Browse Source

Python 3.10.18

pull/135398/head v3.10.18
Pablo Galindo 4 months ago
parent
commit
88663ef89b
No known key found for this signature in database GPG Key ID: FFE87404168BD847
  1. 4
      Doc/library/os.path.rst
  2. 4
      Doc/library/tarfile.rst
  3. 4
      Include/patchlevel.h
  4. 2
      Lib/pydoc_data/topics.py
  5. 72
      Misc/NEWS.d/3.10.18.rst
  6. 1
      Misc/NEWS.d/next/Library/2021-10-31-16-06-28.bpo-43633.vflwXv.rst
  7. 2
      Misc/NEWS.d/next/Library/2024-08-28-13-03-36.gh-issue-123409.lW0YF-.rst
  8. 3
      Misc/NEWS.d/next/Library/2025-05-15-14-27-01.gh-issue-134062.fRbJet.rst
  9. 1
      Misc/NEWS.d/next/Library/2025-05-28-15-53-27.gh-issue-128840.Nur2pB.rst
  10. 2
      Misc/NEWS.d/next/Security/2025-01-14-11-19-07.gh-issue-128840.M1doZW.rst
  11. 2
      Misc/NEWS.d/next/Security/2025-05-09-20-22-54.gh-issue-133767.kN2i3Q.rst
  12. 6
      Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst
  13. 2
      README.rst

4
Doc/library/os.path.rst

@ -390,7 +390,7 @@ the :mod:`glob` module.)
.. versionchanged:: 3.10
The *strict* parameter was added.
.. versionchanged:: next
.. versionchanged:: 3.10.18
The :py:data:`~os.path.ALLOW_MISSING` value for the *strict* parameter
was added.
@ -398,7 +398,7 @@ the :mod:`glob` module.)
Special value used for the *strict* argument in :func:`realpath`.
.. versionadded:: next
.. versionadded:: 3.10.18
.. function:: relpath(path, start=os.curdir)

4
Doc/library/tarfile.rst

@ -244,7 +244,7 @@ The :mod:`tarfile` module defines the following exceptions:
The exception that was raised to reject the replacement member is available
as :attr:`!BaseException.__context__`.
.. versionadded:: next
.. versionadded:: 3.10.18
The following constants are available at the module level:
@ -997,7 +997,7 @@ reused in custom filters:
Return the modified ``TarInfo`` member.
.. versionchanged:: next
.. versionchanged:: 3.10.18
Link targets are now normalized.

4
Include/patchlevel.h

@ -18,12 +18,12 @@
/*--start constants--*/
#define PY_MAJOR_VERSION 3
#define PY_MINOR_VERSION 10
#define PY_MICRO_VERSION 17
#define PY_MICRO_VERSION 18
#define PY_RELEASE_LEVEL PY_RELEASE_LEVEL_FINAL
#define PY_RELEASE_SERIAL 0
/* Version as a string */
#define PY_VERSION "3.10.17+"
#define PY_VERSION "3.10.18"
/*--end constants--*/
/* Version as a single 4-byte hex number, e.g. 0x010502B2 == 1.5.2b2.

2
Lib/pydoc_data/topics.py

@ -1,5 +1,5 @@
# -*- coding: utf-8 -*-
# Autogenerated by Sphinx on Tue Apr 8 13:10:45 2025
# Autogenerated by Sphinx on Tue Jun 3 19:23:28 2025
topics = {'assert': 'The "assert" statement\n'
'**********************\n'
'\n'

72
Misc/NEWS.d/3.10.18.rst

@ -0,0 +1,72 @@
.. date: 2025-06-02-11-32-23
.. gh-issue: 135034
.. nonce: RLGjbp
.. release date: 2025-06-03
.. section: Security
Fixes multiple issues that allowed ``tarfile`` extraction filters
(``filter="data"`` and ``filter="tar"``) to be bypassed using crafted
symlinks and hard links.
Addresses CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, and CVE 2025-4517.
..
.. date: 2025-05-09-20-22-54
.. gh-issue: 133767
.. nonce: kN2i3Q
.. section: Security
Fix use-after-free in the "unicode-escape" decoder with a non-"strict" error
handler.
..
.. date: 2025-01-14-11-19-07
.. gh-issue: 128840
.. nonce: M1doZW
.. section: Security
Short-circuit the processing of long IPv6 addresses early in
:mod:`ipaddress` to prevent excessive memory consumption and a minor
denial-of-service.
..
.. date: 2025-05-28-15-53-27
.. gh-issue: 128840
.. nonce: Nur2pB
.. section: Library
Fix parsing long IPv6 addresses with embedded IPv4 address.
..
.. date: 2025-05-15-14-27-01
.. gh-issue: 134062
.. nonce: fRbJet
.. section: Library
:mod:`ipaddress`: fix collisions in :meth:`~object.__hash__` for
:class:`~ipaddress.IPv4Network` and :class:`~ipaddress.IPv6Network` objects.
..
.. date: 2024-08-28-13-03-36
.. gh-issue: 123409
.. nonce: lW0YF-
.. section: Library
Fix :attr:`ipaddress.IPv6Address.reverse_pointer` output according to
:rfc:`RFC 3596, §2.5 <3596#section-2.5>`. Patch by Bénédikt Tran.
..
.. bpo: 43633
.. date: 2021-10-31-16-06-28
.. nonce: vflwXv
.. section: Library
Improve the textual representation of IPv4-mapped IPv6 addresses
(:rfc:`4291` Sections 2.2, 2.5.5.2) in :mod:`ipaddress`. Patch by Oleksandr
Pavliuk.

1
Misc/NEWS.d/next/Library/2021-10-31-16-06-28.bpo-43633.vflwXv.rst

@ -1 +0,0 @@
Improve the textual representation of IPv4-mapped IPv6 addresses (:rfc:`4291` Sections 2.2, 2.5.5.2) in :mod:`ipaddress`. Patch by Oleksandr Pavliuk.

2
Misc/NEWS.d/next/Library/2024-08-28-13-03-36.gh-issue-123409.lW0YF-.rst

@ -1,2 +0,0 @@
Fix :attr:`ipaddress.IPv6Address.reverse_pointer` output according to
:rfc:`RFC 3596, §2.5 <3596#section-2.5>`. Patch by Bénédikt Tran.

3
Misc/NEWS.d/next/Library/2025-05-15-14-27-01.gh-issue-134062.fRbJet.rst

@ -1,3 +0,0 @@
:mod:`ipaddress`: fix collisions in :meth:`~object.__hash__` for
:class:`~ipaddress.IPv4Network` and :class:`~ipaddress.IPv6Network`
objects.

1
Misc/NEWS.d/next/Library/2025-05-28-15-53-27.gh-issue-128840.Nur2pB.rst

@ -1 +0,0 @@
Fix parsing long IPv6 addresses with embedded IPv4 address.

2
Misc/NEWS.d/next/Security/2025-01-14-11-19-07.gh-issue-128840.M1doZW.rst

@ -1,2 +0,0 @@
Short-circuit the processing of long IPv6 addresses early in :mod:`ipaddress` to prevent excessive
memory consumption and a minor denial-of-service.

2
Misc/NEWS.d/next/Security/2025-05-09-20-22-54.gh-issue-133767.kN2i3Q.rst

@ -1,2 +0,0 @@
Fix use-after-free in the "unicode-escape" decoder with a non-"strict" error
handler.

6
Misc/NEWS.d/next/Security/2025-06-02-11-32-23.gh-issue-135034.RLGjbp.rst

@ -1,6 +0,0 @@
Fixes multiple issues that allowed ``tarfile`` extraction filters
(``filter="data"`` and ``filter="tar"``) to be bypassed using crafted
symlinks and hard links.
Addresses CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, and CVE 2025-4517.

2
README.rst

@ -1,4 +1,4 @@
This is Python version 3.10.17
This is Python version 3.10.18
==============================
.. image:: https://travis-ci.com/python/cpython.svg?branch=master

Loading…
Cancel
Save