Skip to content

Commit b61d5f1

Browse files
author
GitHub Action's update-translation job
committed
Update translation from Transifex
1 parent d822bb1 commit b61d5f1

2 files changed

Lines changed: 88 additions & 18 deletions

File tree

‎library/pyexpat.po‎

Lines changed: 64 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ msgid ""
1111
msgstr ""
1212
"Project-Id-Version: Python 3.11\n"
1313
"Report-Msgid-Bugs-To: \n"
14-
"POT-Creation-Date: 2026-07-31 19:13+0000\n"
14+
"POT-Creation-Date: 2026-08-09 17:32+0000\n"
1515
"PO-Revision-Date: 2025-09-22 16:50+0000\n"
1616
"Last-Translator: python-doc bot, 2025\n"
1717
"Language-Team: Polish (https://app.transifex.com/python-doc/teams/5390/pl/)\n"
@@ -230,18 +230,23 @@ msgid ""
230230
msgstr ""
231231

232232
msgid ""
233-
":class:`!xmlparser` objects have the following methods to mitigate some "
234-
"common XML vulnerabilities."
233+
":class:`!xmlparser` objects have the following methods to tune protections "
234+
"against some common XML vulnerabilities."
235235
msgstr ""
236236

237237
msgid ""
238-
"Sets the number of allocated bytes of dynamic memory needed to activate "
239-
"protection against disproportionate use of RAM."
238+
"Sets the number of output bytes needed to activate protection against "
239+
"`billion laughs`_ attacks."
240+
msgstr ""
241+
242+
msgid ""
243+
"The number of output bytes includes amplification from entity expansion and "
244+
"reading DTD files."
240245
msgstr ""
241246

242247
msgid ""
243-
"By default, parser objects have an allocation activation threshold of 64 "
244-
"MiB, or equivalently 67,108,864 bytes."
248+
"Parser objects usually have a protection activation threshold of 8 MiB, but "
249+
"the actual default value depends on the underlying Expat library."
245250
msgstr ""
246251

247252
msgid ""
@@ -251,26 +256,33 @@ msgid ""
251256
msgstr ""
252257

253258
msgid ""
254-
"Sets the maximum amplification factor between direct input and bytes of "
255-
"dynamic memory allocated."
259+
"Activation thresholds below 4 MiB are known to break support for DITA 1.3 "
260+
"payload and are hence not recommended."
256261
msgstr ""
257262

258263
msgid ""
259-
"The amplification factor is calculated as ``allocated / direct`` while "
260-
"parsing, where ``direct`` is the number of bytes read from the primary "
261-
"document in parsing and ``allocated`` is the number of bytes of dynamic "
262-
"memory allocated in the parser hierarchy."
264+
"Sets the maximum tolerated amplification factor for protection against "
265+
"`billion laughs`_ attacks."
266+
msgstr ""
267+
268+
msgid ""
269+
"The amplification factor is calculated as ``(direct + indirect) / direct`` "
270+
"while parsing, where ``direct`` is the number of bytes read from the primary "
271+
"document in parsing and ``indirect`` is the number of bytes added by "
272+
"expanding entities and reading of external DTD files."
263273
msgstr ""
264274

265275
msgid ""
266276
"The *max_factor* value must be a non-NaN :class:`float` value greater than "
267-
"or equal to 1.0. Amplification factors greater than 100.0 can be observed "
268-
"near the start of parsing even with benign files in practice. In particular, "
269-
"the activation threshold should be carefully chosen to avoid false positives."
277+
"or equal to 1.0. Peak amplifications of factor 15,000 for the entire payload "
278+
"and of factor 30,000 in the middle of parsing have been observed with small "
279+
"benign files in practice. In particular, the activation threshold should be "
280+
"carefully chosen to avoid false positives."
270281
msgstr ""
271282

272283
msgid ""
273-
"By default, parser objects have a maximum amplification factor of 100.0."
284+
"Parser objects usually have a maximum amplification factor of 100, but the "
285+
"actual default value depends on the underlying Expat library."
274286
msgstr ""
275287

276288
msgid ""
@@ -280,6 +292,41 @@ msgid ""
280292
"should not be used as they may have no special meaning."
281293
msgstr ""
282294

295+
msgid ""
296+
"The maximum amplification factor is only considered if the threshold that "
297+
"can be adjusted by :meth:`."
298+
"SetBillionLaughsAttackProtectionActivationThreshold` is exceeded."
299+
msgstr ""
300+
301+
msgid ""
302+
"Sets the number of allocated bytes of dynamic memory needed to activate "
303+
"protection against disproportionate use of RAM."
304+
msgstr ""
305+
306+
msgid ""
307+
"Parser objects usually have an allocation activation threshold of 64 MiB, "
308+
"but the actual default value depends on the underlying Expat library."
309+
msgstr ""
310+
311+
msgid ""
312+
"Sets the maximum amplification factor between direct input and bytes of "
313+
"dynamic memory allocated."
314+
msgstr ""
315+
316+
msgid ""
317+
"The amplification factor is calculated as ``allocated / direct`` while "
318+
"parsing, where ``direct`` is the number of bytes read from the primary "
319+
"document in parsing and ``allocated`` is the number of bytes of dynamic "
320+
"memory allocated in the parser hierarchy."
321+
msgstr ""
322+
323+
msgid ""
324+
"The *max_factor* value must be a non-NaN :class:`float` value greater than "
325+
"or equal to 1.0. Amplification factors greater than 100.0 can be observed "
326+
"near the start of parsing even with benign files in practice. In particular, "
327+
"the activation threshold should be carefully chosen to avoid false positives."
328+
msgstr ""
329+
283330
msgid ""
284331
"The maximum amplification factor is only considered if the threshold that "
285332
"can be adjusted by :meth:`.SetAllocTrackerActivationThreshold` is exceeded."

‎whatsnew/changelog.po‎

Lines changed: 24 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ msgid ""
1111
msgstr ""
1212
"Project-Id-Version: Python 3.11\n"
1313
"Report-Msgid-Bugs-To: \n"
14-
"POT-Creation-Date: 2026-07-25 18:04+0000\n"
14+
"POT-Creation-Date: 2026-08-09 17:32+0000\n"
1515
"PO-Revision-Date: 2025-09-22 16:51+0000\n"
1616
"Last-Translator: python-doc bot, 2026\n"
1717
"Language-Team: Polish (https://app.transifex.com/python-doc/teams/5390/pl/)\n"
@@ -88,6 +88,12 @@ msgid ""
8888
"filter."
8989
msgstr ""
9090

91+
msgid ""
92+
":gh:`148808`: Added buffer boundary check when using ``nbytes`` parameter "
93+
"with :meth:`!asyncio.AbstractEventLoop.sock_recvfrom_into`. Only relevant "
94+
"for Windows and the :class:`asyncio.ProactorEventLoop`."
95+
msgstr ""
96+
9197
msgid ""
9298
":gh:`148395`: Fix a dangling input pointer in :class:`lzma."
9399
"LZMADecompressor`, and :class:`bz2.BZ2Decompressor` when memory allocation "
@@ -101,6 +107,14 @@ msgid ""
101107
"``%action`` to pass the dash-prefix safety check."
102108
msgstr ""
103109

110+
msgid ""
111+
":gh:`146581`: Fix vulnerability in :func:`shutil.unpack_archive` for ZIP "
112+
"files on Windows which allowed to write files outside of the destination "
113+
"tree if the patch in the archive contains a Windows drive prefix. Now such "
114+
"invalid paths will be skipped. Files containing \"..\" in the name (like "
115+
"\"foo..bar\") are no longer skipped."
116+
msgstr ""
117+
104118
msgid ""
105119
":gh:`146211`: Reject CR/LF characters in tunnel request headers for the "
106120
"HTTPConnection.set_tunnel() method."
@@ -149,6 +163,15 @@ msgid ""
149163
"to ``DIRTYPE`` when parsing GNU long name or link headers."
150164
msgstr ""
151165

166+
msgid ""
167+
":gh:`90949`: Add :meth:`~xml.parsers.expat.xmlparser."
168+
"SetBillionLaughsAttackProtectionActivationThreshold` and :meth:`~xml.parsers."
169+
"expat.xmlparser.SetBillionLaughsAttackProtectionMaximumAmplification` to :"
170+
"ref:`xmlparser <xmlparser-objects>` objects to tune protections against "
171+
"`billion laughs <https://en.wikipedia.org/wiki/Billion_laughs_attack>`_ "
172+
"attacks. Patch by Bénédikt Tran."
173+
msgstr ""
174+
152175
msgid "Python 3.11.15 final"
153176
msgstr ""
154177

0 commit comments

Comments
 (0)