pool/python38
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity

Accepting request 821971 from home:gmbr3:Active

Browse Source 
- Update  to version 3.8.5:
  - bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(…).
  - bpo-41295:  a regression in CPython 3.8.4 where defining “__setattr__” in a multi-inheritance setup and calling up the hierarchy chain could fail if builtins/extension types were involved in the base types.
  - bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing.
  - bpo-39017: Avoid infinite loop when reading specially crafted TAR files using the tarfile module (CVE-2019-20907).
  - bpo-37703: Updated Documentation to comprehensively elaborate on the behaviour of gather.cancel()
  - bpo-41302: Enable building Python 3.8 with libmpdec-2.5.0 to ease maintenance for Linux distributions. Patch by Felix Yan.
  - bpo-41300: Save files with non-ascii chars. Fix regression released in 3.9.0b4 and 3.8.4.

OBS-URL: https://build.opensuse.org/request/show/821971
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python38?expand=0&rev=21
This commit is contained in:
Matej Cepl
2020-07-20 18:57:14 +00:00
committed by Git OBS Bridge
parent ec8e13b00e
commit 0c680d8e86
6 changed files with 32 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
python38.changes
View File

@@ -1,3 +1,15 @@
-------------------------------------------------------------------
Mon Jul 20 17:46:54 UTC 2020 - Callum Farmer <callumjfarmer13@gmail.com>
- Update to version 3.8.5:
- bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(…).
- bpo-41295: a regression in CPython 3.8.4 where defining “__setattr__” in a multi-inheritance setup and calling up the hierarchy chain could fail if builtins/extension types were involved in the base types.
- bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing.
- bpo-39017: Avoid infinite loop when reading specially crafted TAR files using the tarfile module (CVE-2019-20907).
- bpo-37703: Updated Documentation to comprehensively elaborate on the behaviour of gather.cancel()
- bpo-41302: Enable building Python 3.8 with libmpdec-2.5.0 to ease maintenance for Linux distributions. Patch by Felix Yan.
- bpo-41300: Save files with non-ascii chars. Fix regression released in 3.9.0b4 and 3.8.4.
-------------------------------------------------------------------
Fri Jul 17 06:39:45 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>