Changes between Version 1 and Version 2 of Ticket #859


Ignore:
Timestamp:
12/09/24 02:50:24 (3 months ago)
Author:
jef
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #859

    • Property Summary QGIS LTR Python version update to v3.12.8Python version update to v3.12.8
  • Ticket #859 – Description

    v1 v2  
    44It may subsequently come to light that these updates include security fixes for published CVEs, so is usually beneficial to update before the CVE's are publicised.
    55
    6 
    76As it subsequently turns out, Python 3.12.7 is vulnerable to the following 3 CVEs:
    87- CVE-2024-9287 (Medium Severity)
    98- CVE-2024-50602 (Medium Severity)
    109- CVE-2024-12254 (High Severity)
    11 Therefore, as QGIS LTR 3.34.13 contains Python 3.12.7, if it has not already been done, Would it be possible to please update the Python version included with QGIS LTR to 3.12.8 to fix the above CVEs?
     10Therefore, as QGIS LTR 3.34.13 contains Python 3.12.7, if it has not already been done, Would it be possible to please update the Python version to fix the above CVEs?
    1211
    1312Thanks in advance