Skip to content

Commit 4a3c610

Browse files
authored
bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31735)
1 parent 9747627 commit 4a3c610

File tree

4 files changed

+5
-3
lines changed

4 files changed

+5
-3
lines changed
Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and
2+
CVE-2019-12900

PCbuild/get_externals.bat

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ if NOT DEFINED PYTHON (
4848
echo.Fetching external libraries...
4949

5050
set libraries=
51-
set libraries=%libraries% bzip2-1.0.6
51+
set libraries=%libraries% bzip2-1.0.8
5252
if NOT "%IncludeSSLSrc%"=="false" set libraries=%libraries% openssl-1.1.1g
5353
set libraries=%libraries% sqlite-3.31.1.0
5454
if NOT "%IncludeTkinterSrc%"=="false" set libraries=%libraries% tcl-core-8.6.9.0

PCbuild/python.props

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747
<ExternalsDir Condition="$(ExternalsDir) == ''">$([System.IO.Path]::GetFullPath(`$(PySourcePath)externals`))</ExternalsDir>
4848
<ExternalsDir Condition="!HasTrailingSlash($(ExternalsDir))">$(ExternalsDir)\</ExternalsDir>
4949
<sqlite3Dir>$(ExternalsDir)sqlite-3.31.1.0\</sqlite3Dir>
50-
<bz2Dir>$(ExternalsDir)bzip2-1.0.6\</bz2Dir>
50+
<bz2Dir>$(ExternalsDir)bzip2-1.0.8\</bz2Dir>
5151
<lzmaDir>$(ExternalsDir)xz-5.2.2\</lzmaDir>
5252
<opensslDir>$(ExternalsDir)openssl-1.1.1g\</opensslDir>
5353
<opensslOutDir>$(ExternalsDir)openssl-bin-1.1.1g\$(ArchName)\</opensslOutDir>

PCbuild/readme.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,7 @@ interpreter, but they do implement several major features. See the
157157
about getting the source for building these libraries. The sub-projects
158158
are:
159159
_bz2
160-
Python wrapper for version 1.0.6 of the libbzip2 compression library
160+
Python wrapper for version 1.0.8 of the libbzip2 compression library
161161
Homepage:
162162
http://www.bzip.org/
163163
_lzma

0 commit comments

Comments
 (0)