Matthias Andree
955268b879
Add a -flto=full option, which can speed up the port build in terms of wallclock time at the expense of overall more CPU time. Issue a warning that test_ssl will fail from pre-test if DEBUG is enabled. Changelog: https://docs.python.org/release/3.14.4/whatsnew/changelog.html PR: 294324 Which contains these security fixes: pyexpat.c: Unbounded C recursion in conv_content_model causes crash Security: https://github.com/python/cpython/issues/145986 / CVE-2026-4224 Reject control characters in more places in http.cookies.Morsel Security: https://github.com/python/cpython/issues/145599 / CVE-2026-3644 SourcelessFileLoader does not use io.open_code() Security: https://github.com/python/cpython/issues/145506 / CVE-2026-2297 Disallow usage of control characters in status, headers and values for security in Lib/wsgiref/handlers.py Security: https://github.com/python/cpython/issues/144370 Reject leading dashes in webbrowser.open() Security: https://github.com/python/cpython/issues/143930 / 9fdad262-2e0f-11f1-88c7-00a098b42aeb / CVE-2026-4519 Excess Base64 data ignored after padding by default Security: https://github.com/python/cpython/issues/145264 / CVE-2026-3446 Additional security related PRs from upstream HTTP proxy via "CONNECT" tunneling doesn't sanitize CR/LF Obtained from: https://github.com/python/cpython/pull/148342 Security https://github.com/python/cpython/issues/146212 / CVE-2026-1502 configparser.RawConfigParser.{OPTCRE,OPTCRE_NV} regexes vulnerable to quadratic backtracking Obtained from: https://github.com/python/cpython/pull/148287 Security: https://github.com/python/cpython/issues/146333
4 lines
173 B
Plaintext
4 lines
173 B
Plaintext
TIMESTAMP = 1775640582
|
|
SHA256 (python/Python-3.14.4.tar.xz) = d923c51303e38e249136fc1bdf3568d56ecb03214efdef48516176d3d7faaef8
|
|
SIZE (python/Python-3.14.4.tar.xz) = 23855332
|