339c66ef3e- Add python310 Obsoletes line to obsolete_python_versioned macro.Matej Cepl2023-03-01 20:51:07 +0000
c9f46254f9Accepting request 1067032 from devel:languages:python:Factory
Dominique Leuenberger
2023-02-22 14:21:14 +0000
1c719478cb- Add provides for readline and sqlite3 to the main Python package.Matej Cepl2023-02-21 13:49:09 +0000
34212ca5cfAccepting request 1061556 from devel:languages:python:Factory
Dominique Leuenberger
2023-01-28 17:44:01 +0000
0a8a28caaaAccepting request 1061231 from home:kukuk:branches:devel:languages:python:FactoryMatej Cepl2023-01-27 13:46:48 +0000
dd8a3056e1Accepting request 1060927 from devel:languages:python:Factory
Dominique Leuenberger
2023-01-25 16:44:36 +0000
d7b979c1e0Accepting request 1060635 from home:dirkmueller:FactoryMatej Cepl2023-01-25 13:27:45 +0000
d185756768Accepting request 1059550 from devel:languages:python:Factory
Dominique Leuenberger
2023-01-19 15:44:25 +0000
b37cda8bf5- Don't fail on Sphinx build warnings. - For jsc#PED-1570, providing Python 3.11 for SLE-15-SP5.Matej Cepl2023-01-19 10:07:22 +0000
a044f5c557Accepting request 1041729 from devel:languages:python:Factory
Dominique Leuenberger
2022-12-09 12:18:00 +0000
6c436c7abc- Update to 3.11.1: - python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server lo This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printin - Avoid publishing list of active per-interpreter audit hooks via the gc module - The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name (CVE-2022-45061). - Update bundled libexpat to 2.5.0 - Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. Issue reported and initial fix by Caleb Shortt. Patch by Victor Stinner. - Fix a crash when an object which does not have a dictionary frees its instance values. - Fix a bug in the tokenizer that could cause infinite recursion when showing syntax warnings that happen in the first line of the source. Patch by Pablo Galindo - Fix an issue that could cause frames to be visible to Python code as they are being torn down, possibly leading to memory corruption or hard crashes of the interpreter. - Fix a reference bug in _imp.create_builtin() after theMatej Cepl2022-12-08 15:05:06 +0000
95751a5895Accepting request 1034963 from devel:languages:python:Factory
Dominique Leuenberger
2022-11-10 13:23:05 +0000
03d1be1616- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding extremely long domain names.Matej Cepl2022-11-09 18:37:56 +0000
ba06f07184- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid CVE-2022-42919 (bsc#1204886) avoiding Linux specific local privilege escalation via the multiprocessing forkserver start method.Matej Cepl2022-11-04 15:00:28 +0000
5b218ea9e3Accepting request 1031405 from devel:languages:python:Factory
Dominique Leuenberger
2022-10-27 11:54:25 +0000
403af99cf1Accepting request 1031401 from home:mcepl:branches:devel:languages:python:FactoryMatej Cepl2022-10-26 21:24:53 +0000
6f939f9b60Accepting request 1003848 from devel:languages:python:Factory
Dominique Leuenberger
2022-09-15 20:59:58 +0000
d8ac67fc2d- Update to 3.11.0rc2: - Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735. This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form. - Fix case of undefined behavior in ceval.c - Do not expose KeyWrapper in _functools. - Ensure that tracing, sys.setrace(), is turned on immediately. In pre-release versions of 3.11, some tracing events might have been lost when turning on tracing in a __del__ method or interrupt. - Fix use after free in trace refs build mode. Patch by Kumar Aditya. - When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted. - Make sure that incomplete frames do not show up in tracemalloc traces. - Remove two cases of undefined behavior, by adding NULL checks. - Fix possible NULL pointer dereference in _PyThread_CurrentFrames. Patch by Kumar Aditya. - Fix AttributeError missing name and obj attributes in object.__getattribute__(). Patch by Philip Georgi. - Loading a file with invalid UTF-8 will now report the brokenMatej Cepl2022-09-15 09:14:50 +0000
d52b13e86cAccepting request 1001451 from devel:languages:python:Factory
Dominique Leuenberger
2022-09-07 09:05:45 +0000
d9d021447fAccepting request 1001307 from openSUSE:Factory:RISCVMarkéta Machová2022-09-06 12:03:43 +0000
fcee49126aAccepting request 999586 from devel:languages:python:Factory
Dominique Leuenberger
2022-08-28 11:12:30 +0000
3931fb9f09- fix import_failed.map to refer to the python 3.11 package versionsMatej Cepl2022-08-20 21:31:49 +0000
93d3c08eeb- Update to 3.11.0rc1: - Core and Builtins - Update code object hashing and equality to consider all debugging and exception handling tables. This fixes an issue where certain non-identical code objects could be “deduplicated” during compilation. - _PyPegen_Parser_New now properly detects token memory allocation errors. Patch by Honglin Zhu. - Run Python code in tracer/profiler function at full speed. Fixes slowdown in earlier versions of 3.11. - Emit a warning in debug mode if an object does not call PyObject_GC_UnTrack() before deallocation. Patch by Pablo Galindo. - Prevented crashes in the AST constructor when compiling some absurdly long expressions like "+0"*1000000. RecursionError is now raised instead. Patch by Pablo Galindo - ast.AST node positions are now validated when provided to compile() and other related functions. If invalid positions are detected, a ValueError will be raised. - Fix error detection in some builtin functions when keyword argument name is an instance of a str subclass with overloaded __eq__ and __hash__. Previously it could cause SystemError or other undesired behavior. - Library - Update bundled pip to 22.2.2. - Fix asyncio.TaskGroup to propagate exception when asyncio.CancelledError was replaced with another exception by a context manger. Patch by Kumar Aditya and Guido van Rossum.Matej Cepl2022-08-20 14:25:45 +0000
7c5df48558Accepting request 991283 from devel:languages:python:Factory
Richard Brown
2022-07-28 18:58:07 +0000
a867744a23- Update to 3.11.0b5: - Core and Builtins - gh-93351: ast.AST node positions are now validated when provided to compile() and other related functions. If invalid positions are detected, a ValueError will be raised. - gh-94438: Fix an issue that caused extended opcode arguments and some conditional pops to be ignored when calculating valid jump targets for assignments to the f_lineno attribute of frame objects. In some cases, this could cause inconsistent internal state, resulting in a hard crash of the interpreter. - gh-95060: Undocumented PyCode_Addr2Location function now properly returns when addrq argument is less than zero. - gh-95113: Replace all EXTENDED_ARG_QUICK instructions with basic EXTENDED_ARG instructions in unquickened code. Consumers of non-adaptive bytecode should be able to handle extended arguments the same way they were handled in CPython 3.10 and older. - gh-91409: Fix incorrect source location info caused by certain optimizations in the bytecode compiler. - gh-94036: Fix incorrect source location info for some multi-line attribute accesses and method calls. - gh-94739: Allow jumping within, out of, and across exception handlers in the debugger. - gh-94949: ast.parse() will no longer parse parenthesized context managers when passed feature_version less than (3, 9). Patch by Shantanu Jain. - gh-94947: ast.parse() will no longer parse assignment expressions when passed feature_version less than (3,Matej Cepl2022-07-26 10:43:57 +0000
cdbc2f881dAccepting request 990681 from devel:languages:python:Factory
Richard Brown
2022-07-22 17:21:33 +0000
3978a4fb6f- Switch from %primary_interpreter to prjconf-defined %primary_python (gh#openSUSE/python-rpm-macros#127).Matej Cepl2022-07-21 14:25:26 +0000
817af8a82bAccepting request 989232 from devel:languages:python:Factory
Dominique Leuenberger
2022-07-15 11:52:33 +0000
6af5b9f2b3- Update to 3.11.0b4: - Fixes many bugs and adds following more significant changes - Security - gh-68966: The deprecated mailcap module now refuses to inject Coreunsafe text (filenames, MIME types, parameters) into shell Corecommands. Instead of using such text, it will warn and act Coreas if a match was not found (or for test commands, as if the Coretest failed). and Builtins - gh-93516: Lazily create a table mapping bytecode offsets to line numbers to speed up calculation of line numbers when tracing. - gh-93461: importlib.invalidate_caches() now drops entries from sys.path_importer_cache with a relative path as name. This solves a caching issue when a process changes its current working directory. - FileFinder no longer inserts a dot in the path, e.g. /egg/./spam is now /egg/spam. Library - gh-93896: Fix asyncio.run() and unittest.IsolatedAsyncioTestCase to always the set event loop as it was done in Python 3.10 and earlier. Patch by Kumar Aditya. - gh-94101: Manual instantiation of ssl.SSLSession objects is no longer allowed as it lead to misconfigured instances that crashed the interpreter when attributes where accessed on them. - gh-83658: Make multiprocessing.Pool raise an exception if maxtasksperchild is not None or a positive int. - gh-61162: Clarify sqlite3 behavior when Using the connection as a context manager.Matej Cepl2022-07-14 16:01:58 +0000
ec126cfe78Accepting request 980978 from devel:languages:python:Factory
Dominique Leuenberger
2022-06-06 09:10:39 +0000
62ccbe2ed8- Update to pre-release version 3.11.0b1: - PEP 657 – Include Fine-Grained Error Locations in Tracebacks - PEP 654 – Exception Groups and except* - PEP 673 – Self Type - PEP 646 – Variadic Generics - PEP 680– tomllib: Support for Parsing TOML in the Standard Library - PEP 675– Arbitrary Literal String Type - PEP 655– Marking individual TypedDict items as required or potentially-missing - bpo-46752– Introduce task groups to asyncio - The Faster Cpython Project is already yielding some exciting results. Python 3.11 is up to 10-60% faster than Python 3.10. On average, we measured a 1.22x speedup on the standard benchmark suite. See https://docs.python.org/3.11/whatsnew/3.11.html#faster-cpython for details.Matej Cepl2022-05-09 15:12:55 +0000
Matej Cepl
Dominique Leuenberger
Markéta Machová
Richard Brown