Python 3.8.5 Update Addressing Vulnerabilities
A patch update for the Python programming language 3.8.5 has been released, fixing several vulnerabilities: CVE-2019-20907 – an infinite loop in the tarfile module when trying to open specially crafted tar files. BPO-41288 – a crash when processing objects with a specially crafted NEWOBJ_EX opcode using the Pickle module. CVE-2020-15801 – the potential for HTTP header injection in a request through using newline characters in the 'method' parameter […]
