[issue29740] Visual C++ CRT security update from 14 June 2011

2017-03-07 Thread Steve Dower
Steve Dower added the comment: There will be no changes to the CRT in the update. It's been released as a major upgrade package rather than a patch, which is why it contains all the files, but the last version field typically (and in this case definitely) indicates no change to the API or impl

[issue29740] Visual C++ CRT security update from 14 June 2011

2017-03-07 Thread Markus
Markus added the comment: I beg pardon to be pedantic. The issue is not MFC, but CRT. The related safety bulletin (https://technet.microsoft.com/library/security/ms11-025) says Your application may be an attack vector if all of the following conditions are true: - Your application m

[issue29740] Visual C++ CRT security update from 14 June 2011

2017-03-07 Thread Steve Dower
Steve Dower added the comment: We don't use MFC in Python, so we are not affected. -- resolution: -> not a bug stage: -> resolved status: open -> closed ___ Python tracker ___

[issue29740] Visual C++ CRT security update from 14 June 2011

2017-03-06 Thread Markus
New submission from Markus: In 14 June 2011 Microsoft released Visual C++ 2008 runtime MFC Security Update https://www.microsoft.com/en-us/download/details.aspx?id=26368 The Security Update also updates the CRT runtime (used by Python 2.7) Without the security update, Python 2.7.13 uses vc90.c