From 17f54b09e3fcb32a1b138079405390ccccd187dc2551536fac3fdb04f6693ec1 Mon Sep 17 00:00:00 2001 From: Matej Cepl Date: Fri, 22 Mar 2024 09:01:33 +0000 Subject: [PATCH] Fix *.changes OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=123 --- python310.changes | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/python310.changes b/python310.changes index 61c7611..300ca28 100644 --- a/python310.changes +++ b/python310.changes @@ -5,13 +5,14 @@ Thu Mar 21 07:38:15 UTC 2024 - Matej Cepl - gh-115399 & gh-115398: bundled libexpat was updated to 2.6.0 to address CVE-2023-52425, and control of the new reparse deferral functionality was exposed with new APIs + (bsc#1219559). - gh-109858: zipfile is now protected from the “quoted-overlap” zipbomb to address CVE-2024-0450. It now raises BadZipFile when attempting to read an entry that overlaps with another - entry or central directory + entry or central directory. (bsc#1221854) - gh-91133: tempfile.TemporaryDirectory cleanup no longer dereferences symlinks when working around file system - permission errors to address CVE-2023-6597 + permission errors to address CVE-2023-6597 (bsc#1219666) - gh-115197: urllib.request no longer resolves the hostname before checking it against the system’s proxy bypass list on macOS and Windows