


Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict).PEP 574, Pickle protocol 5 with out-of-band data.PEP 590, Vectorcall: a fast calling protocol for CPython.PEP 587, Python Initialization Configuration (improved embedding).Major new features of the 3.8 series, compared to 3.7 bpo-43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents().Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network.

bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default.Vulnerability reported by David Schwörer. Moreover, even source code of Python modules can contain sensitive data like passwords. bpo-42988: CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability).bpo-43631: high-severity CVE-2021-3449 and CVE-2021-3450 were published for OpenSSL, it's been upgraded to 1.1.1k in CI, and macOS and Windows installers.Get the latest release of 3.11.x here.ģ.8.9 is an expedited release which includes a number of security fixes and is recommended to all users: Python 3.11 is now the latest feature release series of Python 3. Note: The release you're looking at is Python 3.8.9, a bugfix release for the legacy 3.8 series. Release Date: ApThis is the ninth maintenance release of Python 3.8
