CVE-2020-10735

Advisory

Tomcatmanager 5.0.0 removed support for Python 3.6, which will not receive more security updates after 2021-12-23.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

------------------

Added
^^^^^

- Support for Python 3.10
- Cross-reference links to Requests and standard library documentation

Removed
^^^^^^^

- Support for Python 3.6, which will not receive security fixes after 2021-12-23.
Python 3.6 should still work for now, but we no longer test against it.

Fixed
^^^^^

- `TomcatManager.is_connected()
<https://tomcatmanager.readthedocs.io/en/stable/api/TomcatManager.html#tomcatmanager.tomcat_manager.TomcatManager.is_connected>`__
now returns ``True`` or ``False`` instead of truthy or falsy values
- Fix interactive ``py`` and ``pyscript`` commands which were broken by upstream
changes in cmd2 version 2.0

Resources

• https://pypi.org/project/tomcatmanager
• https://pyup.io/changelogs/tomcatmanager/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10735