Python 3.8.5 faʻafouina faʻatasi ma faʻafitauli faʻaletonu

Lomia i luga fa'asa'o fa'afouga o le Python 3.8.5 gagana polokalame, lea aveesea tele fa'aletonu:

• CVE-2019-20907 - tarfile module loopping pe a taumafai e tatala faʻailoga faʻapitoa faila i le tar format.
• BPO-41288 - fa'alavelave pe a taumafai le Pickle module e fa'agasolo mea i se fa'ailoga fa'apitoa NEWOBJ_EX.
• CVE-2020-15801 - le mafai ona sui ulutala HTTP i se talosaga e ala i le faʻaogaina o mataitusi fou i le "auala" parakalafa o le http.client module. Mo se fa'ata'ita'iga: conn.request(method=”GET / HTTP/1.1\r\nHost: abc\r\nRemainder:”, url=”/index.html”). O le fa'aletonu na fa'amauina muamua, ae le'i aofia ai le saogalemu o le auala http.client.putrequest.

puna: opennet.ru