From 558337c77313b7d011450e73cf7217ee1e51a0abe07955f1338ceb9ad000de48 Mon Sep 17 00:00:00 2001 From: Matej Cepl Date: Fri, 15 Sep 2023 11:19:47 +0000 Subject: [PATCH] characters without truncating the path (bsc#1214693, CVE-2023-41105). OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=85 --- python311.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/python311.changes b/python311.changes index 671941b..cee5fe5 100644 --- a/python311.changes +++ b/python311.changes @@ -50,7 +50,8 @@ Wed Sep 6 07:52:11 UTC 2023 - Daniel Garcia - gh-107963: Fix multiprocessing.set_forkserver_preload() to check the given list of modules names. Patch by Dong-hee Na. - gh-106242: Fixes os.path.normpath() to handle embedded null - characters without truncating the path. + characters without truncating the path (bsc#1214693, + CVE-2023-41105). - gh-107845: tarfile.data_filter() now takes the location of symlinks into account when determining their target, so it will no longer reject some valid tarballs with