Commit graph

852 commits

Author SHA1 Message Date
Tomáš Hrnčiar
4c7421cb3c Security fixes for CVE-2026-0865, CVE-2025-15366 and CVE-2025-15367 2026-02-19 09:23:50 +01:00
Lumir Balhar
ebabf83a2d Security fix for CVE-2025-13836 2026-01-16 09:25:54 +01:00
Karolina Surma
16eea4e6c0 Extend the expat requirement to differentiate between 32 and 64 arches
(cherry picked from python3.15 commit a5ca170d3f1e6e19f5df66f21482c2b10593af42)
2026-01-13 16:33:07 +01:00
Lumir Balhar
6bb200e1be Security fix for CVE-2025-12084 2026-01-08 07:47:43 +01:00
Karolina Surma
2bbb4fe674 Require at least the same expat version as used during the build
The versioned requirement is no longer valid -
this happens again now with expat 2.7.2 introducing new symbols.

Make the versioned requirement future-proof - the generate version will always
match at least the one present in the buildroot during the Python build.
2026-01-07 17:00:02 +01:00
Miro Hrončok
c10d237b28 Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:50:35 +00:00
Karolina Surma
20fedd3261 Update to Python 3.11.14 2025-10-10 13:54:32 +02:00
Lumir Balhar
5a283b533c rpminspect: Wrap strings with globs with single quotes
It seems to be required since rpminspect 2.0:
1593c38ce4
2025-08-26 13:27:26 +02:00
Lukáš Zachar
7de99f0f7e Drop STI and use tmt instead
Resolves: rhbz#2383057
2025-08-04 22:43:24 +00:00
Fedora Release Engineering
d53a9edf13 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:02 +00:00
Miro Hrončok
9d2c8873e9 Fixup the patch 1 commit message after the importpatches/exportpatches change
This fixes up f1bceb0730 + 2b6b498d77.
2025-06-26 13:08:59 +02:00
Tomáš Hrnčiar
4553d57adf Update to 3.11.13 2025-06-04 13:39:09 +02:00
Charalampos Stratakis
2b6b498d77 Fix PySSL_SetError handling SSL_ERROR_SYSCALL
This fixes random flakiness of test_ssl on stressed machines
2025-05-13 02:20:25 +02:00
Tomáš Hrnčiar
f1bceb0730 Regenerate patches with updated importpatches script 2025-04-17 11:56:07 +02:00
Charalampos Stratakis
2902fe1d79 test_ssl: Don't stop ThreadedEchoServer on OSError in ConnectionHandler
Fixes: rhbz#2355052
2025-04-16 05:18:41 +02:00
Miro Hrončok
6cfe05c332 Update to 3.11.12
Patches 438 and 350 merged upstream.
2025-04-09 09:44:03 +02:00
Charalampos Stratakis
d0bc099cf5 Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356302
2025-04-01 01:22:06 +02:00
Charalampos Stratakis
3fe7e179a0 Security fix for CVE-2025-0938
Fixes: rhbz#2343272
2025-02-10 23:27:07 +01:00
Miro Hrončok
9406dc1ea3 Rebuilt with mpdecimal 4.0.0 2025-02-06 12:04:28 +01:00
Miro Hrončok
976de1a01d Ensure this package is built with Tk 8
- Fixes: rhbz#2337758
2025-02-03 12:19:57 +01:00
9cf2fe58ab
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:56:57 +01:00
Fedora Release Engineering
65fcf85d2e Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:08:16 +00:00
Lumir Balhar
77dc13a527 Update to 3.11.11
Fixes: rhbz#2321655
2024-12-03 20:59:35 +01:00
Tomáš Hrnčiar
61754725b2 Fix ThreadedVSOCKSocketStreamTest 2024-09-11 19:54:15 +02:00
Tomáš Hrnčiar
6116f5c4e8 Update to 3.11.10 2024-09-11 19:53:38 +02:00
Miro Hrončok
58d3aefea4 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:36:46 +02:00
Charalampos Stratakis
73a97226f5 Security fix for CVE-2024-8088
Fixes: rhbz#2307460
2024-08-23 15:08:45 +02:00
Charalampos Stratakis
0ba3337813 Security fix for CVE-2024-6923 (rhbz#2303158) 2024-08-16 01:52:30 +02:00
Charalampos Stratakis
8ff163b3f2 Security fix for CVE-2024-4032 (rhbz#2293391) 2024-08-16 01:50:57 +02:00
Lumir Balhar
5c3351913b Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:24:37 +02:00
Fedora Release Engineering
2a37127936 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:26:12 +00:00
Miro Hrončok
f5eb1e0bd1 Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-04-18 01:47:02 +02:00
Tomáš Hrnčiar
75e1fc6869 Update to 3.11.9 2024-04-09 13:59:56 +02:00
Miro Hrončok
2c45c73ad3 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-28 14:15:47 +01:00
Tomáš Hrnčiar
19c104a138 Update to 3.11.8 2024-02-07 15:16:09 +01:00
Fedora Release Engineering
402c54cf0a Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:31:36 +00:00
Fedora Release Engineering
4812846058 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:21:45 +00:00
Lumir Balhar
7434c7a69a Security fix for CVE-2023-27043 (rhbz#2196188) 2023-12-18 13:15:07 +01:00
Miro Hrončok
5c1f70d712 Own stray directories in /usr/lib64/python3.11
Fixes https://bugzilla.redhat.com/2252144
2023-12-08 20:36:19 +01:00
Tomáš Hrnčiar
955993c3ec Update to 3.11.7 2023-12-06 14:52:23 +01:00
Yaakov Selkowitz
1b480eac01 Use bundled libb2 in RHEL builds
Standalone libb2 is unwanted in RHEL.
2023-10-05 12:12:15 +02:00
Tomáš Hrnčiar
3254311fe9 Update to 3.11.6 2023-10-04 11:16:54 +02:00
Tomáš Hrnčiar
7d571986dc Temporarily skip test_check_probes in CI tests
See: https://github.com/python/cpython/issues/104280#issuecomment-1669249980
2023-08-29 15:54:08 +02:00
Tomáš Hrnčiar
32c38941f9 Update to 3.11.5 2023-08-29 15:50:12 +02:00
Charalampos Stratakis
ee27ca470f Remove extra distro-applied CFLAGS passed to user-built C extensions
Only -fexceptions and -fcf-protection are preserved for binary
compatibility with user-built python C extension.

https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction
2023-08-04 16:06:02 +02:00
Fedora Release Engineering
458f7d2d24 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 15:42:14 +00:00
Python Maint
5f98fe006c Rebuilt for Python 3.12 2023-06-13 15:09:02 +02:00
Tomáš Hrnčiar
8ca0a0a2d8 Update to 3.11.4 2023-06-08 08:36:11 +02:00
Charalampos Stratakis
64d93401a3 Fixup for CVE-2023-24329 patch name 2023-05-27 00:55:16 +02:00
Lumir Balhar
68ad779a6c Fix for CVE-2023-24329 2023-05-24 14:08:28 +02:00