From 543d6dd7d9cccf003bf60cf3f3f2fd028a2341e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Randy=20D=C3=B6ring?= <30527984+radoering@users.noreply.github.com> Date: Sun, 12 Apr 2026 18:02:34 +0200 Subject: [PATCH] history: add Poetry 2.3.4 --- content/history.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/content/history.md b/content/history.md index f70bc3a..8853426 100644 --- a/content/history.md +++ b/content/history.md @@ -4,6 +4,13 @@ layout: single title: History --- +## [2.3.4] - 2026-04-12 + +### Fixed + +- Fix a performance regression in the wheel installer that was introduced in Poetry 2.3.3 ([#10821](https://github.com/python-poetry/poetry/pull/10821)). +- Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory ([#10837](https://github.com/python-poetry/poetry/pull/10837)). + ## [2.3.3] - 2026-03-29 ### Fixed @@ -2573,7 +2580,8 @@ This release **must** be downloaded via the `get-poetry.py` script and not via t Initial release -[Unreleased]: https://github.com/python-poetry/poetry/compare/2.3.3...main +[Unreleased]: https://github.com/python-poetry/poetry/compare/2.3.4...main +[2.3.4]: https://github.com/python-poetry/poetry/releases/tag/2.3.4 [2.3.3]: https://github.com/python-poetry/poetry/releases/tag/2.3.3 [2.3.2]: https://github.com/python-poetry/poetry/releases/tag/2.3.2 [2.3.1]: https://github.com/python-poetry/poetry/releases/tag/2.3.1