Matej Cepl
6c436c7abc
- python -m http.server no longer allows terminal control
characters sent within a garbage request to be printed
to the stderr server lo This is done by changing the
http.server BaseHTTPRequestHandler .log_message method to
replace control characters with a \xHH hex escape before
printin
- Avoid publishing list of active per-interpreter audit hooks
via the gc module
- The IDNA codec decoder used on DNS hostnames by socket or
asyncio related name resolution functions no longer involves
a quadratic algorithm. This prevents a potential CPU denial
of service if an out-of-spec excessive length hostname
involving bidirectional characters were decoded. Some
protocols such as urllib http 3xx redirects potentially allow
for an attacker to supply such a name (CVE-2022-45061).
- Update bundled libexpat to 2.5.0
- Fix a shell code injection vulnerability in the
get-remote-certificate.py example script. The script no
longer uses a shell to run openssl commands. Issue reported
and initial fix by Caleb Shortt. Patch by Victor Stinner.
- Fix a crash when an object which does not have a dictionary
frees its instance values.
- Fix a bug in the tokenizer that could cause infinite
recursion when showing syntax warnings that happen in the
first line of the source. Patch by Pablo Galindo
- Fix an issue that could cause frames to be visible to Python
code as they are being torn down, possibly leading to memory
corruption or hard crashes of the interpreter.
- Fix a reference bug in _imp.create_builtin() after the
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=40
41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
---
|
|
Doc/using/configure.rst | 3 ---
|
|
Misc/NEWS | 2 +-
|
|
2 files changed, 1 insertion(+), 4 deletions(-)
|
|
|
|
--- a/Doc/using/configure.rst
|
|
+++ b/Doc/using/configure.rst
|
|
@@ -41,7 +41,6 @@ General Options
|
|
|
|
See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
|
|
|
|
-.. cmdoption:: --with-cxx-main
|
|
.. cmdoption:: --with-cxx-main=COMPILER
|
|
|
|
Compile the Python ``main()`` function and link Python executable with C++
|
|
@@ -511,13 +510,11 @@ macOS Options
|
|
|
|
See ``Mac/README.rst``.
|
|
|
|
-.. cmdoption:: --enable-universalsdk
|
|
.. cmdoption:: --enable-universalsdk=SDKDIR
|
|
|
|
Create a universal binary build. *SDKDIR* specifies which macOS SDK should
|
|
be used to perform the build (default is no).
|
|
|
|
-.. cmdoption:: --enable-framework
|
|
.. cmdoption:: --enable-framework=INSTALLDIR
|
|
|
|
Create a Python.framework rather than a traditional Unix install. Optional
|
|
--- a/Misc/NEWS
|
|
+++ b/Misc/NEWS
|
|
@@ -7355,7 +7355,7 @@ C API
|
|
- bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
|
|
|
|
- bpo-43795: The list in :ref:`stable-abi-list` now shows the public name
|
|
- :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
+ :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
``_node`` no longer appears in the list.
|
|
|
|
- bpo-44378: :c:func:`Py_IS_TYPE` no longer uses :c:func:`Py_TYPE` to avoid
|