Update changelog to add bug and CVE references

This commit is contained in:
Steve Kowalik
2025-11-24 12:26:08 +11:00
parent a138776804
commit b0b4becb1d

View File

@@ -1,5 +1,5 @@
-------------------------------------------------------------------
Fri Nov 21 02:06:55 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
Mon Nov 24 01:25:48 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
- Update to 3.15.0~a2:
* Tools/Demos
@@ -20,6 +20,7 @@ Fri Nov 21 02:06:55 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
+ gh-136063: email.message: ensure linear complexity for legacy HTTP
parameters parsing. Patch by Bénédikt Tran.
+ gh-136065: Fix quadratic complexity in os.path.expandvars().
(CVE-2025-6075, bsc#1252974)
* Library
+ gh-141497: ipaddress: ensure that the methods IPv4Network.hosts() and
IPv6Network.hosts() always return an iterator.