]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
python3: upgrade to 3.10.13
authorChee Yang Lee <chee.yang.lee@intel.com>
Mon, 4 Sep 2023 10:18:23 +0000 (18:18 +0800)
committerSteve Sakoman <steve@sakoman.com>
Tue, 5 Sep 2023 23:34:12 +0000 (13:34 -1000)
commita30e51b8d13912f0d68bfffcd2d8ae6431d2b863
tree6cdd42861a54c27dde7720a1b6ee25be6ea7e02e
parent87c4ec2d73ac2e52005e16e38a9a12affb8d51bd
python3: upgrade to 3.10.13

Release date: 2023-08-24

Security
gh-108310: Fixed an issue where instances of ssl.SSLSocket were
vulnerable to a bypass of the TLS handshake and included protections
(like certificate verification) and treating sent unencrypted data as if
it were post-handshake TLS encrypted data. Security issue reported as
CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith.

Library
gh-107845: tarfile.data_filter() now takes the location of symlinks into
account when determining their target, so it will no longer reject some
valid tarballs with LinkOutsideDestinationError.

Tools/Demos
gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL
1.1.1v, 3.0.10, and 3.1.2.

C API
gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
*consumed was not set.

Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-devtools/python/python3_3.10.13.bb [moved from meta/recipes-devtools/python/python3_3.10.12.bb with 99% similarity]