- (bsc#1215454, gh-108310)Fixed an issue where instances

of ssl.SSLSocket were vulnerable to a bypass of the TLS
    handshake and included protections (like certificate
    verification) and treating sent unencrypted data as if it
    were post-handshake TLS encrypted data.  Security issue
    reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory
    P. Smith.
- Update to 3.9.17 (bsc#1212015):
  * Support Expat >= 2.4.4 (jsc#SLE-21253, CVE-2022-25236)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=165
This commit is contained in:
2023-10-13 16:13:04 +00:00
committed by Git OBS Bridge
parent b8f8306bca
commit 311f19ba89
3 changed files with 63 additions and 56 deletions

View File

@@ -40,7 +40,7 @@
Permission bits, as for :func:`os.chmod`.
@@ -727,14 +722,12 @@ A ``TarInfo`` object has the following p
@@ -727,7 +722,6 @@ A ``TarInfo`` object has the following p
.. attribute:: TarInfo.linkname
@@ -48,6 +48,7 @@
Name of the target file name, which is only present in :class:`TarInfo` objects
of type :const:`LNKTYPE` and :const:`SYMTYPE`.
@@ -739,7 +733,6 @@ A ``TarInfo`` object has the following p
.. attribute:: TarInfo.uid
@@ -55,7 +56,7 @@
User ID of the user who originally stored this member.
@@ -745,7 +738,6 @@ A ``TarInfo`` object has the following p
@@ -750,7 +743,6 @@ A ``TarInfo`` object has the following p
attribute.
.. attribute:: TarInfo.gid
@@ -63,7 +64,7 @@
Group ID of the user who originally stored this member.
@@ -756,7 +748,6 @@ A ``TarInfo`` object has the following p
@@ -761,7 +753,6 @@ A ``TarInfo`` object has the following p
attribute.
.. attribute:: TarInfo.uname
@@ -71,7 +72,7 @@
User name.
@@ -767,7 +758,6 @@ A ``TarInfo`` object has the following p
@@ -772,7 +763,6 @@ A ``TarInfo`` object has the following p
attribute.
.. attribute:: TarInfo.gname
@@ -79,7 +80,7 @@
Group name.
@@ -778,7 +768,6 @@ A ``TarInfo`` object has the following p
@@ -783,7 +773,6 @@ A ``TarInfo`` object has the following p
attribute.
.. attribute:: TarInfo.pax_headers