Matej Cepl
041ff70f73
- gh-115399 & gh-115398: bundled libexpat was updated to 2.6.0
to address CVE-2023-52425, and control of the new reparse
deferral functionality was exposed with new APIs
- gh-109858: zipfile is now protected from the “quoted-overlap”
zipbomb to address CVE-2024-0450. It now raises BadZipFile
when attempting to read an entry that overlaps with another
entry or central directory
- gh-91133: tempfile.TemporaryDirectory cleanup no longer
dereferences symlinks when working around file system
permission errors to address CVE-2023-6597
- gh-115197: urllib.request no longer resolves the hostname
before checking it against the system’s proxy bypass list on
macOS and Windows
- gh-81194: a crash in socket.if_indextoname() with a specific
value (UINT_MAX) was fixed. Relatedly, an integer overflow in
socket.if_indextoname() on 64-bit non-Windows platforms was
fixed
- gh-113659: .pth files with names starting with a dot or
containing the hidden file attribute are now skipped
- gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
read out of bounds
- gh-114572: ssl.SSLContext.cert_store_stats() and
ssl.SSLContext.get_ca_certs() now correctly lock access to
the certificate store, when the ssl.SSLContext is shared
across multiple threads
- Remove upstreamed patches:
- CVE-2023-6597-TempDir-cleaning-symlink.patch
- Port to %autosetup and %autopatch.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=119
41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
---
|
|
Doc/using/configure.rst | 3 ---
|
|
Misc/NEWS | 2 +-
|
|
2 files changed, 1 insertion(+), 4 deletions(-)
|
|
|
|
--- a/Doc/using/configure.rst
|
|
+++ b/Doc/using/configure.rst
|
|
@@ -42,7 +42,6 @@ General Options
|
|
|
|
See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
|
|
|
|
-.. cmdoption:: --with-cxx-main
|
|
.. cmdoption:: --with-cxx-main=COMPILER
|
|
|
|
Compile the Python ``main()`` function and link Python executable with C++
|
|
@@ -473,13 +472,11 @@ macOS Options
|
|
|
|
See ``Mac/README.rst``.
|
|
|
|
-.. cmdoption:: --enable-universalsdk
|
|
.. cmdoption:: --enable-universalsdk=SDKDIR
|
|
|
|
Create a universal binary build. *SDKDIR* specifies which macOS SDK should
|
|
be used to perform the build (default is no).
|
|
|
|
-.. cmdoption:: --enable-framework
|
|
.. cmdoption:: --enable-framework=INSTALLDIR
|
|
|
|
Create a Python.framework rather than a traditional Unix install. Optional
|
|
--- a/Misc/NEWS
|
|
+++ b/Misc/NEWS
|
|
@@ -3731,7 +3731,7 @@ C API
|
|
-----
|
|
|
|
- bpo-43795: The list in :ref:`stable-abi-list` now shows the public name
|
|
- :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
+ :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
``_node`` no longer appears in the list.
|
|
|
|
- bpo-44378: :c:func:`Py_IS_TYPE` no longer uses :c:func:`Py_TYPE` to avoid
|