It seems like this security fix has not been merged into the 3.5 branch yet:
"[3.5] bpo-38243, xmlrpc.server: Escape the server_title (GH-16373) (GH-16441)" https://github.com/python/cpython/pull/16516 Please review it ;-) Victor Le sam. 12 oct. 2019 à 14:08, Larry Hastings <la...@hastings.org> a écrit : > > > On behalf of the Python development community, I'm relieved to announce > the availability of Python 3.5.8rc2. It's been a month after Python > 3.5.8rc1, and since then we've added a small amount of new code to fix > an API-level regression in http client, updated expat to 2.2.8, and > upgraded the required version of Sphinx from 1.2 to 1.8. This is enough > change that I feel a second rc is indicated. Assuming all is quiet, > 3.5.8 final should come out in about two weeks. > > This new version is a source-only release. > > You can find Python 3.5.8rc2 here: > > https://www.python.org/downloads/release/python-358rc2/ > > > Hullo from PyCon IE, > > > /arry > _______________________________________________ > python-committers mailing list -- python-committ...@python.org > To unsubscribe send an email to python-committers-le...@python.org > https://mail.python.org/mailman3/lists/python-committers.python.org/ > Message archived at > https://mail.python.org/archives/list/python-committ...@python.org/message/ONUEM4VRQU2OUCABKP4XH7LSMQLFO3XT/ > Code of Conduct: https://www.python.org/psf/codeofconduct/ -- Night gathers, and now my watch begins. It shall not end until my death. _______________________________________________ Python-Dev mailing list -- python-dev@python.org To unsubscribe send an email to python-dev-le...@python.org https://mail.python.org/mailman3/lists/python-dev.python.org/ Message archived at https://mail.python.org/archives/list/python-dev@python.org/message/MEWMB6IRJBIS2YCJU535GRARFM6CQB7J/ Code of Conduct: http://python.org/psf/codeofconduct/
