forked from pool/python39
Matej Cepl
9f343d4b19
case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705). OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=238
12 lines
390 B
Diff
12 lines
390 B
Diff
--- a/Lib/distutils/util.py
|
|
+++ b/Lib/distutils/util.py
|
|
@@ -433,7 +433,7 @@ byte_compile(files, optimize=%r, force=%
|
|
else:
|
|
from py_compile import compile
|
|
|
|
- for file in py_files:
|
|
+ for file in sorted(py_files):
|
|
if file[-3:] != ".py":
|
|
# This lets us be lazy and not filter filenames in
|
|
# the "install_lib" command.
|