Matej Cepl
e509746279
- Security
- bpo-43434: Creating a sqlite3.Connection object now also
produces a sqlite3.connect auditing event. Previously this
event was only produced by sqlite3.connect() calls. Patch
by Erlend E. Aasland.
- bpo-43472: Ensures interpreter-level audit hooks receive
the cpython.PyInterpreterState_New event when called
through the _xxsubinterpreters module.
- bpo-43075: Fix Regular Expression Denial of Service (ReDoS)
vulnerability in urllib.request.AbstractBasicAuthHandler.
The ReDoS-vulnerable regex has quadratic worst-case
complexity and it allows cause a denial of service when
identifying crafted invalid RFCs. This ReDoS issue is on
the client side and needs remote attackers to control the
HTTP server.
- Core and Builtins
- bpo-43105: Importlib now resolves relative paths when
creating module spec objects from file locations.
- bpo-42924: Fix bytearray repetition incorrectly copying
data from the start of the buffer, even if the data is
offset within the buffer (e.g. after reassigning a slice at
the start of the bytearray to a shorter byte string).
- Library
- bpo-43993: Update bundled pip to 21.1.1.
- bpo-43937: Fixed the turtle module working with non-default
root window.
- bpo-43930: Update bundled pip to 21.1 and setuptools to
56.0.0
- bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python38?expand=0&rev=66
17 lines
833 B
Plaintext
17 lines
833 B
Plaintext
-----BEGIN PGP SIGNATURE-----
|
|
|
|
iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmCP0ScACgkQsmmV4xAl
|
|
BWgroBAAjg5MXDN3BHjiwrG2yj3VuF4sFaDIbls7V69bmatfADEFDIWpF1YrcS/m
|
|
xlgmzUe0VztLpnU+TnpZt6xMuaSjHwv8Gbh/0cN1jLJg8P0Ssv2FS4P7pcct/JG9
|
|
OqhW8E0cm8Th3a+dGsDLatlppDrk/1RGl6ZXfdKHLVWANXXiJtN2BJdS6gVEATsq
|
|
PL0QB1dgwQ/AVlBuXwLTQNwV8UM/yFXuKNgNyZ/icLKCDjqZszc62552Zu2hoZ/0
|
|
KiZDAQG3rIvYJdrn0TXDITaoUPmb5FQmLWh7kcdk6R7Gmks3YJzolfzFFlwpPBfs
|
|
ePgP741p11of9TlId/fVHgMtoV54JLznrcrSlBfOvxxK7Oid9g0WeuqM/IKa7IBy
|
|
n/a4mNZivESYHuLbt3O2rpVZfvfS4ao8JBPnWXWqF2sNmmciNJCMnUGqOKuDVWV2
|
|
LiE/6v0vkDHw4GIwRvYXPwnguSzv4O5ltHhE6YKGaLDX+J7q2oYZX4kbUYY4Tbxy
|
|
8ANtf/WesIZN53TNjUn/62JvXpJe9UqxOC1Kzl2XSToTr0hll9K5TiS2VXch1Jgx
|
|
LVyqzNkORzTmvftooOw4SFLgJnBbwVMRP9r7qkmpKB1ATyGc1t7WliHW6vBfp18C
|
|
O337fYnSRXyxwJTt+Km3fER+al3XeJsC7eIGEk0iJDQfoq4xhEI=
|
|
=A5fV
|
|
-----END PGP SIGNATURE-----
|