forked from pool/python311
Matej Cepl
8d7964cbfc
- Security
- gh-123678: Upgrade libexpat to 2.6.3
- gh-121957: Fixed missing audit events around interactive
use of Python, now also properly firing for ``python -i``,
as well as for ``python -m asyncio``. The event in question
is ``cpython.run_stdin``.
- gh-122133: Authenticate the socket connection for the
``socket.socketpair()`` fallback on platforms where
``AF_UNIX`` is not available like Windows. Patch by
Gregory P. Smith <greg@krypto.org> and Seth Larson
<seth@python.org>. Reported by Ellie <el@horse64.org>
- gh-121285: Remove backtracking from tarfile header parsing
for ``hdrcharset``, PAX, and GNU sparse headers
(bsc#1230227, CVE-2024-6232).
- gh-118486: :func:`os.mkdir` on Windows now accepts
*mode* of ``0o700`` to restrict the new directory to
the current user. This fixes CVE-2024-4030 affecting
:func:`tempfile.mkdtemp` in scenarios where the base
temporary directory is more permissive than the default.
- gh-116741: Update bundled libexpat to 2.6.2
- Library
- gh-123270: Applied a more surgical fix for malformed
payloads in :class:`zipfile.Path` causing infinite loops
(gh-122905) without breaking contents using legitimate
characters (bsc#1229704, CVE-2024-8088).
- gh-123067: Fix quadratic complexity in parsing ``"``-quoted
cookie values with backslashes by :mod:`http.cookies`
(bsc#1229596, CVE-2024-7592).
- gh-122905: :class:`zipfile.Path` objects now sanitize names
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=142
41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
---
|
|
Doc/using/configure.rst | 3 ---
|
|
Misc/NEWS | 2 +-
|
|
2 files changed, 1 insertion(+), 4 deletions(-)
|
|
|
|
--- a/Doc/using/configure.rst
|
|
+++ b/Doc/using/configure.rst
|
|
@@ -43,7 +43,6 @@ General Options
|
|
|
|
See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
|
|
|
|
-.. option:: --with-cxx-main
|
|
.. option:: --with-cxx-main=COMPILER
|
|
|
|
Compile the Python ``main()`` function and link Python executable with C++
|
|
@@ -529,13 +528,11 @@ macOS Options
|
|
|
|
See ``Mac/README.rst``.
|
|
|
|
-.. option:: --enable-universalsdk
|
|
.. option:: --enable-universalsdk=SDKDIR
|
|
|
|
Create a universal binary build. *SDKDIR* specifies which macOS SDK should
|
|
be used to perform the build (default is no).
|
|
|
|
-.. option:: --enable-framework
|
|
.. option:: --enable-framework=INSTALLDIR
|
|
|
|
Create a Python.framework rather than a traditional Unix install. Optional
|
|
--- a/Misc/NEWS
|
|
+++ b/Misc/NEWS
|
|
@@ -9774,7 +9774,7 @@ C API
|
|
- bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
|
|
|
|
- bpo-43795: The list in :ref:`limited-api-list` now shows the public name
|
|
- :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
+ :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry
|
|
``_node`` no longer appears in the list.
|
|
|
|
- bpo-44378: :c:func:`Py_IS_TYPE` no longer uses :c:func:`Py_TYPE` to avoid
|