85a5883af2
- Update to 3.8.17: - gh-103142: The version of OpenSSL used in Windows and Mac installers has been upgraded to 1.1.1u to address CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 fixed previously in 1.1.1t (gh-101727). - gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). - gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. - gh-103935: trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). - gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details (fixing CVE-2007-4559, bsc#1203750). - Remove upstreamed patches: - CVE-2023-24329-blank-URL-bypass.patch - CVE-2007-4559-filter-tarfile_extractall.patch OBS-URL: https://build.opensuse.org/request/show/1095964 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python38?expand=0&rev=38 |
||
---|---|---|
_multibuild | ||
.gitattributes | ||
.gitignore | ||
98437-sphinx.locale._-as-gettext-in-pyspecific.patch | ||
99366-patch.dict-can-decorate-async.patch | ||
baselibs.conf | ||
bpo34022-stop_hash-based_invalidation_w_SOURCE_DATE_EPOCH.patch | ||
bpo34990-2038-problem-compileall.patch | ||
bpo36302-sort-module-sources.patch | ||
bpo44426-complex-keyword-sphinx.patch | ||
bpo-31046_ensurepip_honours_prefix.patch | ||
CVE-2019-5010-null-defer-x509-cert-DOS.patch | ||
decimal-3.8.patch | ||
distutils-reproducible-compile.patch | ||
F00102-lib64.patch | ||
F00251-change-user-install-location.patch | ||
idle3.appdata.xml | ||
idle3.desktop | ||
import_failed.map | ||
import_failed.py | ||
macros.python3 | ||
PACKAGING-NOTES | ||
platlibdir-in-sys.patch | ||
pre_checkin.sh | ||
python3-imp-returntype.patch | ||
python38.changes | ||
python38.spec | ||
python-3.3.0b1-fix_date_time_compiler.patch | ||
python-3.3.0b1-localpath.patch | ||
python-3.3.0b1-test-posix_fadvise.patch | ||
Python-3.8.17.tar.xz | ||
Python-3.8.17.tar.xz.asc | ||
python.keyring | ||
README.SUSE | ||
skip_random_failing_tests.patch | ||
skipped_tests.py | ||
sphinx-update-removed-function.patch | ||
subprocess-raise-timeout.patch | ||
support-expat-CVE-2022-25236-patched.patch | ||
SUSE-FEDORA-multilib.patch |
Python 3 in SUSE ============== * Subpackages * Python 3 is split into several subpackages, based on external dependencies. The main package 'python3' has soft dependencies on all subpackages needed to assemble the standard library; however, these might not all be installed by default. If you attempt to import a module that is currently not installed, an ImportError is thrown, with instructions to install the missing subpackage. Installing the subpackage might result in installing libraries that the subpackage requires to function. * ensurepip * The 'ensurepip' module from Python 3 standard library (PEP 453) is supposed to deploy a bundled copy of the pip installer. This makes no sense in a managed distribution like SUSE. Instead, you need to install package 'python3-pip'. Usually this will be installed automatically with 'python3'. Using 'ensurepip' when pip is not installed will result in an ImportError with instructions to install 'python3-pip'. * Documentation * You can find documentation in seprarate packages: python3-doc and python3-doc-pdf. These contan following documents: Tutorial, What's New in Python, Global Module Index, Library Reference, Macintosh Module Reference, Installing Python Modules, Distributing Python Modules, Language Reference, Extending and Embedding, Python/C API, Documenting Python The python3-doc package constains many text files from source tarball. * Interactive mode * Interactive mode is by default enhanced with of history and command completion. If you don't like these features, you can unset the PYTHONSTARTUP variable in your .profile or disable it system wide in /etc/profile.d/python.sh.