Sync from SUSE:ALP:Source:Standard:1.0 python311 revision bd02c02df23ed668068d7b37e8bbf27b

This commit is contained in:
2024-11-11 14:43:46 +01:00
parent 6c3c394b74
commit 8472e59a77
5 changed files with 508 additions and 18 deletions

View File

@@ -1,3 +1,15 @@
-------------------------------------------------------------------
Thu Sep 19 13:14:43 UTC 2024 - Matej Cepl <mcepl@suse.com>
- Add CVE-2024-8088-zipfile-Path-sanitization.patch sanitizing
names in zipfile.Path (bsc#1229704, CVE-2024-8088).
- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch removing
backtracking when parsing tarfile headers (bsc#1230227,
CVE-2024-6232).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
complexity in parsing "-quoted cookie values with backslashes
(bsc#1229596, CVE-2024-7592).
-------------------------------------------------------------------
Sat Aug 3 17:28:26 UTC 2024 - Matej Cepl <mcepl@suse.com>