ports

Files

T

Matthias Andree 965c6f73bb lang/python314: Fix incomplete mitigation of webbrowser.open()

Cherry-pick fix to resolve
Incomplete mitigation of CVE-2026-4519,
%action expansion for command injection to webbrowser.open()

Obtained from:	GitHub repo
		https://github.com/python/cpython/pull/148516
Security:       CVE-2026-4786
		cf75f572-378a-11f1-a119-e36228bfe7d4

2026-04-16 23:38:32 +02:00

patch-gh-146211-reject-CR_LF-in-HTTP-tunnel-request-headers

…

patch-gh-146333-Fix-quadratic-regex-backtracking-in-configparser

…

patch-gh-148169-fix-webbrowser-_action_substitution-bypass-of-dash-prefix-check

lang/python314: Fix incomplete mitigation of webbrowser.open()

2026-04-16 23:38:32 +02:00

patch-gh-148395-fix-possible-uaf-in-decompressors

lang/python314: Security update + other fixes

2026-04-16 23:38:32 +02:00

patch-Lib_test_test__posix.py