You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit 4d69b9b
Browse filesBrowse the repository at this point in the historyBrowse files
Copy file name to clipboardExpand all lines: CHANGELOG.md
+10-1Lines changed: 10 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,12 @@
1
1
# Change Log
2
2
3
+
## [2.4.3] - 2026-09-05
4
+
5
+
### Fixed
6
+
7
+
- Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 ([#11037](https://github.com/python-poetry/poetry/pull/11037)).
8
+
9
+
3
10
## [2.4.2] - 2026-08-29
4
11
5
12
### Fixed
@@ -8,6 +15,7 @@
8
15
- Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source ([#11029](https://github.com/python-poetry/poetry/pull/11029)).
9
16
- Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory ([#11027](https://github.com/python-poetry/poetry/pull/11027)).
0 commit comments