- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst

case quadratic complexity when processing certain crafted
 malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=186
This commit is contained in:
2025-07-02 16:01:11 +00:00
committed by Git OBS Bridge
commit 21d02acf4f
47 changed files with 14484 additions and 0 deletions

View File

@@ -0,0 +1,23 @@
---
Lib/test/test_capi/test_misc.py | 3 +++
1 file changed, 3 insertions(+)
--- a/Lib/test/test_capi/test_misc.py
+++ b/Lib/test/test_capi/test_misc.py
@@ -38,6 +38,8 @@ Py_DEBUG = hasattr(sys, 'gettotalrefcoun
def decode_stderr(err):
return err.decode('utf-8', 'replace').replace('\r', '')
+# Which version of the SLE distro we build on?
+SLE_VERSION = int(os.environ.get('SLE_VERSION', '0'), 10)
def testfunction(self):
"""some doc"""
@@ -967,6 +969,7 @@ class PyMemDebugTests(unittest.TestCase)
def test_pyobject_forbidden_bytes_is_freed(self):
self.check_pyobject_is_freed('check_pyobject_forbidden_bytes_is_freed')
+ @unittest.skipIf(0 < SLE_VERSION < 150300, 'Failing on Leap 15.*')
def test_pyobject_freed_is_freed(self):
self.check_pyobject_is_freed('check_pyobject_freed_is_freed')