diff options
| author | Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> | 2024-04-15 18:22:00 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-04-15 18:22:00 (GMT) |
| commit | 3375282bb894347b73c11752f0797d90dadaf465 (patch) | |
| tree | 1dfae89f14c8182dfbe053ea39b3b181bcc8c501 /Misc/NEWS.d/3.7.0a1.rst | |
| parent | 78da15406705f88ffa79dafac491fb93b373e8e9 (diff) | |
| download | cpython-3375282bb894347b73c11752f0797d90dadaf465.zip cpython-3375282bb894347b73c11752f0797d90dadaf465.tar.gz cpython-3375282bb894347b73c11752f0797d90dadaf465.tar.bz2 | |
Docs: add link roles with Sphinx extlinks (#117850)
Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>
Diffstat (limited to 'Misc/NEWS.d/3.7.0a1.rst')
| -rw-r--r-- | Misc/NEWS.d/3.7.0a1.rst | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/Misc/NEWS.d/3.7.0a1.rst b/Misc/NEWS.d/3.7.0a1.rst index aca79c4..58d51c4 100644 --- a/Misc/NEWS.d/3.7.0a1.rst +++ b/Misc/NEWS.d/3.7.0a1.rst @@ -46,10 +46,10 @@ passing other environment variables and command arguments. .. section: Security Upgrade expat copy from 2.2.0 to 2.2.1 to get fixes of multiple security -vulnerabilities including: CVE-2017-9233 (External entity infinite loop -DoS), CVE-2016-9063 (Integer overflow, re-fix), CVE-2016-0718 (Fix -regression bugs from 2.2.0's fix to CVE-2016-0718) and CVE-2012-0876 -(Counter hash flooding with SipHash). Note: the CVE-2016-5300 (Use +vulnerabilities including: :cve:`2017-9233` (External entity infinite loop +DoS), :cve:`2016-9063` (Integer overflow, re-fix), :cve:`2016-0718` (Fix +regression bugs from 2.2.0's fix to :cve:`2016-0718`) and :cve:`2012-0876` +(Counter hash flooding with SipHash). Note: the :cve:`2016-5300` (Use os-specific entropy sources like getrandom) doesn't impact Python, since Python already gets entropy from the OS to set the expat secret using ``XML_SetHashSalt()``. @@ -75,8 +75,8 @@ authentication (``login@host``). .. original section: Library .. section: Security -Update expat copy from 2.1.1 to 2.2.0 to get fixes of CVE-2016-0718 and -CVE-2016-4472. See https://sourceforge.net/p/expat/bugs/537/ for more +Update expat copy from 2.1.1 to 2.2.0 to get fixes of :cve:`2016-0718` and +:cve:`2016-4472`. See https://sourceforge.net/p/expat/bugs/537/ for more information. .. |