diff options
| author | Chris Novakovic <chris@chrisn.me.uk> | 2021-02-23 18:22:09 +0000 |
|---|---|---|
| committer | Chris Novakovic <chris@chrisn.me.uk> | 2021-02-23 23:22:34 +0000 |
| commit | ff6a3d6ca05810dd091c545beb899031ade55833 (patch) | |
| tree | 84b134d4f5955ebac250c2215f69129101c03db0 /main/make/fix-atexit-exit.patch | |
| parent | 3feb96c720a8188b1d5d8b61ed49587ce0f45e88 (diff) | |
| download | aports-ff6a3d6ca05810dd091c545beb899031ade55833.tar.gz aports-ff6a3d6ca05810dd091c545beb899031ade55833.tar.bz2 aports-ff6a3d6ca05810dd091c545beb899031ade55833.tar.xz | |
main/python3: security upgrade to 3.7.10
Python 3.7.7 is vulnerable to the following CVEs, some of which have
been addressed by cherry-picking upstream patches:
* CVE-2020-8492
* CVE-2020-14422 (CVE-2020-14422.patch)
* CVE-2020-26116
* CVE-2021-3177 (d9b8f138b7df3b455b54653ca59f491b4840d6fa.patch)
* CVE-2021-23336
Upgrade to Python 3.7.10, which includes fixes for all of these CVEs
(thereby making d9b8f138b7df3b455b54653ca59f491b4840d6fa.patch and
CVE-2020-14422.patch redundant) and also includes the fix for
test_nntplib in test_nntplib.patch.
Diffstat (limited to 'main/make/fix-atexit-exit.patch')
0 files changed, 0 insertions, 0 deletions