Python 3.9.2 and 3.8.8 have been released. These security fixes were released faster than anticipated after users asked the Python team to expedite them due to a remote code execution vulnerability. Bugs fixed include:
- CVE-2021-3177: Avoid static buffers when computing the repr of ctypes.c_double and ctypes.c_longdouble values.
- CVE-2021-23336: Fix web cache poisoning vulnerability by defaulting the query args separator to &, and allowing the user to choose a custom separator.
More:
- The last full regular maintenance release of Python 3.8 is scheduled for May 3, 2021. Python 3.9.3's release date is planned for early May 2021.
- The news comes after the Python team recently launched release candidates for Python 3.8.8 and Python 3.9.2.