Version 3.11.9.ba80a30

Python was updated to version 3.11.9.

OpenSSL on non-Windows platforms (for Python's ssl module) now uses a 3.0.x release, in line with the Windows package.

The cffi, bcrypt, setproctitle, charset-normalizer, and MarkupSafe modules are no longer included. All of them have ready-to-use binary wheels available for all supported platforms.

The following libraries were updated:

• OpenSSL to version 3.0.13 on Windows, fixing CVE-2023-5363, CVE-2023-5678, CVE-2023-6237, CVE-2024-0727
• OpenSSL to version 3.0.14 on the other platforms, fixing (in addition to the above) CVE-2024-2511, CVE-2024-4603, CVE-2024-4741
• XZ to version 5.6.2 (we have previously included version 5.4.5, which is not known to have been compromised)
• SQLite to version 3.46.0
• zlib to version 1.3.1
• libffi to version 3.4.6.

pip 24.0 is now used.

The following Python modules were also updated:

• setuptools to version 70.0.0
• psutil to version 5.9.8
• pycparser to version 2.22.

GCC flags on Linux were tuned to produce code optimized for the most common processors with -mtune=generic.

A linux-arm64 package built on Amazon Linux 2 was added on June 13, 2024.

SHA256 checksums:

bdeb2a52c0608bde61389bb2d2c7790581c9ba0bb47e88a658a5869ed800f0e5  python-3.11.9.ba80a30-linux-arm64.tar.gz
bbfca5469072b8b15e47d1c0890bfc2a45d74120f53d6cfe88eb14d9a77b40f4  python-3.11.9.ba80a30-linux_musl-x64.tar.gz
490f6a77d9c745d81b1d68660f09979918c552d01923077950734d4c5f12818e  python-3.11.9.ba80a30-linux-x64.tar.gz
deccb12ef2a0b8e6008cfb992869ca9eef859b9c821bab9d56932632a1facbf7  python-3.11.9.ba80a30-macos-arm64.tar.gz
c3d39f038245e240bf65af1e489ab6a85f72d00d246c5eb6cd41c411bb3a8475  python-3.11.9.ba80a30-macos-x64.tar.gz
cd4a2a515b25ad4a1438f301199619ff8562b405366c87f90b1cf18380aaac1d  python-3.11.9.ba80a30-windows-x64.tar.gz