forked from python/cpython
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
12 changed files
with
87 additions
and
24 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,80 @@ | ||
.. date: 2023-06-01-03-24-58 | ||
.. gh-issue: 103142 | ||
.. nonce: GLWDMX | ||
.. release date: 2023-06-06 | ||
.. section: Security | ||
The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u | ||
to address several CVEs. | ||
|
||
.. | ||
.. date: 2023-05-02-17-56-32 | ||
.. gh-issue: 99889 | ||
.. nonce: l664SU | ||
.. section: Security | ||
Fixed a security in flaw in :func:`uu.decode` that could allow for directory | ||
traversal based on the input if no ``out_file`` was specified. | ||
|
||
.. | ||
.. date: 2023-05-01-15-03-25 | ||
.. gh-issue: 104049 | ||
.. nonce: b01Y3g | ||
.. section: Security | ||
Do not expose the local on-disk location in directory indexes produced by | ||
:class:`http.client.SimpleHTTPRequestHandler`. | ||
|
||
.. | ||
.. date: 2023-03-07-20-59-17 | ||
.. gh-issue: 102153 | ||
.. nonce: 14CLSZ | ||
.. section: Security | ||
:func:`urllib.parse.urlsplit` now strips leading C0 control and space | ||
characters following the specification for URLs defined by WHATWG in | ||
response to CVE-2023-24329. Patch by Illia Volochii. | ||
|
||
.. | ||
.. date: 2023-04-27-20-03-08 | ||
.. gh-issue: 103935 | ||
.. nonce: Uaf2M0 | ||
.. section: Library | ||
Use :func:`io.open_code` for files to be executed instead of raw | ||
:func:`open` | ||
|
||
.. | ||
.. date: 2023-03-23-15-24-38 | ||
.. gh-issue: 102953 | ||
.. nonce: YR4KaK | ||
.. section: Library | ||
The extraction methods in :mod:`tarfile`, and :func:`shutil.unpack_archive`, | ||
have a new a *filter* argument that allows limiting tar features than may be | ||
surprising or dangerous, such as creating files outside the destination | ||
directory. See :ref:`tarfile-extraction-filter` for details. | ||
|
||
.. | ||
.. date: 2023-05-28-19-08-42 | ||
.. gh-issue: 89412 | ||
.. nonce: j4cg7K | ||
.. section: Documentation | ||
Add missing documentation for the ``end_lineno`` and ``end_offset`` | ||
attributes of the :class:`traceback.TracebackException` class. | ||
|
||
.. | ||
.. date: 2023-04-05-15-59-46 | ||
.. gh-issue: 103262 | ||
.. nonce: nV83ub | ||
.. section: Build | ||
Fixes Windows installer build to work with latest compilers. |
1 change: 0 additions & 1 deletion
1
Misc/NEWS.d/next/Build/2023-04-05-15-59-46.gh-issue-103262.nV83ub.rst
This file was deleted.
Oops, something went wrong.
2 changes: 0 additions & 2 deletions
2
Misc/NEWS.d/next/Documentation/2023-05-28-19-08-42.gh-issue-89412.j4cg7K.rst
This file was deleted.
Oops, something went wrong.
4 changes: 0 additions & 4 deletions
4
Misc/NEWS.d/next/Library/2023-03-23-15-24-38.gh-issue-102953.YR4KaK.rst
This file was deleted.
Oops, something went wrong.
1 change: 0 additions & 1 deletion
1
Misc/NEWS.d/next/Library/2023-04-27-20-03-08.gh-issue-103935.Uaf2M0.rst
This file was deleted.
Oops, something went wrong.
3 changes: 0 additions & 3 deletions
3
Misc/NEWS.d/next/Security/2023-03-07-20-59-17.gh-issue-102153.14CLSZ.rst
This file was deleted.
Oops, something went wrong.
2 changes: 0 additions & 2 deletions
2
Misc/NEWS.d/next/Security/2023-05-01-15-03-25.gh-issue-104049.b01Y3g.rst
This file was deleted.
Oops, something went wrong.
2 changes: 0 additions & 2 deletions
2
Misc/NEWS.d/next/Security/2023-05-02-17-56-32.gh-issue-99889.l664SU.rst
This file was deleted.
Oops, something went wrong.
2 changes: 0 additions & 2 deletions
2
Misc/NEWS.d/next/Security/2023-06-01-03-24-58.gh-issue-103142.GLWDMX.rst
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters