Skip to content

Commit 6649519

Browse files
authored
bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31734)
1 parent cff1b78 commit 6649519

File tree

4 files changed

+5
-3
lines changed

4 files changed

+5
-3
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and
2+
CVE-2019-12900

PCbuild/get_externals.bat

+1-1
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ if NOT DEFINED PYTHON (
5151
echo.Fetching external libraries...
5252

5353
set libraries=
54-
set libraries=%libraries% bzip2-1.0.6
54+
set libraries=%libraries% bzip2-1.0.8
5555
if NOT "%IncludeLibffiSrc%"=="false" set libraries=%libraries% libffi-3.3.0
5656
if NOT "%IncludeSSLSrc%"=="false" set libraries=%libraries% openssl-1.1.1l
5757
set libraries=%libraries% sqlite-3.35.5.0

PCbuild/python.props

+1-1
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@
5757
<ExternalsDir Condition="$(ExternalsDir) == ''">$([System.IO.Path]::GetFullPath(`$(PySourcePath)externals`))</ExternalsDir>
5858
<ExternalsDir Condition="!HasTrailingSlash($(ExternalsDir))">$(ExternalsDir)\</ExternalsDir>
5959
<sqlite3Dir>$(ExternalsDir)sqlite-3.35.5.0\</sqlite3Dir>
60-
<bz2Dir>$(ExternalsDir)bzip2-1.0.6\</bz2Dir>
60+
<bz2Dir>$(ExternalsDir)bzip2-1.0.8\</bz2Dir>
6161
<lzmaDir>$(ExternalsDir)xz-5.2.2\</lzmaDir>
6262
<libffiDir>$(ExternalsDir)libffi-3.3.0\</libffiDir>
6363
<libffiOutDir>$(ExternalsDir)libffi-3.3.0\$(ArchName)\</libffiOutDir>

PCbuild/readme.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,7 @@ interpreter, but they do implement several major features. See the
157157
about getting the source for building these libraries. The sub-projects
158158
are:
159159
_bz2
160-
Python wrapper for version 1.0.6 of the libbzip2 compression library
160+
Python wrapper for version 1.0.8 of the libbzip2 compression library
161161
Homepage:
162162
http://www.bzip.org/
163163
_lzma

0 commit comments

Comments
 (0)