Matej Cepl
2c04be55bd
- python -m http.server no longer allows terminal control
characters sent within a garbage request to be printed to the
stderr server log.
This is done by changing the http.server
BaseHTTPRequestHandler .log_message method to replace control
characters with a \xHH hex escape before printing.
- Avoid publishing list of active per-interpreter audit hooks
via the gc module
- The IDNA codec decoder used on DNS hostnames by socket or
asyncio related name resolution functions no longer involves
a quadratic algorithm. This prevents a potential CPU denial
of service if an out-of-spec excessive length hostname
involving bidirectional characters were decoded. Some
protocols such as urllib http 3xx redirects potentially allow
for an attacker to supply such a name (CVE-2015-20107).
- Update bundled libexpat to 2.5.0
- Port XKCP’s fix for the buffer overflows in SHA-3
(CVE-2022-37454).
- On Linux the multiprocessing module returns to using
filesystem backed unix domain sockets for communication with
the forkserver process instead of the Linux abstract socket
namespace. Only code that chooses to use the “forkserver”
start method is affected.
Abstract sockets have no permissions and could allow any
user on the system in the same network namespace (often
the whole system) to inject code into the multiprocessing
forkserver process. This was a potential privilege
escalation. Filesystem based socket permissions restrict this
to the forkserver process user as was the default in Python
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=126
55 lines
2.4 KiB
Diff
55 lines
2.4 KiB
Diff
From 5775f51691d7d64fb676586e008b41261ce64ac2 Mon Sep 17 00:00:00 2001
|
|
From: "Matt.Wang" <mattwang44@gmail.com>
|
|
Date: Wed, 19 Oct 2022 14:49:08 +0800
|
|
Subject: [PATCH 1/2] fix(doc-tools): use sphinx.locale._ as gettext() for
|
|
backward-compatibility in pyspecific.py
|
|
|
|
[why] spinix 5.3 changed locale.translators from a defaultdict(gettext.NullTranslations) to a dict, which leads to failure of pyspecific.py. Use sphinx.locale._ as gettext to fix the issue.
|
|
---
|
|
Doc/tools/extensions/pyspecific.py | 8 ++++----
|
|
Misc/NEWS.d/next/Documentation/2022-10-19-07-15-52.gh-issue-98366.UskMXF.rst | 1 +
|
|
2 files changed, 5 insertions(+), 4 deletions(-)
|
|
|
|
--- a/Doc/tools/extensions/pyspecific.py
|
|
+++ b/Doc/tools/extensions/pyspecific.py
|
|
@@ -26,7 +26,7 @@ try:
|
|
from sphinx.errors import NoUri
|
|
except ImportError:
|
|
from sphinx.environment import NoUri
|
|
-from sphinx.locale import translators
|
|
+from sphinx.locale import _ as sphinx_gettext
|
|
from sphinx.util import status_iterator, logging
|
|
from sphinx.util.nodes import split_explicit_title
|
|
from sphinx.writers.text import TextWriter, TextTranslator
|
|
@@ -110,7 +110,7 @@ class ImplementationDetail(Directive):
|
|
|
|
def run(self):
|
|
pnode = nodes.compound(classes=['impl-detail'])
|
|
- label = translators['sphinx'].gettext(self.label_text)
|
|
+ label = sphinx_gettext(self.label_text)
|
|
content = self.content
|
|
add_text = nodes.strong(label, label)
|
|
if self.arguments:
|
|
@@ -179,7 +179,7 @@ class AuditEvent(Directive):
|
|
else:
|
|
args = []
|
|
|
|
- label = translators['sphinx'].gettext(self._label[min(2, len(args))])
|
|
+ label = sphinx_gettext(self._label[min(2, len(args))])
|
|
text = label.format(name="``{}``".format(name),
|
|
args=", ".join("``{}``".format(a) for a in args if a))
|
|
|
|
@@ -358,7 +358,7 @@ class DeprecatedRemoved(Directive):
|
|
else:
|
|
label = self._removed_label
|
|
|
|
- label = translators['sphinx'].gettext(label)
|
|
+ label = sphinx_gettext(label)
|
|
text = label.format(deprecated=self.arguments[0], removed=self.arguments[1])
|
|
if len(self.arguments) == 3:
|
|
inodes, messages = self.state.inline_text(self.arguments[2],
|
|
--- /dev/null
|
|
+++ b/Misc/NEWS.d/next/Documentation/2022-10-19-07-15-52.gh-issue-98366.UskMXF.rst
|
|
@@ -0,0 +1 @@
|
|
+Use sphinx.locale._ as the gettext function in pyspecific.py.
|