Daniel Garcia
55316ef9e1
- Security
- gh-108310: Fixed an issue where instances of ssl.SSLSocket were
vulnerable to a bypass of the TLS handshake and included
protections (like certificate verification) and treating sent
unencrypted data as if it were post-handshake TLS encrypted data.
Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
Gregory P. Smith.
- Core and Builtins
- gh-104432: Fix potential unaligned memory access on C APIs
involving returned sequences of char * pointers within the grp
and socket modules. These were revealed using a
-fsaniziter=alignment build on ARM macOS. Patch by Christopher
Chavez.
- gh-77377: Ensure that multiprocessing synchronization objects
created in a fork context are not sent to a different process
created in a spawn context. This changes a segfault into an
actionable RuntimeError in the parent process.
- gh-106092: Fix a segmentation fault caused by a use-after-free
bug in frame_dealloc when the trashcan delays the deallocation
of a PyFrameObject.
- gh-106719: No longer suppress arbitrary errors in the
__annotations__ getter and setter in the type and module types.
- gh-106723: Propagate frozen_modules to multiprocessing spawned
process interpreters.
- gh-105979: Fix crash in _imp.get_frozen_object() due to improper
exception handling.
- gh-105840: Fix possible crashes when specializing function calls
with too many __defaults__.
- gh-105588: Fix an issue that could result in crashes when
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=83
|
||
|---|---|---|
| _multibuild | ||
| .gitattributes | ||
| .gitignore | ||
| 103213-fetch-CONFIG_ARGS.patch | ||
| baselibs.conf | ||
| bluez-devel-vendor.tar.xz | ||
| bpo-31046_ensurepip_honours_prefix.patch | ||
| CVE-2023-27043-email-parsing-errors.patch | ||
| distutils-reproducible-compile.patch | ||
| externally_managed.in | ||
| F00251-change-user-install-location.patch | ||
| fix_configure_rst.patch | ||
| idle3.appdata.xml | ||
| idle3.desktop | ||
| import_failed.map | ||
| import_failed.py | ||
| macros.python3 | ||
| no-skipif-doctests.patch | ||
| PACKAGING-NOTES | ||
| pre_checkin.sh | ||
| python311-rpmlintrc | ||
| python311.changes | ||
| python311.spec | ||
| python-3.3.0b1-fix_date_time_compiler.patch | ||
| python-3.3.0b1-localpath.patch | ||
| python-3.3.0b1-test-posix_fadvise.patch | ||
| Python-3.11.5.tar.xz | ||
| Python-3.11.5.tar.xz.asc | ||
| python.keyring | ||
| README.SUSE | ||
| Revert-gh105127-left-tests.patch | ||
| skip_if_buildbot-extend.patch | ||
| skip-test_pyobject_freed_is_freed.patch | ||
| skipped_tests.py | ||
| subprocess-raise-timeout.patch | ||
| support-expat-CVE-2022-25236-patched.patch | ||
Python 3 in SUSE
==============
* Subpackages *
Python 3 is split into several subpackages, based on external dependencies.
The main package 'python3' has soft dependencies on all subpackages needed to
assemble the standard library; however, these might not all be installed by default.
If you attempt to import a module that is currently not installed, an ImportError is thrown,
with instructions to install the missing subpackage. Installing the subpackage might result
in installing libraries that the subpackage requires to function.
* ensurepip *
The 'ensurepip' module from Python 3 standard library (PEP 453) is supposed to deploy
a bundled copy of the pip installer. This makes no sense in a managed distribution like SUSE.
Instead, you need to install package 'python3-pip'. Usually this will be installed automatically
with 'python3'.
Using 'ensurepip' when pip is not installed will result in an ImportError with instructions
to install 'python3-pip'.
* Documentation *
You can find documentation in seprarate packages: python3-doc and
python3-doc-pdf. These contan following documents:
Tutorial, What's New in Python, Global Module Index, Library Reference,
Macintosh Module Reference, Installing Python Modules, Distributing Python
Modules, Language Reference, Extending and Embedding, Python/C API,
Documenting Python
The python3-doc package constains many text files from source tarball.
* Interactive mode *
Interactive mode is by default enhanced with of history and command completion.
If you don't like these features, you can unset the PYTHONSTARTUP variable
in your .profile or disable it system wide in /etc/profile.d/python.sh.