Closed dumol closed 10 months ago
The 3.11.6.b5ae34b
testing packages are already used in SFTPPlus 4.33.0.
To avoid their automatic removal, they've been copied manually to production
at https://bin.chevah.com:20443/production/3.11.6.b5ae34b/ without being released through GitHub releases.
Scope
Fixes #52
Changes
Updates used Python version to 3.11.6 to fix CVE-2023-40217.
Drive-by changes:
ssl
to fix CVE-2023-4807 (where built from sources).cryptography
to version 41.0.4 with OpenSSL 3.1.3 to fix CVE-2023-4807.setuptools
to 68.2.2,cffi
to 1.16.0,setproctitle
to 1.3.3,charset_normalizer
to 3.3.0.Testing
Review changes.
Check the automated tests.