forked from pool/python39
Matej Cepl
64818e1d6b
- Security
- gh-135034: Fixes multiple issues that allowed tarfile
extraction filters (filter="data" and filter="tar") to be
bypassed using crafted symlinks and hard links.
- Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
(bsc#1244059), CVE-2025-4330 (bsc#1244060), and
CVE-2025-4517 (bsc#1244032).
- gh-133767: Fix use-after-free in the “unicode-escape”
decoder with a non-“strict” error handler (CVE-2025-4516,
bsc#1243273).
- gh-128840: Short-circuit the processing of long IPv6
addresses early in ipaddress to prevent excessive memory
consumption and a minor denial-of-service.
- gh-80222: Fix bug in the folding of quoted strings
when flattening an email message using a modern email
policy. Previously when a quoted string was folded so
that it spanned more than one line, the surrounding
quotes and internal escapes would be omitted. This could
theoretically be used to spoof header lines using a
carefully constructed quoted string if the resulting
rendered email was transmitted or re-parsed.
- Library
- gh-128840: Fix parsing long IPv6 addresses with embedded
IPv4 address.
- gh-134062: ipaddress: fix collisions in __hash__() for
IPv4Network and IPv6Network objects.
- gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
according to RFC 3596, §2.5. Patch by Bénédikt Tran.
- bpo-43633: Improve the textual representation of
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=233
79 lines
2.1 KiB
Bash
79 lines
2.1 KiB
Bash
#!/bin/bash
|
|
|
|
export LC_ALL=C
|
|
|
|
master=python*.spec
|
|
|
|
# create import_failed.map from package definitions
|
|
pkgname=$(grep python_pkg_name $master |grep define |awk -F' ' '{print $3}')
|
|
MAPFILE=import_failed.map
|
|
function new_map_line () {
|
|
package=$1
|
|
package=$(echo $1 |sed -e "s:%{python_pkg_name}:$pkgname:")
|
|
modules=$2
|
|
if [ -z "$package" -o -z "$modules" ]; then
|
|
return
|
|
fi
|
|
if [[ "$package" =~ "-base" ]]; then
|
|
return
|
|
fi
|
|
echo "$package:$modules" >> $MAPFILE.tmp
|
|
}
|
|
|
|
for spec in *.spec; do
|
|
basename=${spec%.spec}
|
|
package=
|
|
modules=
|
|
while read line; do
|
|
case $line in
|
|
"%files -n "*)
|
|
new_map_line $package "$modules"
|
|
package=${line#"%files -n "}
|
|
modules=
|
|
;;
|
|
"%files "*)
|
|
new_map_line $package "$modules"
|
|
package=$basename-${line#"%files "}
|
|
modules=
|
|
;;
|
|
"%files")
|
|
new_map_line $package "$modules"
|
|
package=$basename
|
|
modules=
|
|
;;
|
|
"%{sitedir}/config-"*)
|
|
# ignore
|
|
;;
|
|
"%{sitedir}/"*)
|
|
word=${line#"%{sitedir}/"}
|
|
if ! echo $word | grep -q /; then
|
|
modules="$modules $word"
|
|
fi
|
|
;;
|
|
"%{dynlib "*"}")
|
|
word=${line#"%{dynlib "}
|
|
word=${word%"}"}
|
|
modules="$modules $word"
|
|
;;
|
|
esac
|
|
done < $spec
|
|
new_map_line $package "$modules"
|
|
done
|
|
|
|
cat $MAPFILE.tmp |sort -u > $MAPFILE
|
|
rm $MAPFILE.tmp
|
|
|
|
# run test inclusion check
|
|
tar xJf Python-*.xz
|
|
python3 skipped_tests.py
|
|
|
|
# generate baselibs.conf
|
|
VERSION=$(grep ^Version $master|awk -F':' '{print $2}' |sed -e 's/ //g')
|
|
python_version=${VERSION:0:3} # 3.3
|
|
python_version_abitag=${python_version//./} # 33
|
|
python_version_soname=${python_version//./_} # 3_3
|
|
echo "$pkgname-base" > baselibs.conf
|
|
echo "$pkgname" >> baselibs.conf
|
|
echo "libpython$python_version_soname-1_0" >> baselibs.conf
|
|
|