- python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server lo This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printin - Avoid publishing list of active per-interpreter audit hooks via the gc module - The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name. - Update bundled libexpat to 2.5.0 - Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454). - On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected Abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=68 |
||
---|---|---|
_multibuild | ||
.gitattributes | ||
.gitignore | ||
baselibs.conf | ||
bluez-devel-vendor.tar.xz | ||
bpo-31046_ensurepip_honours_prefix.patch | ||
distutils-reproducible-compile.patch | ||
F00251-change-user-install-location.patch | ||
fix_configure_rst.patch | ||
idle3.appdata.xml | ||
idle3.desktop | ||
import_failed.map | ||
import_failed.py | ||
macros.python3 | ||
no-skipif-doctests.patch | ||
PACKAGING-NOTES | ||
pre_checkin.sh | ||
python310-rpmlintrc | ||
python310.changes | ||
python310.spec | ||
python-3.3.0b1-fix_date_time_compiler.patch | ||
python-3.3.0b1-localpath.patch | ||
python-3.3.0b1-test-posix_fadvise.patch | ||
Python-3.10.9.tar.xz | ||
Python-3.10.9.tar.xz.asc | ||
python.keyring | ||
README.SUSE | ||
skip-test_pyobject_freed_is_freed.patch | ||
skipped_tests.py | ||
subprocess-raise-timeout.patch | ||
support-expat-CVE-2022-25236-patched.patch |
Python 3 in SUSE ============== * Subpackages * Python 3 is split into several subpackages, based on external dependencies. The main package 'python3' has soft dependencies on all subpackages needed to assemble the standard library; however, these might not all be installed by default. If you attempt to import a module that is currently not installed, an ImportError is thrown, with instructions to install the missing subpackage. Installing the subpackage might result in installing libraries that the subpackage requires to function. * ensurepip * The 'ensurepip' module from Python 3 standard library (PEP 453) is supposed to deploy a bundled copy of the pip installer. This makes no sense in a managed distribution like SUSE. Instead, you need to install package 'python3-pip'. Usually this will be installed automatically with 'python3'. Using 'ensurepip' when pip is not installed will result in an ImportError with instructions to install 'python3-pip'. * Documentation * You can find documentation in seprarate packages: python3-doc and python3-doc-pdf. These contan following documents: Tutorial, What's New in Python, Global Module Index, Library Reference, Macintosh Module Reference, Installing Python Modules, Distributing Python Modules, Language Reference, Extending and Embedding, Python/C API, Documenting Python The python3-doc package constains many text files from source tarball. * Interactive mode * Interactive mode is by default enhanced with of history and command completion. If you don't like these features, you can unset the PYTHONSTARTUP variable in your .profile or disable it system wide in /etc/profile.d/python.sh.