forked from pool/python311
Matej Cepl
28749a59dd
- Security
- gh-135034: Fixes multiple issues that allowed tarfile
extraction filters (filter="data" and filter="tar") to be
bypassed using crafted symlinks and hard links.
Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
(bsc#1244059), CVE-2025-4330 (bsc#1244060), and
CVE-2025-4517 (bsc#1244032).
- gh-133767: Fix use-after-free in the “unicode-escape”
decoder with a non-“strict” error handler (CVE-2025-4516,
bsc#1243273).
- gh-128840: Short-circuit the processing of long IPv6
addresses early in ipaddress to prevent excessive memory
consumption and a minor denial-of-service.
- Library
- gh-128840: Fix parsing long IPv6 addresses with embedded
IPv4 address.
- gh-134062: ipaddress: fix collisions in __hash__() for
IPv4Network and IPv6Network objects.
- gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
according to RFC 3596, §2.5. Patch by Bénédikt Tran.
- bpo-43633: Improve the textual representation of
IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
- gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
- CVE-2025-4516-DecodeError-handler.patch
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=183
28 lines
1.1 KiB
Diff
28 lines
1.1 KiB
Diff
---
|
|
Makefile.pre.in | 7 +++++++
|
|
1 file changed, 7 insertions(+)
|
|
|
|
Index: Python-3.11.8/Makefile.pre.in
|
|
===================================================================
|
|
--- Python-3.11.8.orig/Makefile.pre.in
|
|
+++ Python-3.11.8/Makefile.pre.in
|
|
@@ -1240,11 +1240,18 @@ Modules/getbuildinfo.o: $(PARSER_OBJS) \
|
|
$(DTRACE_OBJS) \
|
|
$(srcdir)/Modules/getbuildinfo.c
|
|
$(CC) -c $(PY_CORE_CFLAGS) \
|
|
+ -DDATE="\"`date -u -r Makefile.pre.in +"%b %d %Y"`\"" \
|
|
+ -DTIME="\"`date -u -r Makefile.pre.in +"%T"`\"" \
|
|
-DGITVERSION="\"`LC_ALL=C $(GITVERSION)`\"" \
|
|
-DGITTAG="\"`LC_ALL=C $(GITTAG)`\"" \
|
|
-DGITBRANCH="\"`LC_ALL=C $(GITBRANCH)`\"" \
|
|
-o $@ $(srcdir)/Modules/getbuildinfo.c
|
|
|
|
+Python/getcompiler.o: $(srcdir)/Python/getcompiler.c Makefile
|
|
+ $(CC) -c $(PY_CORE_CFLAGS) \
|
|
+ -DCOMPILER='"[GCC]"' \
|
|
+ -o $@ $(srcdir)/Python/getcompiler.c
|
|
+
|
|
Modules/getpath.o: $(srcdir)/Modules/getpath.c Python/frozen_modules/getpath.h Makefile $(PYTHON_HEADERS)
|
|
$(CC) -c $(PY_CORE_CFLAGS) -DPYTHONPATH='"$(PYTHONPATH)"' \
|
|
-DPREFIX='"$(prefix)"' \
|