From Newsgroup: comp.lang.python.announce


--Apple-Mail=_5A1D3808-33A7-4A7F-A0C5-A0B578023CFB
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8

There=E2=80=99s security content in the releases, let=E2=80=99s dive =
right in.

gh-108310 <https://github.com/python/cpython/issues/108310>: Fixed an =
issue where instances of ssl.SSLSocket = <https://docs.python.org/release/3.10.13/library/ssl.html#ssl.SSLSocket> =
were vulnerable to a bypass of the TLS handshake and included =
protections (like certificate verification) and treating sent =
unencrypted data as if it were post-handshake TLS encrypted data. =
Security issue reported as CVE-2023-40217=C2=A01 = <https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2023-40217> by =
Aapo Oksman. Patch by Gregory P. Smith.
Upgrading is highly recommended to all users of affected versions.

=
<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-n= ow-available/32254/1#python-3115-1>Python 3.11.5

Get it here: https://www.python.org/downloads/release/python-3115/

This release was held up somewhat by the resolution of this CVE, which =
is why it includes a whopping 328 new commits since 3.11.4 (compared to =
238 commits between 3.10.4 and 3.10.5). Among those, there is a fix for = CVE-2023-41105 = <https://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2023-41105>which = affected Python 3.11.0 - 3.11.4. See gh-106242 = <https://github.com/python/cpython/issues/106242> for details.

There are also some fixes for crashes, check out the change log = <https://docs.python.org/release/3.11.5/whatsnew/changelog.html> to see =
all information.

Most importantly, the release notes on the downloads page = <https://www.python.org/downloads/release/python-3115/> include a =
description of the Larmor precession. I understood some of the words =
there!

=
<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-n= ow-available/32254/1#python-31013-2>Python 3.10.13

Get it here: https://www.python.org/downloads/release/python-31013/

16 commits.

=
<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-n= ow-available/32254/1#python-3918-3>Python 3.9.18

Get it here: https://www.python.org/downloads/release/python-3918/

11 commits.

=
<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-n= ow-available/32254/1#python-3818-4>Python 3.8.18

Get it here: https://www.python.org/downloads/release/python-3818/

9 commits.

=
<https://discuss.python.org/t/python-3-11-5-3-10-13-3-9-18-and-3-8-18-is-n= ow-available/32254/1#stay-safe-and-upgrade-5>Stay safe and upgrade!

Thanks to all of the many volunteers who help make Python Development =
and these releases possible! Please consider supporting our efforts by = volunteering yourself or through organization contributions to the =
Python Software Foundation.

--
=C5=81ukasz Langa @ambv <https://discuss.python.org/u/ambv>
on behalf of your friendly release team,

Ned Deily @nad <https://discuss.python.org/u/nad>
Steve Dower @steve.dower <https://discuss.python.org/u/steve.dower>
Pablo Galindo Salgado @pablogsal =
<https://discuss.python.org/u/pablogsal>
=C5=81ukasz Langa @ambv <https://discuss.python.org/u/ambv>
Thomas Wouters @thomas <https://discuss.python.org/u/thomas>

--Apple-Mail=_5A1D3808-33A7-4A7F-A0C5-A0B578023CFB
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmTnxkAACgkQsmmV4xAl BWg8hw//bhh34FnUHCY9Wkf7nJtDV6UK6tTyVV6MhtnmitbIxvbUv52I2Yemd7Zy wohb8SlcBKLVzk4fCrigvcXOo2K5aZVX6rMIKIw0UpXZgz+7UNnqI7N+Duikdl2I jdsgfICX5+50b2aF3hMNYcGgw1boYqXFWsRGijd3uFiMLHPOzoGGG38D9U5f3Npl CDt3WwBMetEWU7VaZLM53pCVnwsrDXMbecVuE1OT/xTn0F4SeEsCS3uha28aVFmG QAM+gMIcw4yI3ApxN2/zY9yIZgbVBJyztDi+NH8vq0/qfbFKKqiWNvdM8Vrb/T4M pmv446QnYCbXjNASYAWX4vtmdgDwyKXWa1ApbDgNC2gYp3KjS/aQvWEDC7QJFfWf /y6JuAbnPMVdwROab89Vjqi0Rm81oOLh8diohNKF7ylLWaBaHTlzmu4CWQ+vGWea /RmgPYkqltpN11YGFMYByci3hjaRWxB5toeyI2P2ETjJ0ivisWCQD7TliF2diYVJ etahjdys2uoML408I4/neoRnaSuDSirvKr2HosxSVUeIMMkimeXgT9J+MZ1lHJpj ltOYg1xg22lzZZcFdd/UVUnw8RDtCh1qCIJKkU4oQ16nDe7vMpIEdDoZYeGAHeBe MGah3XTOee8iCXe2AfglLfQhL4pSd3OKUtzTOYB/X9gbjz0LkHo=
=ZjJC
-----END PGP SIGNATURE-----

--Apple-Mail=_5A1D3808-33A7-4A7F-A0C5-A0B578023CFB--
--- Synchronet 3.20a-Linux NewsLink 1.114