Files
python39/Python-3.9.22.tar.xz.sigstore
Matej Cepl 2a7083b52f - Add CVE-2025-4516-DecodeError-handler.patch fixing
CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.
  %%files.
- Use python3 modules to build the documentation.
  * Support Expat >= 2.4.5
- allow build with Sphinx >= 3.x
  * remove importlib_resources and importlib-metadata
  - bpo-41304: Fixes python3x._pth being ignored on Windows, caused
  - bpo-29778: Ensure python3.dll is loaded from correct locations
  - bpo-39603: Prevent http header injection by rejecting control
    “__setattr__” in a multi-inheritance setup and
  - bpo-41247: Always cache the running loop holder when running
  - bpo-41252: Fix incorrect refcounting in
  - bpo-41215: Use non-NULL default values in the PEG parser
  - bpo-41218: Python 3.8.3 had a regression where compiling with
    ast.PyCF_ALLOW_TOP_LEVEL_AWAIT would
  - bpo-41175: Guard against a NULL pointer dereference within
  - bpo-39960: The “hackcheck” that prevents sneaking around a type’s
    __setattr__() by calling the superclass method was
  - bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the
  - bpo-39017: Avoid infinite loop when reading specially crafted
  - bpo-41207: In distutils.spawn, restore expectation that
  - bpo-41194: Fix a crash in the _ast module: it can no longer be
  - bpo-39384: Fixed email.contentmanager to allow set_content() to set a
  - bpo-41300: Save files with non-ascii chars.
  - bpo-37765: Add keywords to module name completion list.
  - bpo-40170: Revert PyType_HasFeature() change: it reads
    again directly the PyTypeObject.tp_flags
    member when the limited C API is not used, rather than always calling

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=231
2025-05-30 16:01:02 +00:00

2 lines
5.2 KiB
Plaintext

{"mediaType": "application/vnd.dev.sigstore.bundle.v0.3+json", "verificationMaterial": {"certificate": {"rawBytes": "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"}, "tlogEntries": [{"logIndex": "193991733", "logId": {"keyId": "wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="}, "kindVersion": {"kind": "hashedrekord", "version": "0.0.1"}, "integratedTime": "1744130436", "inclusionPromise": {"signedEntryTimestamp": "MEUCIQCZojFg3d0b1VlT1iIYzQD9qi0Gco8pMfY7ySidgb4VWAIgX2rTgPF7dLilPXnWN4zEd3ZCpuV6RDl8c42m+mok2ks="}, "inclusionProof": {"logIndex": "72087471", "rootHash": "q/PkICD5uDg5OlvIWNsF+lXN1ZiHEWNqVvtzFtmAPlk=", "treeSize": "72087476", "hashes": ["4yUybcYvtBlJ50W9AAsyNwk4NR+F6hiMzaeYCGGB1u8=", "1+97TstZdQ7MhyOhcTb/5wXWWmSsTbW39uY9kLhnhfo=", "q3YXOnHzg/M0HDq9vcHtAaCfgL1bSUam96gi2CbgGnk=", "kV8g3sPKmH7KgUIy4uT6+MtE52LZBdVAU2cDVyNekgU=", "SIo81b3kZgGsX/FWdBQYuvP5papZCszfK1URvAzEKDw=", "qSrXBipOR98Puq+IERBcOWHKeidS0RBLwd959YHA0D4=", "b7hTc5162/5hAKKTNfIy2OShk3XeVpGyGUwnpNrnRWg=", "GXs5uhC5teyVctnWE7ExxF5zLscIRrTKPGgu1U1Juec=", "SEpdK86t0h91343ndP33NAdKXC2lyurSAYMUT30LXYw=", "nATuuvI7Y38ODRIhealRzPKZWWvhMr6ltN0JKaAyLfM=", "TQThq+xH/Rys7mbboD00p4znY8nZ9kiJ56STr/CKVdw=", "7MlcOPugq/cko9b3dV9PgEuxQTnIJE5JYyv5V8MSoKg=", "Y0UveOhlrOl08kRY9fZBgfV5WllXxE42rV8NE+GgwCs=", "RgE76aZZETQ/ZXQCSka8ujxPpjA9SjPpXZFpkrF58Gk=", "+MDT1rEJIJ21rvjo6a7jzRPh//LjIcmfFhNEV/fA+jA=", "QReFEOB9XSZtDKsjRtA0fGnYGMYD2Z7qn50auG1YlWo=", "K26LG80DXyb+bC58c4Nw00WigG52v0PCsZGY3ExGsts=", "WEm5OgPzJpYROv+4CcrieexCYyQKrLUH3hbxmcQQ+DM=", "7v8qPHNDLerpduaMx06eb/MwgoQwczTn/cYGKX/9wZ4="], "checkpoint": {"envelope": "rekor.sigstore.dev - 1193050959916656506\n72087476\nq/PkICD5uDg5OlvIWNsF+lXN1ZiHEWNqVvtzFtmAPlk=\n\n\u2014 rekor.sigstore.dev wNI9ajBFAiEAptmnbism1EAeeK49B0IwJz0Y3HYhyW39gnaBoHxVFQECICnFiKtwk9Wce+nL732qSHuv60Qt7s+aJJpXG9NB1c/7\n"}}, "canonicalizedBody": "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"}], "timestampVerificationData": {}}, "messageSignature": {"messageDigest": {"algorithm": "SHA2_256", "digest": "jBNtGZ02N6H86YoWrcgJwdg8ki0C1B82FLNPi259OOw="}, "signature": "MEQCIE5CIBZ6A3galSYScPrTEveMipJP2IpTMnTw0Ye5nCiDAiBOqhiTe1XlRNjyhenmKFF76kVmOh09nZNuqaYlzf9Fiw=="}}