[QGIS-Developer] Python version in 3.28.x CVEs

[Loïc Bartoletti]

Hi,

There is an issue on Github:

- https://github.com/qgis/QGIS/issues/54491

and a PR in discussion

- https://github.com/qgis/QGIS/pull/56499

All the best,

Loïc

Le 26/02/2024 à 13:00, Samer Kaluf via QGIS-Developer a écrit :
>
> Dear developers,
>
> Just had a small question and hopefully I’m at the right address.
>
> We run Qgis 3.28.5 LTR on some computers and Microsoft Security Center 
> seems to be complaining
>
> about the presence of Python.exe version 3.8.5.0 included with 3.28.x 
> LTR Qgis installations.
>
> These are the CVE’s linked to this Python version.
>
> I read online that updating the Python for Qgis isn’t just a 
> copy/replace action.
>
> I was just wondering if this is known and if there are any plans to 
> update Python in future LTR releases ?
>
> Kind regards,
>
> Met vriendelijke groet,
>
> Samer Kaluf
> Systeembeheerder ICT
> DuoPlus
>
> T (020) 314 4803
> E samer.kaluf at duoplus.nl
>
> Aanwezig op: ma, di, woe, do, vrij
>
>
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org
> List info:https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe:https://lists.osgeo.org/mailman/listinfo/qgis-developer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20240226/5f162ead/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 77057 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20240226/5f162ead/attachment-0001.png>