Skip to content

Commit 580fbb0

Browse files
committed
Python 3.8.5
Contains security fixes for CVE-2019-20907, CVE-2020-15801, and BPO-39603.
1 parent f526d10 commit 580fbb0

13 files changed

+92
-19
lines changed

Include/patchlevel.h

+2-2
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@
1818
/*--start constants--*/
1919
#define PY_MAJOR_VERSION 3
2020
#define PY_MINOR_VERSION 8
21-
#define PY_MICRO_VERSION 4
21+
#define PY_MICRO_VERSION 5
2222
#define PY_RELEASE_LEVEL PY_RELEASE_LEVEL_FINAL
2323
#define PY_RELEASE_SERIAL 0
2424

2525
/* Version as a string */
26-
#define PY_VERSION "3.8.4+"
26+
#define PY_VERSION "3.8.5"
2727
/*--end constants--*/
2828

2929
/* Version as a single 4-byte hex number, e.g. 0x010502B2 == 1.5.2b2.

Lib/pydoc_data/topics.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# -*- coding: utf-8 -*-
2-
# Autogenerated by Sphinx on Mon Jul 13 13:47:56 2020
2+
# Autogenerated by Sphinx on Mon Jul 20 14:14:54 2020
33
topics = {'assert': 'The "assert" statement\n'
44
'**********************\n'
55
'\n'

Misc/NEWS.d/3.8.5.rst

+88
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,88 @@
1+
.. bpo: 41304
2+
.. date: 2020-07-15-20-15-08
3+
.. nonce: vNEeYA
4+
.. release date: 2020-07-20
5+
.. section: Security
6+
7+
Fixes `python3x._pth` being ignored on Windows, caused by the fix for
8+
:issue:`29778` (CVE-2020-15801).
9+
10+
..
11+
12+
.. bpo: 39603
13+
.. date: 2020-02-12-14-17-39
14+
.. nonce: Gt3RSg
15+
.. section: Security
16+
17+
Prevent http header injection by rejecting control characters in
18+
http.client.putrequest(...).
19+
20+
..
21+
22+
.. bpo: 41295
23+
.. date: 2020-07-18-08-15-32
24+
.. nonce: pu8Ezo
25+
.. section: Core and Builtins
26+
27+
Resolve a regression in CPython 3.8.4 where defining "__setattr__" in a
28+
multi-inheritance setup and calling up the hierarchy chain could fail if
29+
builtins/extension types were involved in the base types.
30+
31+
..
32+
33+
.. bpo: 41288
34+
.. date: 2020-07-13-15-06-35
35+
.. nonce: 8mn5P-
36+
.. section: Library
37+
38+
Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now
39+
UnpicklingError instead of crashing.
40+
41+
..
42+
43+
.. bpo: 39017
44+
.. date: 2020-07-12-22-16-58
45+
.. nonce: x3Cg-9
46+
.. section: Library
47+
48+
Avoid infinite loop when reading specially crafted TAR files using the
49+
tarfile module (CVE-2019-20907).
50+
51+
..
52+
53+
.. bpo: 37703
54+
.. date: 2019-08-16-20-25-42
55+
.. nonce: Qm_l_H
56+
.. section: Documentation
57+
58+
Updated Documentation to comprehensively elaborate on the behaviour of
59+
gather.cancel()
60+
61+
..
62+
63+
.. bpo: 41302
64+
.. date: 2020-07-15-17-56-32
65+
.. nonce: S3o-x9
66+
.. section: Build
67+
68+
Enable building Python 3.8 with libmpdec-2.5.0 to ease maintenance for Linux
69+
distributions. Patch by Felix Yan.
70+
71+
..
72+
73+
.. bpo: 40741
74+
.. date: 2020-06-19-14-19-08
75+
.. nonce: L7yTbm
76+
.. section: macOS
77+
78+
Update macOS installer to use SQLite 3.32.3.
79+
80+
..
81+
82+
.. bpo: 41300
83+
.. date: 2020-07-16-17-39-06
84+
.. nonce: wRixNb
85+
.. section: IDLE
86+
87+
Save files with non-ascii chars. Fix regression released in 3.9.0b4 and
88+
3.8.4.

Misc/NEWS.d/next/Build/2020-07-15-17-56-32.bpo-41302.S3o-x9.rst

-1
This file was deleted.

Misc/NEWS.d/next/Core and Builtins/2020-07-18-08-15-32.bpo-41295.pu8Ezo.rst

-3
This file was deleted.

Misc/NEWS.d/next/Documentation/2019-08-16-20-25-42.bpo-37703.Qm_l_H.rst

-2
This file was deleted.

Misc/NEWS.d/next/IDLE/2020-07-16-17-39-06.bpo-41300.wRixNb.rst

-2
This file was deleted.

Misc/NEWS.d/next/Library/2020-07-12-22-16-58.bpo-39017.x3Cg-9.rst

-1
This file was deleted.

Misc/NEWS.d/next/Library/2020-07-13-15-06-35.bpo-41288.8mn5P-.rst

-2
This file was deleted.

Misc/NEWS.d/next/Security/2020-02-12-14-17-39.bpo-39603.Gt3RSg.rst

-2
This file was deleted.

Misc/NEWS.d/next/Security/2020-07-15-20-15-08.bpo-41304.vNEeYA.rst

-1
This file was deleted.

Misc/NEWS.d/next/macOS/2020-06-19-14-19-08.bpo-40741.L7yTbm.rst

-1
This file was deleted.

README.rst

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
This is Python version 3.8.4
1+
This is Python version 3.8.5
22
============================
33

44
.. image:: https://travis-ci.org/python/cpython.svg?branch=3.8

0 commit comments

Comments
 (0)