You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
CVE-2022-0778: OpenSSL upgraded from 1.1.1l to 1.1.1n in macOS and Windows installers (BPO-47024)
Python 3.8 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.8.10 was the last full bugfix release of Python 3.8 with binary installers.
Therefore, we need to bump MSI embedded Python to 3.10.3 or 3.9.11 which has libssl 1.1.1n:
The text was updated successfully, but these errors were encountered:
jiasli
changed the title
Bump MSI embedded Python to 3.10
Bump MSI embedded Python to 3.10.3 or 3.9.11
Mar 22, 2022
jiasli
changed the title
Bump MSI embedded Python to 3.10.3 or 3.9.11
Bump MSI embedded Python to 3.10.3 or 3.9.11 to solve CVE-2022-0778
Mar 22, 2022
jiasli
changed the title
Bump MSI embedded Python to 3.10.3 or 3.9.11 to solve CVE-2022-0778
Bump MSI embedded Python to 3.10.3 or 3.9.11 to fix CVE-2022-0778
Mar 22, 2022
We have supported Python 3.10 for a while (#19857), but the MSI still bundles Python 3.8.9.
Python 3.8.13 fixed CVE-2022-0778 but only in source code, not binary installers:
https://www.python.org/downloads/release/python-3813/
Therefore, we need to bump MSI embedded Python to 3.10.3 or 3.9.11 which has libssl 1.1.1n:
Perhaps this can even be done together with
See
The text was updated successfully, but these errors were encountered: