-
Type:
Bug
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: NoFixVersionApplicable
-
Fix Version/s: 4.4.4
-
Component/s: Packaging / Build, QA/CI
-
Epic Link:
-
Team:DRIVE
-
Story Points:2
All Python versions prior to 3.9 suffer from CVE-2020-8315 (Unsafe dll loading in getpathp.c on Win7).
- This only affects Windows 7.
- The fix is part of Python 3.7.7.
Actions
1. Install Python 3.7.7 32-bit on WINDB1-5 (into C:\Python377-32).
2. Generate a new Docker image for Python 3.7.7.
3. Update the Nuxeo Drive code referencing XXX_PYTHON.