\/p>\n
https:\/\/www.python.org\/downloads\/release\/python-3109\/<\/a> <\/p>\n165 new commits.<\/p>\n
\n<\/a>Python 3.9.16<\/h3>\nGet it here, read the change log, consider upgrading to a newer version:<\/p>\n
https:\/\/www.python.org\/downloads\/release\/python-3916\/<\/a> <\/p>\nSecurity-only release with no binaries. 10 commits.<\/p>\n
\n<\/a>Python 3.8.16<\/h3>\nGet it here, see the change log, definitely upgrade to a newer version:<\/p>\n
https:\/\/www.python.org\/downloads\/release\/python-3816\/<\/a> <\/p>\nSecurity-only release with no binaries. 9 commits.<\/p>\n
\n<\/a>Python 3.7.16<\/h3>\nGet it here, read the change log, check PEP 537 <\/a> to confirm EOL is coming to this version in June 2023:<\/p>\nhttps:\/\/www.python.org\/downloads\/release\/python-3716\/<\/a> <\/p>\nSecurity-only release with no binaries. 8 commits.<\/p>\n
\n<\/a>We hope you enjoy the new releases!<\/h2>\nThanks to all of the many volunteers who help make Python Development
\n and these releases possible! Please consider supporting our efforts by
\nvolunteering yourself or through organization contributions to the
\nPython Software Foundation.<\/p>\n
https:\/\/www.python.org\/psf\/ <\/a><\/p>\nYour friendly release team,<\/p>\n
Ned Deily @nad<\/a>
\nSteve Dower @steve.dower<\/a>
\nPablo Galindo Salgado @pablogsal<\/a>
\n\u0141ukasz Langa @ambv<\/a>
\nThomas Wouters @thomas<\/a><\/p>\n <\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n\n
![\\\"IT\u96fb\u8166\u88dc\u7fd2](\\\"http:\/\/itteacheritfreelance.hk\/test\/wordpress\/wp-content\/uploads\/2016\/05\/logo2-2.png\\\")
\u7acb\u523b\u8a3b\u518a\u53ca\u5831\u540d\u96fb\u8166\u88dc\u7fd2\u8ab2\u7a0b\u5427!<\/figcaption><\/figure>\r\n<\/br>Find A Teacher Form:\r\n<\/br>https:\/\/docs.google.com\/forms\/d\/1vREBnX5n262umf4wU5U2pyTwvk9O-JrAgblA-wH9GFQ\/viewform?edit_requested=true#responses\r\n<\/br><\/br>Email:\r\n<\/br>public1989two@gmail.com
\r\nwww.itsec.hk<\/a>
\r\nwww.itsec.vip<\/a>
\r\nwww.itseceu.uk<\/a>
<\/p>","protected":false},"excerpt":{"rendered":"Greetings! We bring you a slew of releases this fine Saint Nicholas \/
\n Sinterklaas day. Six simultaneous releases has got to be some record.
\nThere\u2019s one more record we broke this time, you\u2019ll see below.
\nIn any case, updating is recommended due to secu…<\/p>\n<\/div>","protected":false},"author":2040,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"Python 3.11.1, 3.10.9, 3.9.16, 3.8.16, 3.7.16, and 3.12.0 alpha 3 are now available - ITTeacherITFreelance.hk","description":"Greetings! We bring you a slew of releases this fine Saint Nicholas \/ Sinterklaas day. Six simultaneous releases has got to be some record. There\u2019s one more rec"},"footnotes":""},"categories":[10700],"tags":[],"_links":{"self":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329386"}],"collection":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/2040"}],"replies":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=329386"}],"version-history":[{"count":1,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329386\/revisions"}],"predecessor-version":[{"id":329387,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329386\/revisions\/329387"}],"wp:attachment":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=329386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=329386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=329386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}