Matej Cepl
a91ccfd104
- gh-103142: The version of OpenSSL used in Windows and
Mac installers has been upgraded to 1.1.1u to address
CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
fixed previously in 1.1.1t (gh-101727).
- gh-102153: urllib.parse.urlsplit() now strips leading C0
control and space characters following the specification for
URLs defined by WHATWG in response to CVE-2023-24329.
- gh-99889: Fixed a security in flaw in uu.decode() that could
allow for directory traversal based on the input if no
out_file was specified.
- gh-104049: Do not expose the local on-disk
location in directory indexes produced by
http.client.SimpleHTTPRequestHandler.
- gh-103935: trace.__main__ now uses io.open_code() for files
to be executed instead of raw open().
- gh-102953: The extraction methods in tarfile, and
shutil.unpack_archive(), have a new filter argument that
allows limiting tar features than may be surprising or
dangerous, such as creating files outside the destination
directory. See Extraction filters for details.
- Remove upstreamed patches:
- 00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python312?expand=0&rev=9
19 lines
963 B
Plaintext
19 lines
963 B
Plaintext
-----BEGIN PGP SIGNATURE-----
|
|
|
|
iQKTBAABCgB9FiEEcWlgX2LHUTVtBUomqCHmgOX6YwUFAmSQpQZfFIAAAAAALgAo
|
|
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDcx
|
|
Njk2MDVGNjJDNzUxMzU2RDA1NEEyNkE4MjFFNjgwRTVGQTYzMDUACgkQqCHmgOX6
|
|
YwWidw/+Knq6IbctodaIGoNp+s3OnMGqLJ9SHRLxwbNlI4DK5sym0pWVX+VNgJFT
|
|
FPCUG6KCO2B46CfrppoMuy+O0WoYskdlYZWjqxEDcSjgB9SgmRAmH34uaQkvpfDa
|
|
j8SeL+W+HmmqovjWn2+sroaHJ9TaVgDqaosn8xFUHRsoNwWQvaxn7tYD0WytxhtT
|
|
kMM8SEde5A9l1opwmq9Hl6e3FGjbX+zu0AkmAEuH+9fcT3aFCpwjjrljeiHoISdS
|
|
LcrrBP80GC1uoRiqJaMeLweCZxEmPwU6AtUffEkzFp8tE6tLAGVQ8HfkWnFGJdEi
|
|
/OsJ2dDuh/UFrwOdotmAcJ5Z/rRzfMm1EbH1++YVu07QV4V8vcVNSWPEZhhb/olQ
|
|
NppgFVv7LMfY6dVdYMjGGdxFsYLdtAelnvCXBzvoSW5zDVNgaGJN79RfCqnJmqAX
|
|
dgSSoAW5q55MDM61DAj5Yb0QKpS9P21qyL7Utg1BFxKF7KIZ7VmwfmW44epiPi8i
|
|
EEc1dtvJCvVux6JGKGhaG06pVPUKh57sMhDN8GqMScCPV3wxS+KMF/SWP/csVKxy
|
|
nJpfqS1npVjsZuLSw/8R4s7yOfRZAQfkzH28NeHRn0BNfCJAUN6PS1AKDdqISkwv
|
|
9vYZADkJvJ6vLGYX21D5WfBoh+rIq2sB9pK+glEjQ3jfR1UOu94=
|
|
=/noy
|
|
-----END PGP SIGNATURE-----
|