From dc236e4d079c06db50fe7c6b833570891b58416f0b8b7845ccce6e0723175214 Mon Sep 17 00:00:00 2001 From: Daniel Garcia Date: Tue, 5 Sep 2023 11:37:11 +0000 Subject: [PATCH] - Link to CVE-2023-40217 bug report in changelog, bsc#1214692 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=107 --- python310.changes | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python310.changes b/python310.changes index dff907e..b15c530 100644 --- a/python310.changes +++ b/python310.changes @@ -3,7 +3,7 @@ Mon Sep 4 13:18:29 UTC 2023 - Daniel Garcia - Add fix-sphinx-72.patch to make it work with latest sphinx version gh#python/cpython#97950 -- Update to 3.10.13: +- Update to 3.10.13 (bsc#1214692): - gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent