From 708a7675a473a766391a1a2353d1e965ddac35f082895705ad70b7b03fd136bf Mon Sep 17 00:00:00 2001 From: Matej Cepl Date: Tue, 31 Aug 2021 15:13:54 +0000 Subject: [PATCH] Accepting request 915148 from home:fusionfuture:branches:devel:languages:python:Factory MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update to 3.8.12 * Complete list of changes is available at https://docs.python.org/release/3.8.12/whatsnew/changelog.html * Security - bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition. - bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 “Billion Laughs” vulnerability. This copy is most used on Windows and macOS. - bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection. - bpo-36384: ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros. - Refreshed patch: * decimal-3.8.patch OBS-URL: https://build.opensuse.org/request/show/915148 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python38?expand=0&rev=80 --- Python-3.8.11.tar.xz | 3 --- Python-3.8.11.tar.xz.asc | 16 ---------------- Python-3.8.12.tar.xz | 3 +++ Python-3.8.12.tar.xz.asc | 16 ++++++++++++++++ decimal-3.8.patch | 2 +- python38.changes | 26 ++++++++++++++++++++++++++ python38.spec | 2 +- 7 files changed, 47 insertions(+), 21 deletions(-) delete mode 100644 Python-3.8.11.tar.xz delete mode 100644 Python-3.8.11.tar.xz.asc create mode 100644 Python-3.8.12.tar.xz create mode 100644 Python-3.8.12.tar.xz.asc diff --git a/Python-3.8.11.tar.xz b/Python-3.8.11.tar.xz deleted file mode 100644 index 9d1aa80..0000000 --- a/Python-3.8.11.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:fb1a1114ebfe9e97199603c6083e20b236a0e007a2c51f29283ffb50c1420fb2 -size 18437648 diff --git a/Python-3.8.11.tar.xz.asc b/Python-3.8.11.tar.xz.asc deleted file mode 100644 index 3a69223..0000000 --- a/Python-3.8.11.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmDZq2IACgkQsmmV4xAl -BWi57w/+NQXLn1ZoFPuESty4LEIc6Oa7WQrfzMUazzglfocM/0SK248LdIpMYA15 -tMgcI3H/YCuftg1Q9Zbij4bhY1SrwEH6mh8/l1M9RUFSQRjDB5TzibX9I1Qix1Tc -hCEl/dt1D6HwN/U8W8qv71lwz3gcSAT85zU8UTG8GdbPnrZRyjHq6vj1T5Os/N9u -pAfMob+pn8EkW8bxYldV3+514vlR2vYJUH/ZV3t+UzwiVGRJuh9cWEoH31hy4XQF -pJJX43Qh6aGQwwi1a4IFv3MhlKBT6G7SDgfaAd1LrkCAtFNOS/0CqLesItJHsdGQ -jTLVsAo9XQ5tRN3CpDZ10/UqMpFrtzRvdG0kB7cL29szqeVm1sqUlW7WyNKZJwia -8Q/8J+Od/Z30SAaGb7rVmW46ijAJr4QeXimanYZeiHEprQMOKhPz61mNYXtPHBV/ -G9J5OEIk5GIUrIumh2btAwzx5/L8NI+RJdTV8RD7z0TLHuDt7ExxcREfLMUY3dqf -0wul7/tQQLqvTZXYgQb0zyKpatGw+q89xYe7Eh0h4rkPO7WRJ0/pCaHP3DQZf3fy -D14pEVeUlK4+A6S31wKwE0wpZfK8p1m7Kl/l+tKSFhNl6sslo993wZCaBCbHjSnx -Jw0TuVLeoxR6smL/W/EEHPQ0dgG6IaEU8HC+iXFG6b3uuJdG/1Q= -=sO6f ------END PGP SIGNATURE----- diff --git a/Python-3.8.12.tar.xz b/Python-3.8.12.tar.xz new file mode 100644 index 0000000..5151ab2 --- /dev/null +++ b/Python-3.8.12.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b1d3a76420375343b5e8a22fceb1ac65b77193e9ed27146524f0a9db058728ea +size 18443568 diff --git a/Python-3.8.12.tar.xz.asc b/Python-3.8.12.tar.xz.asc new file mode 100644 index 0000000..ed5925e --- /dev/null +++ b/Python-3.8.12.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmEtCqkACgkQsmmV4xAl +BWiX4A/+LBc42iF/V8rob0MGnUkLNe0zmfMwk4m0ji7ukH9o+2/Qttt1cWE8Mnhl +VanXlxfctk5v4MIWo+/p3iQqjoDBCQZTuHIJZ06ZXmKvgWABrPImT2NGaWz2jQip +s28VQTax2fQrJk8fiGA59ty5qMyvLefwYMPgvFPpkk+ToBgIDGFSuKYbPQ9X+CE1 +Hwbk1Z0HfEHIMoDJ10uM5I00wX38Dbt6QaSO6v/PSowajOnBE43pjqEINBGHT7/C +il/JecPQj1bamTrZWQy6DA2+WjmNMVlXZv8Nwix9Jw5vPt/BVLLuN6whP4UKvKmc +ib/EI53sDB4WstROMngslfyR4XBg/DtCIOGZfmfnTJKvQTQlOSt1P5w7jh0NKXM4 +syDClByOXkKSf/Buu8vW1hWFgdoXW55s47tusS6ExCuBdQyo9abyq7DjkAyYu88U +bqHQoFIH+ARyr/aWVErWPlfBfVUR2Ch4V1fkszPA7rcdyWVw82R66K7cwN235zcq +oqD23aNMJ26nd5d1Xw2xoybB652S2Q+PmuT0KQn+GHbLLIquTdMYFb80f1rQDRS8 +5bMGjYhlgXB9f2Wcg62m1J1OdKKasQUE8zMVHlArW8TRV7P4xRFzmYgP63Kl9oMP +Ux64wl5hs+LLFWTjH1f8608z70ijsgfaMdVpHzfD8Q0q5mPbE2Y= +=aijj +-----END PGP SIGNATURE----- diff --git a/decimal-3.8.patch b/decimal-3.8.patch index cd10f4f..70051d4 100644 --- a/decimal-3.8.patch +++ b/decimal-3.8.patch @@ -25,7 +25,7 @@ if (sep == NULL) { --- a/setup.py +++ b/setup.py -@@ -2051,7 +2051,7 @@ class PyBuildExt(build_ext): +@@ -2053,7 +2053,7 @@ class PyBuildExt(build_ext): undef_macros = [] if '--with-system-libmpdec' in sysconfig.get_config_var("CONFIG_ARGS"): include_dirs = [] diff --git a/python38.changes b/python38.changes index dde7562..2274f17 100644 --- a/python38.changes +++ b/python38.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Tue Aug 31 01:18:08 UTC 2021 - Fusion Future + +- Update to 3.8.12 + * Complete list of changes is available at + https://docs.python.org/release/3.8.12/whatsnew/changelog.html + * Security + - bpo-42278: Replaced usage of tempfile.mktemp() with + TemporaryDirectory to avoid a potential race condition. + - bpo-44394: Update the vendored copy of libexpat to 2.4.1 + (from 2.2.8) to get the fix for the CVE-2013-0340 “Billion + Laughs” vulnerability. This copy is most used on Windows and + macOS. + - bpo-43124: Made the internal putcmd function in smtplib + sanitize input for presence of \r and \n characters to avoid + (unlikely) command injection. + - bpo-36384: ipaddress module no longer accepts any leading + zeros in IPv4 address strings. Leading zeros are ambiguous + and interpreted as octal notation by some libraries. For + example the legacy function socket.inet_aton() treats leading + zeros as octal notation. glibc implementation of modern + inet_pton() does not accept any leading zeros. For a while + the ipaddress module used to accept ambiguous leading zeros. +- Refreshed patch: + * decimal-3.8.patch + ------------------------------------------------------------------- Fri Aug 27 12:00:12 UTC 2021 - Matej Cepl diff --git a/python38.spec b/python38.spec index b37d5e8..19914db 100644 --- a/python38.spec +++ b/python38.spec @@ -88,7 +88,7 @@ %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so %bcond_without profileopt Name: %{python_pkg_name}%{psuffix} -Version: 3.8.11 +Version: 3.8.12 Release: 0 Summary: Python 3 Interpreter License: Python-2.0