Forum: >>> Magnum BBS <<<

[Python-announce] [RELEASE] Python 3.11.5, 3.10.13, 3.9.18, and 3.8.18

From =?utf-8?Q?=C5=81ukasz_Langa?=@21:1/5 to All on Thu Aug 24 23:06:08 2023

There’s security content in the releases, let’s dive right in.

gh-108310 <https://github.com/python/cpython/issues/108310>: Fixed an issue where instances of ssl.SSLSocket <https://docs.python.org/release/3.10.13/library/ssl.html#ssl.SSLSocket> were vulnerable to a bypass of the TLS handshake and included
protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 1 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217> by Aapo Oksman.
Patch by Gregory P. Smith.
Upgrading is highly recommended to all users of affected versions.

<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-now-available/32254/1#python-3115-1>Python 3.11.5

Get it here: https://www.python.org/downloads/release/python-3115/

This release was held up somewhat by the resolution of this CVE, which is why it includes a whopping 328 new commits since 3.11.4 (compared to 238 commits between 3.10.4 and 3.10.5). Among those, there is a fix for CVE-2023-41105 <https://cve.mitre.org/
cgi-bin/cvename.cgi?name=CVE-2023-41105>which affected Python 3.11.0 - 3.11.4. See gh-106242 <https://github.com/python/cpython/issues/106242> for details.

There are also some fixes for crashes, check out the change log <https://docs.python.org/release/3.11.5/whatsnew/changelog.html> to see all information.

Most importantly, the release notes on the downloads page <https://www.python.org/downloads/release/python-3115/> include a description of the Larmor precession. I understood some of the words there!

<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-now-available/32254/1#python-31013-2>Python 3.10.13

Get it here: https://www.python.org/downloads/release/python-31013/

16 commits.

<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-now-available/32254/1#python-3918-3>Python 3.9.18

Get it here: https://www.python.org/downloads/release/python-3918/

11 commits.

<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-now-available/32254/1#python-3818-4>Python 3.8.18

Get it here: https://www.python.org/downloads/release/python-3818/

9 commits.

<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-now-available/32254/1#stay-safe-and-upgrade-5>Stay safe and upgrade!

Thanks to all of the many volunteers who help make Python Development and these releases possible! Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

--
Łukasz Langa @ambv <https://discuss.python.org/u/ambv>
on behalf of your friendly release team,

Ned Deily @nad <https://discuss.python.org/u/nad>
Steve Dower @steve.dower <https://discuss.python.org/u/steve.dower>
Pablo Galindo Salgado @pablogsal <https://discuss.python.org/u/pablogsal> Łukasz Langa @ambv <https://discuss.python.org/u/ambv>
Thomas Wouters @thomas <https://discuss.python.org/u/thomas>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmTnxkAACgkQsmmV4xAl BWg8hw//bhh34FnUHCY9Wkf7nJtDV6UK6tTyVV6MhtnmitbIxvbUv52I2Yemd7Zy wohb8SlcBKLVzk4fCrigvcXOo2K5aZVX6rMIKIw0UpXZgz+7UNnqI7N+Duikdl2I jdsgfICX5+50b2aF3hMNYcGgw1boYqXFWsRGijd3uFiMLHPOzoGGG38D9U5f3Npl CDt3WwBMetEWU7VaZLM53pCVnwsrDXMbecVuE1OT/xTn0F4SeEsCS3uha28aVFmG QAM+gMIcw4yI3ApxN2/zY9yIZgbVBJyztDi+NH8vq0/qfbFKKqiWNvdM8Vrb/T4M pmv446QnYCbXjNASYAWX4vtmdgDwyKXWa1ApbDgNC2gYp3KjS/aQvWEDC7QJFfWf /y6JuAbnPMVdwROab89Vjqi0Rm81oOLh8diohNKF7ylLWaBaHTlzmu4CWQ+vGWea /RmgPYkqltpN11YGFMYByci3hjaRWxB5toeyI2P2ETjJ0ivisWCQD7TliF2diYVJ etahjdys2uoML408I4/neoRnaSuDSirvKr2HosxSVUeIMMkimeXgT9J+MZ1lHJpj ltOYg1xg22lzZZcFdd/UVUnw8RDtCh1qCIJKkU4oQ16nDe7vMpIEdDoZYeGAHeBe MGah3XTOee8iCXe2AfglLfQhL4pSd3OKUtzTOYB/X9gbjz0LkHo=
=ZjJC
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Who's Online
Recent Visitors
- Bob Worm
  Mon Jun 9 21:49:37 2025
  from Wales, Uk via Telnet
- Plume
  Mon Jun 9 20:39:48 2025
  from Uk via SSH
- Michal Wronka
  Mon Jun 9 19:31:41 2025
  from Wroclaw, Poland via Telnet
- Driswillis156
  Sun Jun 8 22:29:00 2025
  from Nope via SSH
- Bob Worm
  Sun Jun 8 21:04:22 2025
  from Wales, Uk via Telnet
- Logan
  Sun Jun 8 15:24:00 2025
  from Adelaide via Telnet
- Plume
  Sun Jun 8 14:13:27 2025
  from Uk via SSH
- Bob Worm
  Sun Jun 8 13:48:17 2025
  from Wales, Uk via Telnet

System Info

Sysop:	Keyop
Location:	Huddersfield, West Yorkshire, UK
Users:	489
Nodes:	16 (2 / 14)
Uptime:	33:58:15
Calls:	9,668
Calls today:	3
Files:	13,716
Messages:	6,169,123

[Python-announce] [RELEASE] Python 3.11.5, 3.10.13, 3.9.18, and 3.8.18

Who's Online

Recent Visitors

System Info