quadratic complexity vulnerabilities of os.path.expandvars()
(CVE-2025-6075, bsc#1252974).
Skip test_curses on ppc64le (gh#python/cpython#141534)
avoid simple quadratic complexity vulnerabilities of
(CVE-2025-6075, bsc#1252974). os.path.expandvars() the
--verbose option anymore. Patch by Victor Stinner.
- gh-95953: A CSS class, diff_changed, was added to th e
Patch by Katie Gardner .
- gh-138804: Raise TypeError instead of AttributeError whe n
an argument of incorrect type is passed to shlex.quote() .
This restores the behavior of the function prior to 3.14 .
- gh-138514: Raise ValueError when a multi-character strin g
is passed to the echo_char parameter of getpass.getpass() .
Patch by Benjamin Johnson .
- gh-116946: The _random.Random C type is now immutable .
Patch by Bénédikt Tran .
- gh-136028: Fix parsing month names containing “İ” (U+0130 ,
LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime() .
This affects locales az_AZ, ber_DZ, ber_MA and crh_UA .
whether the sign bit of a floating-point value is set .
Patch by Bénédikt Tran .
- gh-125996: Fix thread safety of collections.OrderedDict .
Patch by Kumar Aditya .
- gh-133551: Support t-strings (PEP 750) in annotationlib .
Patch by Jelle Zijlstra .
- gh-87790: Support underscore and comma as thousand s
Patch by Sergey B Kirpichev .
macro is responsible for raising a curses.error exceptio n.
Patch by Bénédikt Tra n.
- gh-138378: Move the globals-to-const JIT optimizer pass
into to the main JIT optimizer pass
- gh-138372: Fix SyntaxWarning emitted for erroneou s
subscript expressions involving template string literals .
Patch by Brian Schubert .
- gh-138004: On Solaris/Illumos platforms, thread names e
ar now encoded as ASCII to avoid errors on systems (e.g .
OpenIndiana) that don’t support non-ASCII names .
Patch by Pablo Galindo .
- gh-137728: Fix the JIT’s handling of many local variables .
This previously caused a segfault .
- gh-137576: Fix for incorrect source code being shown i n
Patch by Adam Hartz .
PyBytesWriter_Create PyBytesWriter_Discard ()
PyBytesWriter_FinishWithPointer ()
PyBytesWriter_FinishWithSize ()
PyBytesWriter_Finish PyBytesWriter_Format ()
PyBytesWriter_GetData PyBytesWriter_GetSize ()
PyBytesWriter_GrowAndUpdatePointer PyBytesWriter_Grow ()
PyBytesWriter_Resize PyBytesWriter_WriteBytes ()
- gh-133644: Remove deprecated alia s
PyImport_ImportModuleNoBlock() of PyImport_ImportModule() .
Patch by Bénédikt Tran .
- Tools/Demos
- gh-139330: SBOM generation tool didn’t cross-check
the version and checksum values against the
Modules/expat/refresh.sh script, leading to the values
becoming out-of-date during routine updates.
- gh-132006: XCframeworks now include privacy manifests to
satisfy Apple App Store submission requirements.
- gh-138171: A script for building an iOS XCframework was
added. As part of this change, the top level iOS folder has
been moved to be a subdirectory of the Apple folder.
- gh-137873: The iOS test runner has been simplified,
resolving some issues that have been observed using
the runner in GitHub Actions and Azure Pipelines test
environments.
- gh-137484: Have Tools/wasm/wasi put the build Python into a
directory named after the build triple instead of “build”.
- gh-137025: The wasm_build.py script has been removed.
Tools/wasm/emscripten and Tools/wasm/wasi should be used
instead, as described in the Dev Guide.
- gh-137248: Add a --logdir option to Tools/wasm/wasi for
specifying where to write log files.
- gh-137243: Have Tools/wasm/wasi detect a WASI SDK install
in /opt when it was directly extracted from a release
tarball.
- gh-136251: Fixes and usability improvements for
Tools/wasm/emscripten/web_example
- gh-135968: Stubs for strip are now provided as part of an
iOS install.
- gh-135379: The cases generator no longer accepts type
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python315?expand=0&rev=3
