python3-3.8.5 (Wait for LFS)

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

What's New in Python 3.8.5 final? Release date: 2020-07-20*

Security

• bpo-41304: Fixes python3x._pth being ignored on Windows, caused by the fix for :issue:29778 (CVE-2020-15801).
• bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(...).

Core and Builtins

• bpo-41295: Resolve a regression in CPython 3.8.4 where defining "setattr" in a multi-inheritance setup and calling up the hierarchy chain could fail if builtins/extension types were involved in the base types.

Library

• bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing.
• bpo-39017: Avoid infinite loop when reading specially crafted TAR files using the tarfile module (CVE-2019-20907).

Documentation

• bpo-37703: Updated Documentation to comprehensively elaborate on the behaviour of gather.cancel()

Build

• bpo-41302: Enable building Python 3.8 with libmpdec-2.5.0 to ease maintenance for Linux distributions. Patch by Felix Yan.

macOS

• bpo-40741: Update macOS installer to use SQLite 3.32.3.

IDLE

• bpo-41300: Save files with non-ascii chars. Fix regression released in 3.9.0b4 and 3.8.4.

[Bruce Dubbs]

Fixed at revision 23408.