forked from pool/python314
Fix changelog.
This commit is contained in:
@@ -4,7 +4,7 @@ Thu Dec 11 17:37:09 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
|
||||
* Update to 3.14.2:
|
||||
- Security
|
||||
- gh-142145: Remove quadratic behavior in xml.minidom node ID
|
||||
cache clearing.
|
||||
cache clearing (CVE-2025-12084, bsc#1254997).
|
||||
- gh-119452: Fix a potential memory denial of service in the
|
||||
http.server module. When a malicious user is connected to the
|
||||
CGI server on Windows, it could cause an arbitrary amount of
|
||||
@@ -66,10 +66,10 @@ Thu Dec 11 17:37:09 UTC 2025 - Matej Cepl <mcepl@cepl.eu>
|
||||
- gh-139700: Check consistency of the zip64 end of central
|
||||
directory record. Support records with “zip64 extensible
|
||||
data” if there are no bytes prepended to the ZIP file.
|
||||
(CVE-2025-8291, bsc#1251305)
|
||||
- gh-139283: sqlite3: correctly handle maximum number of rows
|
||||
to fetch in Cursor.fetchmany and reject negative values for
|
||||
Cursor.arraysize. Patch by Bénédikt Tran. (CVE-2025-8291,
|
||||
bsc#1251305)
|
||||
Cursor.arraysize. Patch by Bénédikt Tran.
|
||||
- gh-137836: Add support of the “plaintext” element, RAWTEXT
|
||||
elements “xmp”, “iframe”, “noembed” and “noframes”, and
|
||||
optionally RAWTEXT element “noscript” in
|
||||
|
||||
Reference in New Issue
Block a user