Accepting request 1113067 from devel:languages:python:Factory

characters without truncating the path (bsc#1214693,
      CVE-2023-41105).

OBS-URL: https://build.opensuse.org/request/show/1113067
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python311?expand=0&rev=24
This commit is contained in:
Ana Guerrero 2023-09-25 18:00:36 +00:00 committed by Git OBS Bridge
commit 4b50a8332b

View File

@ -50,7 +50,8 @@ Wed Sep 6 07:52:11 UTC 2023 - Daniel Garcia <daniel.garcia@suse.com>
- gh-107963: Fix multiprocessing.set_forkserver_preload() to check
the given list of modules names. Patch by Dong-hee Na.
- gh-106242: Fixes os.path.normpath() to handle embedded null
characters without truncating the path.
characters without truncating the path (bsc#1214693,
CVE-2023-41105).
- gh-107845: tarfile.data_filter() now takes the location of
symlinks into account when determining their target, so it will
no longer reject some valid tarballs with