Re: [LFS Trac] #5831: python3-3.14.1

"LFS Trac" ([email protected] via lfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.book
Message-ID <[email protected]>
#5831: python3-3.14.1
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  enhancement  |      Status:  new
 Priority:  high         |   Milestone:  12.5
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Changes (by Douglas R. Reno):

 * priority:  normal => high

Comment:

 {{{
 Security

     gh-139700: Check consistency of the zip64 end of central directory
 record. Support
 records with “zip64 extensible data” if there are no bytes prepended to
 the ZIP file.

     gh-139283: sqlite3: correctly handle maximum number of rows to fetch
 in
 Cursor.fetchmany and reject negative values for Cursor.arraysize. Patch by
 Bénédikt
 Tran.

     gh-137836: Add support of the “plaintext” element, RAWTEXT elements
 “xmp”, “iframe”,
 “noembed” and “noframes”, and optionally RAWTEXT element “noscript” in
 html.parser.HTMLParser.

     gh-136063: email.message: ensure linear complexity for legacy HTTP
 parameters
 parsing. Patch by Bénédikt Tran.

     gh-136065: Fix quadratic complexity in os.path.expandvars().

     gh-119451: Fix a potential memory denial of service in the http.client
 module. When
 connecting to a malicious server, it could cause an arbitrary amount of
 memory to be
 allocated. This could have led to symptoms including a MemoryError,
 swapping, out of
 memory (OOM) killed processes or containers, or even system crashes.

     gh-119342: Fix a potential memory denial of service in the plistlib
 module. When
 reading a Plist file received from untrusted source, it could cause an
 arbitrary amount
 of memory to be allocated. This could have led to symptoms including a
 MemoryError,
 swapping, out of memory (OOM) killed processes or containers, or even
 system crashes.
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/5831#comment:1>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.