Ɗaukaka Python 3.8.5 tare da ƙayyadaddun lahani

Aka buga a gyara sabunta harshen shirye-shirye na Python 3.8.5, wanda a ciki shafe lahani da dama:

• CVE-2019-20907 - madaidaicin tsarin tarfile lokacin ƙoƙarin buɗe fayilolin ƙira na musamman cikin tsarin kwal.
• Saukewa: BPO-41288 - karo lokacin da samfurin Pickle yayi ƙoƙarin sarrafa abubuwa tare da ƙirar opcode na musamman NEWOBJ_EX.
• CVE-2020-15801 - ikon musanya taken HTTP cikin buƙatu ta hanyar amfani da sabbin haruffan layi a cikin sigar “hanyar” na rukunin abokin ciniki na http.client. Misali: conn.request(hanyar=”GET / HTTP/1.1\r\n Mai watsa shiri: abc\r\nSaura:”, url=”/index.html”). An gyara raunin a baya, amma bai rufe hanyar http.client.putrequest tsaro ba.

source: budenet.ru