a3ff8ce797Accepting request 1199398 from devel:languages:python:Factory
factory
Ana Guerrero
2024-09-09 12:43:49 +0000
608d0c1bfd- Also in the corresponding ipaddress.IPv4Network and ipaddress.IPv6Network attributes. - Fixes bsc#1226448 (CVE-2024-4032). Stinner to improve the CVE-2023-27043 fix (bsc#1210638).
devel
Matej Cepl2024-09-07 19:39:36 +0000
48b8355786- Update to 3.13.0~rc2: - Tools/Demos - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15 and multissltests to use 3.0.15, 3.1.7, and 3.2.3. - Tests - gh-119727: Add --single-process command line option to Python test runner (regrtest). Patch by Victor Stinner. - gh-101525: Skip test_gdb if the binary is relocated by BOLT. Patch by Donghee Na. - Security - gh-123678: Upgrade libexpat to 2.6.3 - gh-121285: Remove backtracking from tarfile header parsing for hdrcharset, PAX, and GNU sparse headers (bsc#1230227, CVE-2024-6232). - Library - gh-123448: Fixed memory leak of typing.NoDefault by moving it to the static types array. - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output according to RFC 3596, §2.5. Patch by Bénédikt Tran. - gh-123270: Applied a more surgical fix for malformed payloads in zipfile.Path causing infinite loops (gh-122905) without breaking contents using legitimate characters (bsc#1229704, CVE-2024-8088). - gh-123228: Fix return type for _pyrepl.readline._ReadlineWrapper.get_line_buffer() to be str(). Patch by Sergey B Kirpichev. - gh-123240: Raise audit events for the input() in the new REPL. - gh-123243: Fix memory leak in _decimal. - gh-122546: Consistently use same file name for differentMatej Cepl2024-09-07 16:06:08 +0000
6787a9f29d- Add gh120226-fix-sendfile-test-kernel-610.patch to avoid failing test_sendfile_close_peer_in_the_middle_of_receiving tests on Linux >= 6.10 (GH-120227).Matej Cepl2024-09-02 10:20:54 +0000
1221d1c8e1Accepting request 1197482 from devel:languages:python:Factory
Dominique Leuenberger
2024-08-30 11:32:00 +0000
59a4965535- Add gh122136-test_asyncio-kernel-buffer-data.patch fixing gh#python/cpython#122136 (changes in kernel provide different amount of data in the socket buffers). - Remove skip_test_abort_clients.patch, which is not needed any more.Matej Cepl2024-08-29 14:47:46 +0000
0a0564a0e9- Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, CVE-2024-8088).Matej Cepl2024-08-29 13:03:32 +0000
c7b43c0f60Accepting request 1193120 from devel:languages:python:Factory
Dominique Leuenberger
2024-08-10 17:08:14 +0000
b97ac57404- Update list of skipped tests in qemu linux-user emulationMatej Cepl2024-08-10 09:21:55 +0000
041b675fd8Accepting request 1192376 from devel:languages:python:Factory
Dominique Leuenberger
2024-08-08 08:58:35 +0000
11a8661cb2- Adding bso1227999-reproducible-builds.patch fixing bsc#1227999 adding reproducibility patches from gh#python/cpython!121872 and gh#python/cpython!121883.Matej Cepl2024-08-07 18:01:20 +0000
1ef6a75b82- Add CVE-2024-6923-email-hdr-inject.patch to prevent email header injection due to unquoted newlines (bsc#1228780, CVE-2024-6923). - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999)Matej Cepl2024-08-07 14:51:11 +0000
b1061c18e5Add skip_test_abort_clients.patch to avoid failing test (gh#python/cpython#122136)Matej Cepl2024-08-07 13:34:52 +0000
b154095872- Update to 3.13.0~rc1: - Tests - gh-59022: Add tests for pkgutil.extend_path(). Patch by Andreas Stocker. - gh-99242: os.getloadavg() may throw OSError when running regression tests under certain conditions (e.g. chroot). This error is now caught and ignored, since reporting load average is optional. - Security - gh-122133: Authenticate the socket connection for the socket.socketpair() fallback on platforms where AF_UNIX is not available like Windows. - Patch by Gregory P. Smith <greg@krypto.org> and Seth Larson <seth@python.org>. Reported by Ellie <el@horse64.org> - gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for python -i, as well as for python -m asyncio. The events in question are cpython.run_stdin and cpython.run_startup. - Library - gh-122400: Handle ValueErrors raised by os.stat() in filecmp.dircmp and filecmp.cmpfiles(). Patch by Bénédikt Tran. - gh-122311: Fix some error messages in pickle. - gh-122332: Fixed segfault with asyncio.Task.get_coro() when using an eager task factory. - gh-105733: ctypes.ARRAY() is now soft deprecated: it no longer emits deprecation warnings and is not scheduled for removal. - gh-122087: Restore inspect.ismethoddescriptor() and inspect.isroutine() returning False for functools.partialMatej Cepl2024-08-01 10:42:44 +0000
069357c85bAccepting request 1189339 from devel:languages:python:Factory
Dominique Leuenberger
2024-07-25 13:38:59 +0000
2a2ec95344- Update F00251-change-user-install-location.patch to install packages in /usr/local by default when using pip outside of a RPMBUILD environment.Daniel Garcia2024-07-24 08:32:48 +0000
517ba388ca- Remove %suse_update_desktop_file macro as it is not useful any more.Matej Cepl2024-07-22 21:14:56 +0000
8e7a85bd98- Update to 3.13.0~b4: - Tests - gh-121084: Fix test_typing random leaks. Clear typing ABC caches when running tests for refleaks (-R option): call _abc_caches_clear() on typing abstract classes and their subclasses. - gh-121160: Add a test for readline.set_history_length(). Note that this test may fail on readline libraries. - gh-121200: Fix test_expanduser_pwd2() of test_posixpath. Call getpwnam() to get pw_dir, since it can be different than getpwall() pw_dir. - gh-121188: When creating the JUnit XML file, regrtest now escapes characters which are invalid in XML, such as the chr(27) control character used in ANSI escape sequences. - Library - gh-57141: The shallow argument to filecmp.dircmp (new in Python 3.13) is now keyword-only. - gh-121245: Simplify handling of the history file in site.register_readline() helper. The CAN_USE_PYREPL variable now will be initialized, when imported. - gh-121332: Fix constructor of ast nodes with custom _attributes. Previously, passing custom attributes would raise a DeprecationWarning. Passing arguments to the constructor that are not in _fields or _attributes remains deprecated. - gh-121279: Avoid NameError for the warnings module when accessing the depracated atributes of the importlib.abc module.Matej Cepl2024-07-22 19:00:44 +0000
45a1da448aAccepting request 1186945 from devel:languages:python:Factory
Ana Guerrero
2024-07-12 15:04:41 +0000
8be8178387- Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378).Matej Cepl2024-07-04 18:10:47 +0000
ed93a74c21Accepting request 1185326 from devel:languages:python:Factory
Ana Guerrero
2024-07-05 17:46:53 +0000
5a06fe7d3fAccepting request 1184193 from home:dirkmueller:branches:openSUSE:Factory:Rings:1-MinimalXMatej Cepl2024-07-01 06:39:49 +0000
2a85f6bbe8- Update to 3.13.0~b2: * Core and Builtins - gh-119462: Make sure that invariants of type versioning are maintained: * Superclasses always have their version number assigned before subclasses * The version tag is always zero if the tag is not valid. * The version tag is always non-zero if the tag is valid. - gh-120437: Fix _CHECK_STACK_SPACE optimization problems introduced in gh-118322. - gh-120722: Correctly set the bytecode position on return instructions within lambdas. Patch by Jelle Zijlstra. - gh-120367: Fix bug where compiler creates a redundant jump during pseudo-op replacement. Can only happen with a synthetic AST that has a try on the same line as the instruction following the exception handler. - gh-113993: Strings interned with sys.intern() are again garbage-collected when no longer used, as per the documentation. Strings interned with the C function PyUnicode_InternInPlace() are still immortal. Internals of the string interning mechanism have been changed. This may affect performance and identities of str objects. - gh-120384: Fix an array out of bounds crash in list_ass_subscript, which could be invoked via some specificly tailored input: including concurrent modification of a list object, where one thread assigns a slice and another clears it. - gh-120367: Fix crash in compiler on code with redundant NOPs and JUMPs which show up after exception handlers are moved to the end of the code.Matej Cepl2024-06-28 06:33:35 +0000
ed786f6cdeAccepting request 1178998 from home:dgarcia:branches:devel:languages:python:FactoryDaniel Garcia2024-06-06 10:39:42 +0000
4e91415a72Accepting request 1175710 from home:dgarcia:branches:devel:languages:python:FactoryDaniel Garcia2024-05-22 08:15:34 +0000
f99fa3b4a5- Enable experimental_jit just for supported archesDaniel Garcia2024-05-10 07:30:18 +0000
7eaae69a60- Disable experimental_jit for i586 - Remove _pyrepl from baseDaniel Garcia2024-05-09 10:45:22 +0000
a4dc42ba84- Add --enable-experimental-jit=yes-off to the build - Update to 3.13.0a5 * Security - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods: - xml.etree.ElementTree.XMLParser.flush() - xml.etree.ElementTree.XMLPullParser.flush() - xml.parsers.expat.xmlparser.GetReparseDeferralEnabled() - xml.parsers.expat.xmlparser.SetReparseDeferralEnabled() - xml.sax.expatreader.ExpatParser.flush() - gh-114572: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads. Core- and Builtins - gh-116604: Respect the status of the garbage collector when indirect calls are made via PyErr_CheckSignals() and the evaluation breaker. Patch by Pablo Galindo - gh-112087: list is now compatible with the implementation of PEP 703. - gh-116381: Add specialization for CONTAINS_OP. - gh-116296: Fix possible refleak in object.__reduce__() internal error handling. - gh-115823: Properly calculate error ranges in the parser when raising SyntaxError exceptions caused by invalid byte sequences. Patch by Pablo Galindo - gh-115778: Add tierN annotation for instruction definition in interpreter DSL. - gh-115733: Fix crash when calling next() on exhausted list iterators. - gh-115700: The regen-cases build stage now works on Windows. - gh-115347: Fix bug where docstring was replaced by a redundantDaniel Garcia2024-05-09 09:59:06 +0000
d51b4f3c7a- Update to 3.13.0a5: - Security - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods: xml.etree.ElementTree.XMLParser.flush() xml.etree.ElementTree.XMLPullParser.flush() xml.parsers.expat.xmlparser.GetReparseDeferralEnabled() xml.parsers.expat.xmlparser.SetReparseDeferralEnabled() xml.sax.expatreader.ExpatParser.flush() - gh-114572: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads. - Core and Builtins - gh-116604: Respect the status of the garbage collector when indirect calls are made via PyErr_CheckSignals() and the evaluation breaker. Patch by Pablo Galindo - gh-112087: list is now compatible with the implementation of PEP 703. - gh-116381: Add specialization for CONTAINS_OP. - gh-116296: Fix possible refleak in object.__reduce__() internal error handling. - gh-115823: Properly calculate error ranges in the parser when raising SyntaxError exceptions caused by invalid byte sequences. Patch by Pablo Galindo - gh-115778: Add tierN annotation for instruction definition in interpreter DSL. - gh-115733: Fix crash when calling next() on exhausted list iterators. - gh-115700: The regen-cases build stage now works onMatej Cepl2024-03-20 05:23:44 +0000
46a04323e0- Drop gh115133-XMLPullParserTest-fail.patch upstreamed now.Daniel Garcia2024-03-07 08:17:31 +0000
cf67592415- Update to 3.13.0a3 - Security - gh-113659: Skip .pth files with names starting with a dot or hidden file attribute. - gh-112302: Created a Software Bill-of-Materials document and tooling for tracking dependencies. - Core and Builtins - gh-107901: Compiler duplicates basic blocks that have an eval breaker check, no line number, and multiple predecessors. - gh-107901: A jump leaving an exception handler back to normal code no longer checks the eval breaker. - gh-113655: Set the C recursion limit to 4000 on Windows, and 10000 on Linux/OSX. This seems to be near the sweet spot to maintain safety, but not compromise backwards compatibility. - gh-113710: Add typed stack effects to the interpreter DSL, along with various instruction annotations. - gh-77046: On Windows, file descriptors wrapping Windows handles are now created non inheritable by default (PEP 446). Patch by Zackery Spytz and Victor Stinner. - gh-113853: Guarantee that all executors make progress. This then guarantees that tier 2 execution always makes progress. - gh-113753: Fix an issue where the finalizer of PyAsyncGenASend objects might not be called if they were allocated from a free list. - gh-107901: Compiler changed so that synthetic jumps which are not at loop end no longer check the eval breaker. - gh-113703: Fix a regression in the codeop module that was causing it to incorrectly identify incomplete f-strings. Patch by Pablo Galindo - gh-89811: Check for a valid tp_version_tag before performingDaniel Garcia2024-02-08 08:18:19 +0000
9bce840ac0- Update to 3.13.0a2: Python 3.13.0 alpha 2¶ - Core and Builtins: - Don’t include comments in f-string debug expressions. Patch by Pablo Galindo - Slightly optimize the Tier 2 (uop) interpreter by only loading oparg and operand when needed. Also double the trace size limit again, to 512 this time. - Change docstrings of __dict__ and __weakref__. - Lower the max parser stack depth to 1000 under WASI debug builds. - When Python is built in debug mode, set the C recursion limit to 500 instead of 1500. A debug build is likely built with low optimization level which implies higher stack memory usage than a release build. Patch by Victor Stinner. - Enable translating unspecialized FOR_ITER to Tier 2. - Make hashlib related modules thread-safe without the GIL - Deprecate assignment to a function’s __code__ field when the new code object is of a mismatched type (e.g., from a generator to a plain function). - Raise exception if frame.clear() is called on a suspended frame. - Implement native thread ids for GNU KFreeBSD. - Use exponential backoff to reduce the number of failed tier 2 optimization attempts by over 99%. - Joining a thread now ensures the underlying OS thread has exited. This is required for safer fork() in multi-threaded processes. - Make sure that tier 2 traces are de-optimized if the code is instrumentedMatej Cepl2023-11-25 16:20:58 +0000
c9d84fa1caAccepting request 1117792 from home:dgarcia:branches:devel:languages:python:FactoryMatej Cepl2023-10-14 13:31:04 +0000
Ana Guerrero
Matej Cepl
Dominique Leuenberger
Daniel Garcia