cpython/Doc/whatsnew
T. Wouters aa9eb5f757
[3.13] gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037) (GH-135064)
Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517.
(cherry picked from commit 3612d8f517)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
Signed-off-by: Łukasz Langa <lukasz@langa.pl>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
2025-06-03 15:59:54 +02:00
..
2.0.rst gh-101100: Fix Sphinx warnings in `whatsnew/2.0.rst` (#112351) 2024-02-25 02:45:56 -07:00
2.1.rst [3.13] gh-101100: Add a table of class attributes to the "Custom classes" section of the data model docs (#124480) (#124556) 2024-09-25 17:29:48 -07:00
2.2.rst [3.13] gh-101100: Add a table of class attributes to the "Custom classes" section of the data model docs (#124480) (#124556) 2024-09-25 17:29:48 -07:00
2.3.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
2.4.rst [3.13] GH-103484: Fix permanently redirects reported by linkcheck (GH-124144) (#124151) 2024-09-24 00:43:04 +00:00
2.5.rst [3.13] gh-120345: Fix incorrect use of the :class: role with the "()" suffix (GH-120347) (GH-120411) 2024-06-12 14:51:35 +00:00
2.6.rst [3.13] gh-101100: Consolidate documentation on `ModuleType` attributes (#124709) (#125208) 2024-10-09 20:03:30 +01:00
2.7.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
3.0.rst [3.13] gh-101100: Fix sphinx warnings in `whatsnew/3.0.rst` (GH-127662) (#127783) 2024-12-10 10:45:30 +00:00
3.1.rst [3.13] gh-121905: Consistently use "floating-point" instead of "floating point" (GH-121907) (GH-122012) 2024-07-19 09:13:08 +00:00
3.2.rst [3.13] gh-101100: Consolidate documentation on `ModuleType` attributes (#124709) (#125208) 2024-10-09 20:03:30 +01:00
3.3.rst [3.13] gh-128349: Use `.. data::` instead of `.. class::` for pre-defined decimal `Context` objects (GH-128379) (#128401) 2025-01-02 07:28:12 +00:00
3.4.rst [3.13] Use roles :data: and :const: for referencing module variables (GH-129507) (GH-129649) 2025-02-04 14:25:18 +00:00
3.5.rst [3.13] gh-101100: Consolidate documentation on `ModuleType` attributes (#124709) (#125208) 2024-10-09 20:03:30 +01:00
3.6.rst [3.13] gh-101100: Fix sphinx warnings of removed opcodes (GH-127222) (#127239) 2024-11-25 10:50:48 +02:00
3.7.rst [3.13] gh-101100: Fix sphinx warnings of removed opcodes (GH-127222) (#127239) 2024-11-25 10:50:48 +02:00
3.8.rst [3.13] gh-101100: Fix sphinx warnings of removed opcodes (GH-127222) (#127239) 2024-11-25 10:50:48 +02:00
3.9.rst [3.13] gh-101100: Add a table of class attributes to the "Custom classes" section of the data model docs (#124480) (#124556) 2024-09-25 17:29:48 -07:00
3.10.rst [3.13] gh-88275: Add missing `__init__` method to `match` example (GH-120281) (#134143) 2025-05-17 13:18:14 +00:00
3.11.rst [3.13] gh-123517: Remove unnecessary `:meth:` parentheses (gh-123518) (GH-123577) 2024-09-02 16:00:04 +02:00
3.12.rst [3.13] gh-131741: Add documentation for Windows version detection change in `platform` (GH-131742) (#131767) 2025-03-26 14:56:44 +00:00
3.13.rst [3.13] gh-135034: Normalize link targets in tarfile, add `os.path.realpath(strict='allow_missing')` (GH-135037) (GH-135064) 2025-06-03 15:59:54 +02:00
changelog.rst [3.13] GH-121970: Extract ``misc_news`` into a new extension (GH-129577) (#129586) 2025-02-02 16:24:48 +00:00
index.rst Docs: add link roles with Sphinx extlinks (#117850) 2024-04-15 21:22:00 +03:00