[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Victor Stinner
Le mer. 12 août 2020 à 14:09, Vinay Sharma a écrit : > This is being tracked at https://bugs.python.org/issue39584. > Could please comment whether this should be fixed by python, or we should > wait for a macos fix. This issue looks like a regular bug. I suggest not holding a security release fo

[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Vinay Sharma via Python-Dev
Hi, I am sorry to intrude in this thread. But I think there is a vulnerability in macos caused by ftruncate. For instance running the following code abruptly crashed macos (mojave and catalina). ``` from multiprocessing.shared_memory import SharedMemory shm = SharedMemory(name='test-crash', crea

[Python-Dev] Re: [python-committers] Upcoming 3.7.9 and 3.6.12 Security Releases

2020-08-12 Thread Victor Stinner
Le mer. 12 août 2020 à 12:03, Ned Deily a écrit : > Core developers: if you know of any additional security issues that should be > addressed in these releases, please mark the relevant bpo issues as "release > blocker" and, if possible, submit PRs for review prior to the end of > 2020-08-13 AO