From f468709d9f933844dd03fe1c51f2d8568c5bfa2bea8cc5ff48c46ad19cc46d87 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mat=C4=9Bj=20Cepl?= Date: Wed, 12 Nov 2025 00:39:13 +0100 Subject: [PATCH] Mark the upgrade to 3.10.19 as fixing CVE-2025-8291, bsc#1251305. --- python310.changes | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/python310.changes b/python310.changes index 6568b0b..a386182 100644 --- a/python310.changes +++ b/python310.changes @@ -5,7 +5,8 @@ Wed Oct 15 08:43:33 UTC 2025 - Daniel Garcia - Security - gh-139700: Check consistency of the zip64 end of central directory record. Support records with “zip64 extensible data” - if there are no bytes prepended to the ZIP file. + if there are no bytes prepended to the ZIP file + (CVE-2025-8291, bsc#1251305). - gh-139400: xml.parsers.expat: Make sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by