Commit graph

862 commits

Author SHA1 Message Date
Karolina Surma
278eb3fa41 Update to Python 3.11.16 2026-08-14 11:29:55 +02:00
Miro Hrončok
dadebe1c22 Skip UDP Lite tests if it's not supported
- Fixes FTBFS on Linux kernel 7.1 and newer
2026-07-30 17:24:31 +02:00
Fedora Release Engineering
79c55d4ad7 Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild 2026-07-16 22:47:27 +00:00
Lumír Balhar
55cc855c79 Run a new test to monitor changes in required symbols
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-07-03 12:24:01 +02:00
Miro Hrončok
fc0070dafa Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ 2026-07-02 10:54:53 +02:00
Charalampos Stratakis
f51f0ca45b Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204
2026-04-17 03:41:06 +02:00
Miro Hrončok
9be9ebcf5f Explicitly build with OpenSSL 3 for now
https://fedoraproject.org/wiki/Changes/OpenSSL40
2026-04-17 01:07:42 +00:00
Miro Hrončok
b6a32dca60 Only explicitly require expat >= installed version when expat < 2.7.4
See https://src.fedoraproject.org/rpms/expat/c/4da0543472

(cherry picked from python3.15 commit ce1bde3e67443b7cf5df33bf58cb2ec75cc2c8e2)
2026-03-26 18:34:02 +00:00
Lumir Balhar
067265083c Security fix for CVE-2026-4519 (rhbz#2449727) 2026-03-26 11:48:28 +01:00
Tomáš Hrnčiar
46ace4ef14 Update to 3.11.15 2026-03-03 14:32:28 +01:00
Tomáš Hrnčiar
4c7421cb3c Security fixes for CVE-2026-0865, CVE-2025-15366 and CVE-2025-15367 2026-02-19 09:23:50 +01:00
Lumir Balhar
ebabf83a2d Security fix for CVE-2025-13836 2026-01-16 09:25:54 +01:00
Karolina Surma
16eea4e6c0 Extend the expat requirement to differentiate between 32 and 64 arches
(cherry picked from python3.15 commit a5ca170d3f1e6e19f5df66f21482c2b10593af42)
2026-01-13 16:33:07 +01:00
Lumir Balhar
6bb200e1be Security fix for CVE-2025-12084 2026-01-08 07:47:43 +01:00
Karolina Surma
2bbb4fe674 Require at least the same expat version as used during the build
The versioned requirement is no longer valid -
this happens again now with expat 2.7.2 introducing new symbols.

Make the versioned requirement future-proof - the generate version will always
match at least the one present in the buildroot during the Python build.
2026-01-07 17:00:02 +01:00
Miro Hrončok
c10d237b28 Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:50:35 +00:00
Karolina Surma
20fedd3261 Update to Python 3.11.14 2025-10-10 13:54:32 +02:00
Lumir Balhar
5a283b533c rpminspect: Wrap strings with globs with single quotes
It seems to be required since rpminspect 2.0:
1593c38ce4
2025-08-26 13:27:26 +02:00
Lukáš Zachar
7de99f0f7e Drop STI and use tmt instead
Resolves: rhbz#2383057
2025-08-04 22:43:24 +00:00
Fedora Release Engineering
d53a9edf13 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:02 +00:00
Miro Hrončok
9d2c8873e9 Fixup the patch 1 commit message after the importpatches/exportpatches change
This fixes up f1bceb0730 + 2b6b498d77.
2025-06-26 13:08:59 +02:00
Tomáš Hrnčiar
4553d57adf Update to 3.11.13 2025-06-04 13:39:09 +02:00
Charalampos Stratakis
2b6b498d77 Fix PySSL_SetError handling SSL_ERROR_SYSCALL
This fixes random flakiness of test_ssl on stressed machines
2025-05-13 02:20:25 +02:00
Tomáš Hrnčiar
f1bceb0730 Regenerate patches with updated importpatches script 2025-04-17 11:56:07 +02:00
Charalampos Stratakis
2902fe1d79 test_ssl: Don't stop ThreadedEchoServer on OSError in ConnectionHandler
Fixes: rhbz#2355052
2025-04-16 05:18:41 +02:00
Miro Hrončok
6cfe05c332 Update to 3.11.12
Patches 438 and 350 merged upstream.
2025-04-09 09:44:03 +02:00
Charalampos Stratakis
d0bc099cf5 Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356302
2025-04-01 01:22:06 +02:00
Charalampos Stratakis
3fe7e179a0 Security fix for CVE-2025-0938
Fixes: rhbz#2343272
2025-02-10 23:27:07 +01:00
Miro Hrončok
9406dc1ea3 Rebuilt with mpdecimal 4.0.0 2025-02-06 12:04:28 +01:00
Miro Hrončok
976de1a01d Ensure this package is built with Tk 8
- Fixes: rhbz#2337758
2025-02-03 12:19:57 +01:00
Björn Esser
9cf2fe58ab
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:56:57 +01:00
Fedora Release Engineering
65fcf85d2e Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:08:16 +00:00
Lumir Balhar
77dc13a527 Update to 3.11.11
Fixes: rhbz#2321655
2024-12-03 20:59:35 +01:00
Tomáš Hrnčiar
61754725b2 Fix ThreadedVSOCKSocketStreamTest 2024-09-11 19:54:15 +02:00
Tomáš Hrnčiar
6116f5c4e8 Update to 3.11.10 2024-09-11 19:53:38 +02:00
Miro Hrončok
58d3aefea4 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:36:46 +02:00
Charalampos Stratakis
73a97226f5 Security fix for CVE-2024-8088
Fixes: rhbz#2307460
2024-08-23 15:08:45 +02:00
Charalampos Stratakis
0ba3337813 Security fix for CVE-2024-6923 (rhbz#2303158) 2024-08-16 01:52:30 +02:00
Charalampos Stratakis
8ff163b3f2 Security fix for CVE-2024-4032 (rhbz#2293391) 2024-08-16 01:50:57 +02:00
Lumir Balhar
5c3351913b Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:24:37 +02:00
Fedora Release Engineering
2a37127936 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:26:12 +00:00
Miro Hrončok
f5eb1e0bd1 Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-04-18 01:47:02 +02:00
Tomáš Hrnčiar
75e1fc6869 Update to 3.11.9 2024-04-09 13:59:56 +02:00
Miro Hrončok
2c45c73ad3 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-28 14:15:47 +01:00
Tomáš Hrnčiar
19c104a138 Update to 3.11.8 2024-02-07 15:16:09 +01:00
Fedora Release Engineering
402c54cf0a Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:31:36 +00:00
Fedora Release Engineering
4812846058 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:21:45 +00:00
Lumir Balhar
7434c7a69a Security fix for CVE-2023-27043 (rhbz#2196188) 2023-12-18 13:15:07 +01:00
Miro Hrončok
5c1f70d712 Own stray directories in /usr/lib64/python3.11
Fixes https://bugzilla.redhat.com/2252144
2023-12-08 20:36:19 +01:00
Tomáš Hrnčiar
955993c3ec Update to 3.11.7 2023-12-06 14:52:23 +01:00