topic Re: Python 3.7 to 3.9 in Installation

Python 3.7 to 3.9

BrianS — Fri, 05 Feb 2021 18:09:23 GMT

Question to all:

I need to address a vulnerability we found, CVE-2021-3177. In order to do this, I need to upgrade Python to at least 3.9.1-3.

My two questions on this:

1. Will this break Splunk?

2. How can I accomplish this?

Thanks

Re: Python 3.7 to 3.9

richgalloway — Sat, 06 Feb 2021 13:20:43 GMT

1. Possibly

2. Tell Splunk about the vulnerability at https://ideas.splunk.com . Also, submit a support request. Then wait for Splunk to release a version of Python that fixes the vulnerability.

Re: Python 3.7 to 3.9

kbambrick_splun — Thu, 18 Mar 2021 20:59:30 GMT

Splunk updated Python3 to 3.7.10 in Splunk Enterprise 8.1.3, which remediates CVE-2021-3177.