Tags: fedora-python/cpython
Tags
00475: CVE-2025-15367 Downstream only: Reject control characters in POP3 commands
00475: CVE-2025-15367 Reject control characters in POP3 commands
00475: CVE-2025-15367 pythongh-143923: Reject control characters in POP3 commands (cherry-picked from commit b234a2b)
00476: CVE-2026-1299 pythongh-144125: email: verify headers are sound in BytesGenerator (cherry picked from commit 8cdf620) Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Denis Ledoux <dle@odoo.com> Co-authored-by: Denis Ledoux <5822488+beledouxdenis@users.noreply.github.com> Co-authored-by: Petr Viktorin <302922+encukou@users.noreply.github.com> Co-authored-by: Bas Bloemsaat <1586868+basbloemsaat@users.noreply.github.com> The fix for the CVE uncovered a known issue in handling policy.linesep lengths fixed by: bpo-34424: Handle different policy.linesep lengths correctly. (python#8803) (cherry-picked from commit 45b2f88) Co-authored-by: Jens Troeger <jenstroeger@users.noreply.github.com>
00466: Downstream only: Skip tests not working with older expat version We want to run these tests in Fedora and EPEL 10, but not in EPEL 9, which has too old version of expat. We set the upper bound version in the conditionalized skip to a release available in CentOS Stream 10, which is tested as working.
00471: CVE-2025-12084 * pythongh-142145: Remove quadratic behavior in node ID cache clearing (pythonGH-142146) * pythongh-142754: Ensure that Element & Attr instances have the ownerDocument attribute (pythonGH-142794) (cherry picked from commit 1cc7551) (cherry picked from commit 08d8e18) (cherry picked from commit 8d2d7bb) Co-authored-by: Jacob Walls <38668450+jacobtylerwalls@users.noreply.github.com> Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
00471: CVE-2025-12084 * pythongh-142145: Remove quadratic behavior in node ID cache clearing (pythonGH-142146) * pythongh-142754: Ensure that Element & Attr instances have the ownerDocument attribute (pythonGH-142794) (cherry picked from commit 1cc7551) (cherry picked from commit 08d8e18) (cherry picked from commit 8d2d7bb) Co-authored-by: Jacob Walls <38668450+jacobtylerwalls@users.noreply.github.com> Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
00471: CVE-2025-12084 * pythongh-142145: Remove quadratic behavior in node ID cache clearing (pythonGH-142146) * pythongh-142754: Ensure that Element & Attr instances have the ownerDocument attribute (pythonGH-142794) (cherry picked from commit 1cc7551) (cherry picked from commit 08d8e18) (cherry picked from commit 8d2d7bb) Co-authored-by: Jacob Walls <38668450+jacobtylerwalls@users.noreply.github.com> Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
00466: Downstream only: Skip tests not working with older expat version We want to run these tests in Fedora and EPEL 10, but not in EPEL 9, which has too old version of expat. We set the upper bound version in the conditionalized skip to a release available in CentOS Stream 10, which is tested as working.
00466: Downstream only: Skip tests not working with older expat version We want to run these tests in Fedora and EPEL 10, but not in EPEL 9, which has too old version of expat. We set the upper bound version in the conditionalized skip to a release available in CentOS Stream 10, which is tested as working.
PreviousNext