Version 3.12.7.bb41ace

Python was updated to version 3.12.7, fixing CVE-2024-28757, CVE-2024-45490, CVE-2024-45491, and CVE-2024-45492.

The OpenSSL libraries embedded for the ssl module were updated to version 3.0.15 on all platforms, fixing CVE-2024-6119, CVE-2024-6119. On Windows, CVE-2024-6119 and CVE-2024-6119 are now fixed too.

pip 24.2 is now used.

The following Python modules were also updated:

• setuptools to version 70.3.0
• psutil to version 6.0.0

On macOS, the readline module is now present, making use of system libedit libraries.

Non-Windows packages no longer include xz binaries, trimming their size by 2-5%. (The Windows package never had them.)

A linux-arm64 package built on Amazon Linux 2 was added on Oct 10, 2024.

SHA256 checksums:

0081f4d4859e818b083b9c8d61511866d6cc702717ef23bcb3e91cf9d1be6d6e  python-3.12.7.bb41ace-linux-arm64.tar.gz
ad32a745f64f89da0a06f89d620377156da26caf67960af25c8fe551b1944c1a  python-3.12.7.bb41ace-linux_musl-x64.tar.gz
3f40058e9380b2f0c2564bafb8b640bfe00400a7002011ae35ac341316cc90ed  python-3.12.7.bb41ace-linux-x64.tar.gz
c613c1902d72779dbdb47ee28bd226cd8c75c3817a0beaaf361ddbbfd7cb9b27  python-3.12.7.bb41ace-macos-arm64.tar.gz
1f246ab6ddb1e9889a8b0a13ceb983b49b4116d528a60a4ca438e668e7e6a879  python-3.12.7.bb41ace-macos-x64.tar.gz
f6851e6dff943e22ef9d2eae550c4c84924bccd1d22274108ab7b8008b52fed3  python-3.12.7.bb41ace-windows-x64.tar.gz

Version 3.11.9.ba80a30

Python was updated to version 3.11.9.

OpenSSL on non-Windows platforms (for Python's ssl module) now uses a 3.0.x release, in line with the Windows package.

The cffi, bcrypt, setproctitle, charset-normalizer, and MarkupSafe modules are no longer included. All of them have ready-to-use binary wheels available for all supported platforms.

The following libraries were updated:

• OpenSSL to version 3.0.13 on Windows, fixing CVE-2023-5363, CVE-2023-5678, CVE-2023-6237, CVE-2024-0727
• OpenSSL to version 3.0.14 on the other platforms, fixing (in addition to the above) CVE-2024-2511, CVE-2024-4603, CVE-2024-4741
• XZ to version 5.6.2 (we have previously included version 5.4.5, which is not known to have been compromised)
• SQLite to version 3.46.0
• zlib to version 1.3.1
• libffi to version 3.4.6.

pip 24.0 is now used.

The following Python modules were also updated:

• setuptools to version 70.0.0
• psutil to version 5.9.8
• pycparser to version 2.22.

GCC flags on Linux were tuned to produce code optimized for the most common processors with -mtune=generic.

A linux-arm64 package built on Amazon Linux 2 was added on June 13, 2024.

SHA256 checksums:

bdeb2a52c0608bde61389bb2d2c7790581c9ba0bb47e88a658a5869ed800f0e5  python-3.11.9.ba80a30-linux-arm64.tar.gz
bbfca5469072b8b15e47d1c0890bfc2a45d74120f53d6cfe88eb14d9a77b40f4  python-3.11.9.ba80a30-linux_musl-x64.tar.gz
490f6a77d9c745d81b1d68660f09979918c552d01923077950734d4c5f12818e  python-3.11.9.ba80a30-linux-x64.tar.gz
deccb12ef2a0b8e6008cfb992869ca9eef859b9c821bab9d56932632a1facbf7  python-3.11.9.ba80a30-macos-arm64.tar.gz
c3d39f038245e240bf65af1e489ab6a85f72d00d246c5eb6cd41c411bb3a8475  python-3.11.9.ba80a30-macos-x64.tar.gz
cd4a2a515b25ad4a1438f301199619ff8562b405366c87f90b1cf18380aaac1d  python-3.11.9.ba80a30-windows-x64.tar.gz

Version 3.11.7.4666189

Python was updated to version 3.11.7.

The cryptography and pynacl modules are no longer included.

On Linux and macOS, the following libraries were updated:

• OpenSSL to version 3.1.4, fixing CVE-2023-5363
• SQLite to version 3.44.2
• XZ to version 5.4.5.

pip 23.3.1 is now used, fixing CVE-2023-5752.

The following Python modules were also updated:

• setuptools to version 69.0.2
• psutil to version 5.9.6
• bcrypt to version 4.1.1
• charset_normalizer to version 3.3.2.

A linux-arm64 package built on Amazon Linux 2 was added on January 22, 2024.

SHA256 checksums:

d7a24b626b7e5a0fe074ad30883661b6ad8c2abe7eab18959c4dd7cc68641655  python-3.11.7.4666189-linux-arm64.tar.gz
391ad624725690178f62b78d968e4c88a97d0189c93934340631834d1dfcf8d0  python-3.11.7.4666189-linux-x64.tar.gz
69070523e4b89863a2e307c0875cf7434cd5012410662a116bbf103ec83e8d40  python-3.11.7.4666189-linux_musl-x64.tar.gz
ba94f641c4d6d830c833abf350bea7df0e1ad8003e91477413ab67ec7d1dc2c7  python-3.11.7.4666189-macos-arm64.tar.gz
77c9e62841779662f3766ae92f6bc93f77a7c621265a5c2bf96e41b6f3311ea4  python-3.11.7.4666189-macos-x64.tar.gz
0dc0081b40abacacf35ec9e2a57d7e8ee8119254a86ae8b3a03f5ba833966b23  python-3.11.7.4666189-windows-x64.tar.gz

Version 3.11.4.14c932d

Python was updated to version 3.11.4.

The cryptography module was updated to version 41.0.3, which embeds OpenSSL version 3.2.1. This fixes CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-2650, CVE-2023-3446, CVE-2023-3817, CVE-2023-2975, CVE-2023-1255.

The win package now uses the windows moniker instead.

On Linux and macOS, the following libraries were also updated:

• OpenSSL to version 3.2.1, fixing CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-2650, CVE-2023-3446, CVE-2023-3817.
• SQLite to version 3.42.0.
• XZ to version 5.4.4.
• zlib to version 1.3.

pip 23.2.1 is now used.

The following Python modules were also updated:

• setuptools to version 68.1.2
• psutil to version 5.9.5
• markupsafe to version 2.1.3.
• charset_normalizer to version 3.2.0

SHA256 checksums:

0e843c277aac30703593bf92cdcde4eebfd4d04d98830b6c3e2d5e9493e357e4  python-3.11.4.14c932d-linux-arm64.tar.gz
3ae3b31f3f912e4e52a502c788e3cde1738819d7995a61886b33dcd710336513  python-3.11.4.14c932d-linux-x64.tar.gz
df54109976922891a87b0a5df87e58c553b44f296bb604da16ded70b3224f2b1  python-3.11.4.14c932d-linux_musl-x64.tar.gz
901af3486169d3cb0b502cde8ae5aa407b42dbc7afde148a4a07cbf3af34e13f  python-3.11.4.14c932d-macos-arm64.tar.gz
847026d290647de6d3ec76396cb288d18081e341673a7cf075ede3c80e25458d  python-3.11.4.14c932d-macos-x64.tar.gz
a87d5a86ff4402142a6bd10910c8f630a738c380fb714adf363b27eec6499783  python-3.11.4.14c932d-windows-x64.tar.gz

Version 3.11.3.f9d9434

Python was updated to version 3.11.3.

On Linux and macOS, the following libraries were also updated:

• sqlite to version 3.41.2.

pip 23.1.2 is now used.

The following Python modules were also updated:

• setuptools to version 67.7.2
• markupsafe to version 2.1.2
• charset_normalizer to version 3.1.0/

A linux-arm64 package built on Amazon Linux 2 was added on June 30, 2023.

SHA256 checksums:

48b32ea88a46a07747e4af974faf1f789784016db57e37814082952a956493ab  python-3.11.3.f9d9434-linux-arm64.tar.gz
b2c26b29b2981a91f9c609a05388e4afe26261c0300c2edb6151b76f0b368c38  python-3.11.3.f9d9434-linux-x64.tar.gz
5e775417f9367752e873a7e36ea344fdab69ccbd74c8309b139c896f61da0a1e  python-3.11.3.f9d9434-linux_musl-x64.tar.gz
cd414ee4f360e7add0802423c0b081508e8ea320565ab170a0a1cfdf0744c347  python-3.11.3.f9d9434-macos-arm64.tar.gz
23baea841a2cbafe756ff5fcca4acf93b95ca678d3cfdd9a11927fc7292b7022  python-3.11.3.f9d9434-macos-x64.tar.gz
c918660436fbdbd8919292134e6b421d01eb87deadfbcccce393b0c79067b07c  python-3.11.3.f9d9434-win-x64.tar.gz

Version 3.10.11.58d57c7

Python was updated to version 3.10.11.

An arm64 package for macOS is now built on Apple Silicon.

An arm64 package for Linux built on Amazon Linux 2 was added on June 30, 2023.

Support for 32bit Windows was removed.

Specific support for Red Hat Enterprise Linux 8 and Ubuntu Server 18.04/20.04 was removed. Use the generic Linux package instead on these platforms.

The generic Linux package requires glibc version 2.26 or newer. A specific package for RHEL 7 might be added if there's a need.

The lnx and lnx_musl packages now use linux and linux_musl monikers instead.

Embedded OpenSSL libraries were updated to version 1.1.1t. These libraries are now only used for Python's own ssl module on platforms other than Windows.

On Linux and macOS, the following libraries were also updated:

• libffi to version 3.4.4
• xz to version 5.4.1
• sqlite to version 3.41.1.

pip 23.0.1 is now used.

The readline module is no longer built.

The wheel module is no longer included.

cryptography was updated to version 40.0.1, which embeds OpenSSL 3.1.0 libraries. This module is no longer built, the upstream wheels are used on all platforms.

The following modules were also updated:

• setuptools to version 67.6.1
• cffi to version 1.15.1
• bcrypt to version 4.0.1
• psutils to version 5.9.4
• setproctitle to version 1.3.2

The following modules are now built and included: PyNaCl, MarkupSafe, charset-normalizer, and pywin32 (the latter only on Windows).

SHA256 checksums:

f3f640b1c1cc036c38923854f19bd70e3795c147207bae913860298db75eb02a  python-3.10.11.58d57c7-linux-arm64.tar.gz
3d2b6c16d754ce2f5dfbdefc22fee16c5e0e4800fdbf4ef50b42d6b07c529113  python-3.10.11.58d57c7-linux-x64.tar.gz
10626b0df62faa86b9cbe1b16de929a2e7d261fdd84021e26feac70b7e9c9927  python-3.10.11.58d57c7-linux_musl-x64.tar.gz
e0817e1d01927a66fe324fa5fd99480ab51d96429c3466120ac94c20de5380dc  python-3.10.11.58d57c7-macos-arm64.tar.gz
7062c8f64bcdeb468d8c114ff5ead442672197b28f60e68d549e681034e2678d  python-3.10.11.58d57c7-macos-x64.tar.gz
634b8a161c1c384e56af6c0b09df2e6c2f1117707b86d3e8c70fa9b52936ccde  python-3.10.11.58d57c7-win-x64.tar.gz

Version 3.8.6.7b70999

The Alpine Linux 3.14 package is superseded by a generic musl Linux version built on Alpine Linux 3.12. The generic musl package runs on all supported Alpine Linux versions, currently 3.12 and newer.

An arm64 package for Linux built on Amazon Linux 2 was added on June 30, 2023.

Embedded OpenSSL libraries were updated to version 1.1.1s fixing CVE-2022-1292, CVE-2022-2068, CVE-2022-2097.

Embedded zlib libraries were updated to version 1.2.13 fixing CVE-2018-25032.

SHA256 checksums:

947108a5cce1cd3cd484f5da49d1d639c470e740027e4bda57e9715a65ab542c  python-3.8.6.7b70999-lnx-arm64.tar.gz
82bd1603fcacbecaa7cb9e5c94ec1dee1abce6767c1fbee62926ea0dd6ee2413  python-3.8.6.7b70999-lnx-x64.tar.gz
f94e41d2ee9ba48d502c69c993282d7e3cf5c38056ad54d3baf51925fee7f509  python-3.8.6.7b70999-lnx_musl-x64.tar.gz
e8adad25aadabc6da6e8d1d4102043acfb1def8ff4c88532e6fd9b3e18082d02  python-3.8.6.7b70999-macos-x64.tar.gz
1073107e11af270d52163654525a63bcbeb7e6c4c4e1dc2bc3987fb60ce40780  python-3.8.6.7b70999-rhel8-x64.tar.gz
aa10eb53d390ae2a4ad2b7d22e3d7198f9d1b7e51642be73c66faa662bde20d9  python-3.8.6.7b70999-ubuntu1804-x64.tar.gz
a2444115ab051b39fbf6c8b0329d948f2adbabb6f99ab67d066231cef57f102f  python-3.8.6.7b70999-ubuntu2004-x64.tar.gz
73285579a269495550158bf9b33ecf6e74d3b53a7275166d5d3c7cdd79741a46  python-3.8.6.7b70999-win-x64.tar.gz
35e7755d49e598a1027d30eb234333d503d0c293d558ac36425520c20bcf830c  python-3.8.6.7b70999-win-x86.tar.gz

Version 3.8.6.997916a

The lzma Python module is now built-in.

Embedded OpenSSL libraries were updated to version 1.1.1n fixing CVE-2022-0778, CVE-2021-4160, CVE-2021-3712, CVE-2021-3711.

Embedded zlib libraries were updated to version 1.2.12 fixing CVE-2018-25032 .

Embedded libffi libraries were updated to version 3.4.2.

Embedded SQLite libraries were updated to version 3.38.3

cryptography was updated to version 3.4.8, the last version to build without Rust.

Following Python modules were updated to their latest versions, respectively:

• pip 22.0.4
• setuptools 62.1.0
• cffi 1.15.0
• bcrypt 3.2.2
• psutil 5.9.0
• setproctitles 1.2.3
• pycparser 2.21.

Renamed pythia.conf and pythia as build.conf and build.sh to have brink.{conf,sh} renamed as pythia.{conf,sh}.

SHA256 checksums:

7918c98bedd0986e4b3404d974782ec67c1ee666f297223e97c8fddf394da2b5  python-3.8.6.997916a-alpine314-x64.tar.gz
1cc6fa010df20891acc09120e92c6c60aa3e39f822ff9e5bcea1f7e83d2451e8  python-3.8.6.997916a-lnx-x64.tar.gz
35d85f2e1fdec689f5c21c37748ee9aa77367032c84b676532d27f0c8b0b88e1  python-3.8.6.997916a-macos-x64.tar.gz
0c8b4249d2152b90ce72e6c0635bee09d980d2f745f73452b2f150367bfa8b54  python-3.8.6.997916a-rhel8-x64.tar.gz
77cae60a105a8cbe5101314f64a5a9e35bafbe29436bf7ccb363230a3e814626  python-3.8.6.997916a-ubuntu1804-x64.tar.gz
27d2667f31867acd468e38700fd4dd0c381c0d38ba932e35d138ba62df101374  python-3.8.6.997916a-ubuntu2004-x64.tar.gz
d0a800cb9a3dfb7f0f9b6f0fae25457278fdcd7f0c0148e28e47575c5c624755  python-3.8.6.997916a-win-x64.tar.gz
c22184f8cfe75e46917cf799d9bd1a64412c31aeb8d2f4403edabbb7c33755d0  python-3.8.6.997916a-win-x86.tar.gz

Version 3.8.6.3b1a8ba

Alpine Linux 3.14 (on x64) is now supported.

Alpine Linux 3.12 (on x64) is not built automatically anymore.

A generic ARM64 Linux package was added on June 30, 2023. This was built against zlib version 1.2.13 and OpenSSL version 1.1.1u.

pavement.py is now updated to Python 3.

SHA256 checksums:

b92a15662df227dcb64105fd1b4b312212a81e5b7dcac0d43d38a98c81be2e46  python-3.8.6.3b1a8ba-alpine314-x64.tar.gz
2ecdb8bb7a8bf361b6fce7d7ee87a74a83938553a38cc84310556c692563b742  python-3.8.6.3b1a8ba-lnx-arm64.tar.gz
8ef1853efe0d074f3755f1be7357397091c41e7f3f2a1fc435f10e4756cb010a  python-3.8.6.3b1a8ba-lnx-x64.tar.gz
94882d034725e4ae61d3e4ced3e159258858ab20f227de518985a9d8f7609d35  python-3.8.6.3b1a8ba-macos-x64.tar.gz
b0ea10958b6ff24a933c947054113bc9bb2025fb23462f394341cdf47074d5c2  python-3.8.6.3b1a8ba-rhel8-x64.tar.gz
0c30ecac69ded3dcfe8e946471f20683138cffc54ed16abe11d5394162e2da34  python-3.8.6.3b1a8ba-ubuntu1804-x64.tar.gz
4f07ef0bf20e09edab3a6b59e8125ac0c6d7fa35fac7d2b9c4e8bed2fce7c78e  python-3.8.6.3b1a8ba-ubuntu2004-x64.tar.gz
ee90b6f9d26e2b5cc4e14e03474a9ae158f6e814f6ccd18844f9214283bbab41  python-3.8.6.3b1a8ba-win-x64.tar.gz
390970ee53da6aa08ef6db690ed2a98b2528432aafaa3a7778b135a1ad593394  python-3.8.6.3b1a8ba-win-x86.tar.gz

Version 3.8.6.31955c7

Alpine Linux 3.12 (on x64) is now supported.

Red Hat Enterprise Linux 8 and derivatives such as Oracle Linux 8, CentOS 8, etc. are now supported (on x64).

All glibc-based Linux are now officially supported (on x64). The only requirement is glibc version 2.5 or newer.

Amazon Linux 2 and Red Hat Enterprise Linux 7 (and clones) are no longer specifically supported. Use the generic lnx package instead.

Embedded OpenSSL libraries were updated to version 1.1.1k.

cryptography was updated to version 3.4.7.

pip was updated to version 21.1.1.

SHA256 checksums:

ae231c39fe14b36591980f060130a3f87986d6d994844543a7187b024d01f9f4  python-3.8.6.31955c7-alpine312-x64.tar.gz
9f2ed02c0896f1bfbf70975094832573673a63efd998700adf48ed0fe072bbc4  python-3.8.6.31955c7-lnx-x64.tar.gz
f684813e12f6a1a48f17bbddb819cdb9aed5a1b3cc50bc8aabcff48e9ff4704e  python-3.8.6.31955c7-macos-x64.tar.gz
451f549ebe2f7306084ecb3670e1de4bf3b0a0066b62202d6f9cd9e61e8e877c  python-3.8.6.31955c7-rhel8-x64.tar.gz
f38f7ebaf0e47917869c4bc0057f531197f050bbcdbc2f8f25f5433d4d83a62c  python-3.8.6.31955c7-ubuntu1804-x64.tar.gz
d4b4427808b2a0e54017b8bfbee92499a342bd5d8a035444e21dd82bcdf55c47  python-3.8.6.31955c7-ubuntu2004-x64.tar.gz
df2d18b77efd60aa55c2ddaa1e9acc17f4dc21960fdf95379c5b63a3213c6eb3  python-3.8.6.31955c7-win-x64.tar.gz
0289accf845d7d19b80d3c4acd328f764ebe91a8ac62d146e0e2d15a040acce3  python-3.8.6.31955c7-win-x86.tar.gz