- Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids

use of semicolon as a query string separator (bpo#42967,
  bsc#1182379, CVE-2021-23336).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=294
This commit is contained in:
2021-02-26 22:02:43 +00:00
committed by Git OBS Bridge
parent c021ec3bc1
commit 767f0ce31a
7 changed files with 422 additions and 0 deletions

View File

@@ -1,3 +1,10 @@
-------------------------------------------------------------------
Fri Feb 26 18:21:55 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids
use of semicolon as a query string separator (bpo#42967,
bsc#1182379, CVE-2021-23336).
-------------------------------------------------------------------
Mon Jan 25 23:35:49 UTC 2021 - Matej Cepl <mcepl@suse.com>