Accepting request 1288597 from devel:languages:python:Factory

CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
      (gh#135034, bsc#1244061).

OBS-URL: https://build.opensuse.org/request/show/1288597
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python313?expand=0&rev=26
This commit is contained in:
2025-06-26 09:38:02 +00:00
committed by Git OBS Bridge

View File

@@ -55,7 +55,8 @@ Mon Jun 9 21:24:09 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
bypassed using crafted symlinks and hard links. bypassed using crafted symlinks and hard links.
Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138 Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
(bsc#1244059), CVE-2025-4330 (bsc#1244060), and (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
CVE-2025-4517 (bsc#1244032). CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
(gh#135034, bsc#1244061).
- gh-133767: Fix use-after-free in the “unicode-escape” - gh-133767: Fix use-after-free in the “unicode-escape”
decoder with a non-“strict” error handler (CVE-2025-4516, decoder with a non-“strict” error handler (CVE-2025-4516,
bsc#1243273). bsc#1243273).