extraction filters (filter="data" and filter="tar")

to be bypassed using crafted symlinks and hard links.
      CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
      (gh#135034, bsc#1244061).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python312?expand=0&rev=149

subprocess-raise-timeout.patch

@@ -0,0 +1,21 @@
+---
+ Lib/test/test_subprocess.py |    6 +++++-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+Index: Python-3.12.10/Lib/test/test_subprocess.py
+===================================================================
+--- Python-3.12.10.orig/Lib/test/test_subprocess.py	2025-04-11 21:04:45.154639562 +0200
++++ Python-3.12.10/Lib/test/test_subprocess.py	2025-04-11 21:12:03.374471647 +0200
+@@ -274,7 +274,11 @@
+             output = subprocess.check_output(
+                     [sys.executable, "-c",
+                      "import time; time.sleep(3600)"],
+-                    timeout=0.1)
++                     # Some heavily loaded buildbots (sparc Debian 3.x) require
++                     # this much time to start and print.
++                     # timeout=0.1)
++                     # OBS might require even more
++                     timeout=10)
+ 
+     def test_call_kwargs(self):
+         # call() function with keyword args