mirror of
https://github.com/python/cpython.git
synced 2026-08-02 20:14:52 +08:00
81 lines
1.8 KiB
ReStructuredText
81 lines
1.8 KiB
ReStructuredText
.. date: 2023-06-01-03-24-58
|
|
.. gh-issue: 103142
|
|
.. nonce: GLWDMX
|
|
.. release date: 2023-06-06
|
|
.. section: Security
|
|
|
|
The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u
|
|
to address several CVEs.
|
|
|
|
..
|
|
|
|
.. date: 2023-05-02-17-56-32
|
|
.. gh-issue: 99889
|
|
.. nonce: l664SU
|
|
.. section: Security
|
|
|
|
Fixed a security in flaw in :func:`uu.decode` that could allow for directory
|
|
traversal based on the input if no ``out_file`` was specified.
|
|
|
|
..
|
|
|
|
.. date: 2023-05-01-15-03-25
|
|
.. gh-issue: 104049
|
|
.. nonce: b01Y3g
|
|
.. section: Security
|
|
|
|
Do not expose the local on-disk location in directory indexes produced by
|
|
:class:`http.client.SimpleHTTPRequestHandler`.
|
|
|
|
..
|
|
|
|
.. date: 2023-03-07-20-59-17
|
|
.. gh-issue: 102153
|
|
.. nonce: 14CLSZ
|
|
.. section: Security
|
|
|
|
:func:`urllib.parse.urlsplit` now strips leading C0 control and space
|
|
characters following the specification for URLs defined by WHATWG in
|
|
response to CVE-2023-24329. Patch by Illia Volochii.
|
|
|
|
..
|
|
|
|
.. date: 2023-04-27-20-03-08
|
|
.. gh-issue: 103935
|
|
.. nonce: Uaf2M0
|
|
.. section: Library
|
|
|
|
Use :func:`io.open_code` for files to be executed instead of raw
|
|
:func:`open`
|
|
|
|
..
|
|
|
|
.. date: 2023-03-23-15-24-38
|
|
.. gh-issue: 102953
|
|
.. nonce: YR4KaK
|
|
.. section: Library
|
|
|
|
The extraction methods in :mod:`tarfile`, and :func:`shutil.unpack_archive`,
|
|
have a new a *filter* argument that allows limiting tar features than may be
|
|
surprising or dangerous, such as creating files outside the destination
|
|
directory. See :ref:`tarfile-extraction-filter` for details.
|
|
|
|
..
|
|
|
|
.. date: 2023-05-28-19-08-42
|
|
.. gh-issue: 89412
|
|
.. nonce: j4cg7K
|
|
.. section: Documentation
|
|
|
|
Add missing documentation for the ``end_lineno`` and ``end_offset``
|
|
attributes of the :class:`traceback.TracebackException` class.
|
|
|
|
..
|
|
|
|
.. date: 2023-04-05-15-59-46
|
|
.. gh-issue: 103262
|
|
.. nonce: nV83ub
|
|
.. section: Build
|
|
|
|
Fixes Windows installer build to work with latest compilers.
|