From 66da58370eaf7719737ea01a70657dda4e399bcba6deca575b984b9873c59453 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mat=C4=9Bj=20Cepl?= Date: Thu, 18 Dec 2025 20:04:34 +0100 Subject: [PATCH] Fix changelog. --- python314.changes | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/python314.changes b/python314.changes index aa623e4..da22df2 100644 --- a/python314.changes +++ b/python314.changes @@ -4,7 +4,7 @@ Thu Dec 11 17:37:09 UTC 2025 - Matej Cepl * Update to 3.14.2: - Security - gh-142145: Remove quadratic behavior in xml.minidom node ID - cache clearing. + cache clearing (CVE-2025-12084, bsc#1254997). - gh-119452: Fix a potential memory denial of service in the http.server module. When a malicious user is connected to the CGI server on Windows, it could cause an arbitrary amount of @@ -66,10 +66,10 @@ Thu Dec 11 17:37:09 UTC 2025 - Matej Cepl - gh-139700: Check consistency of the zip64 end of central directory record. Support records with “zip64 extensible data” if there are no bytes prepended to the ZIP file. + (CVE-2025-8291, bsc#1251305) - gh-139283: sqlite3: correctly handle maximum number of rows to fetch in Cursor.fetchmany and reject negative values for - Cursor.arraysize. Patch by Bénédikt Tran. (CVE-2025-8291, - bsc#1251305) + Cursor.arraysize. Patch by Bénédikt Tran. - gh-137836: Add support of the “plaintext” element, RAWTEXT elements “xmp”, “iframe”, “noembed” and “noframes”, and optionally RAWTEXT element “noscript” in