Sync from SUSE:ALP:Source:Standard:1.0 python311 revision f90ae9451f2d61b2a59c974320fbea38

This commit is contained in:
2025-08-27 11:30:52 +02:00
parent 369c1d5a7e
commit e3c3203a7c
3 changed files with 222 additions and 0 deletions

View File

@@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Aug 1 20:09:24 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
validates archives to ensure member offsets are non-negative
(gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).
-------------------------------------------------------------------
Wed Jul 2 14:47:20 UTC 2025 - Matej Cepl <mcepl@cepl.eu>