Matej Cepl
28749a59dd
- Security
- gh-135034: Fixes multiple issues that allowed tarfile
extraction filters (filter="data" and filter="tar") to be
bypassed using crafted symlinks and hard links.
Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
(bsc#1244059), CVE-2025-4330 (bsc#1244060), and
CVE-2025-4517 (bsc#1244032).
- gh-133767: Fix use-after-free in the “unicode-escape”
decoder with a non-“strict” error handler (CVE-2025-4516,
bsc#1243273).
- gh-128840: Short-circuit the processing of long IPv6
addresses early in ipaddress to prevent excessive memory
consumption and a minor denial-of-service.
- Library
- gh-128840: Fix parsing long IPv6 addresses with embedded
IPv4 address.
- gh-134062: ipaddress: fix collisions in __hash__() for
IPv4Network and IPv6Network objects.
- gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
according to RFC 3596, §2.5. Patch by Bénédikt Tran.
- bpo-43633: Improve the textual representation of
IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
- gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
- CVE-2025-4516-DecodeError-handler.patch
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=183
41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
---
|
|
Doc/using/configure.rst | 3 ---
|
|
Misc/NEWS | 2 +-
|
|
2 files changed, 1 insertion(+), 4 deletions(-)
|
|
|
|
--- a/Doc/using/configure.rst
|
|
+++ b/Doc/using/configure.rst
|
|
@@ -43,7 +43,6 @@ General Options
|
|
|
|
See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
|
|
|
|
-.. option:: --with-cxx-main
|
|
.. option:: --with-cxx-main=COMPILER
|
|
|
|
Compile the Python ``main()`` function and link Python executable with C++
|
|
@@ -529,13 +528,11 @@ macOS Options
|
|
|
|
See ``Mac/README.rst``.
|
|
|
|
-.. option:: --enable-universalsdk
|
|
.. option:: --enable-universalsdk=SDKDIR
|
|
|
|
Create a universal binary build. *SDKDIR* specifies which macOS SDK should
|
|
be used to perform the build (default is no).
|
|
|
|
-.. option:: --enable-framework
|
|
.. option:: --enable-framework=INSTALLDIR
|
|
|
|
Create a Python.framework rather than a traditional Unix install. Optional
|
|
--- a/Misc/NEWS
|
|
+++ b/Misc/NEWS
|
|
@@ -9911,7 +9911,7 @@ C API
|
|
- bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
|
|
|
|
- bpo-43795: The list in :ref:`limited-api-list` now shows the public name
|
|
- :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
+ :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
``_node`` no longer appears in the list.
|
|
|
|
- bpo-44378: :c:func:`Py_IS_TYPE` no longer uses :c:func:`Py_TYPE` to avoid
|