Commit graph

894 commits

Author SHA1 Message Date
Cristian Le
f298fbb919 Drop outdated fmf/tmt artifact 2026-08-17 11:54:15 +00:00
Karolina Surma
5590da1492 Update to Python 3.12.14 2026-08-14 11:29:07 +02:00
Lukáš Zachar
06f5d3454f Security fix for CVE-2026-15308
Resolves: rhbz#2498688
2026-07-30 13:20:32 +02:00
Miro Hrončok
223df02052 Skip UDP Lite tests if it's not supported
- Fixes FTBFS on Linux kernel 7.1 and newer
2026-07-28 11:41:07 +02:00
Fedora Release Engineering
6836c73364 Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild 2026-07-16 22:48:14 +00:00
Lumir Balhar
968e96cb26 Run a new test to monitor changes in required symbols 2026-07-01 12:38:33 +02:00
Charalampos Stratakis
5b0b65def8 Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222
2026-04-17 13:42:48 +02:00
Miro Hrončok
b85950ed24 Explicitly build with OpenSSL 3 for now
https://fedoraproject.org/wiki/Changes/OpenSSL40
2026-04-16 08:13:21 +00:00
Miro Hrončok
a7bbaa9903 Only explicitly require expat >= installed version when expat < 2.7.4
See https://src.fedoraproject.org/rpms/expat/c/4da0543472

(cherry picked from python3.15 commit ce1bde3e67443b7cf5df33bf58cb2ec75cc2c8e2)
2026-03-26 12:01:16 +00:00
Lumir Balhar
928429ac6e Security fix for CVE-2026-4519 (rhbz#2449728) 2026-03-26 09:30:06 +01:00
Tomáš Hrnčiar
0399a359ea Update to 3.12.13 2026-03-03 14:55:29 +01:00
Tomáš Hrnčiar
af31abb4d6 Security fixes for CVE-2026-0865, CVE-2025-15366 and CVE-2025-15367 2026-02-19 09:27:15 +01:00
Lumir Balhar
ddb24d27e2 Security fix for CVE-2025-13836 2026-01-16 09:29:14 +01:00
Karolina Surma
2d0b50b214 Extend the expat requirement to differentiate between 32 and 64 arches
(cherry picked from python3.15 commit a5ca170d3f1e6e19f5df66f21482c2b10593af42)
2026-01-13 16:31:17 +01:00
Karolina Surma
0b2d48a807 Require at least the same expat version as used during the build
The versioned requirement is no longer valid -
this happens again now with expat 2.7.2 introducing new symbols.

Make the versioned requirement future-proof - the generated version will always
match at least the one present in the buildroot during the Python build.
2026-01-07 16:58:28 +01:00
Lumir Balhar
44d63ded35 Security fix for CVE-2025-12084 2026-01-06 11:32:44 +01:00
Miro Hrončok
1c0680c74f Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:48:56 +00:00
Karolina Surma
e6a47de8e8 Verify the bundled setuptools provides are correct 2025-10-10 14:54:30 +02:00
Karolina Surma
9dc158f0bf Update to Python 3.12.12 2025-10-10 14:48:21 +02:00
Lumir Balhar
d05b5cbd7e rpminspect: Wrap strings with globs with single quotes
It seems to be required since rpminspect 2.0:
1593c38ce4
2025-08-26 13:22:13 +02:00
Lukáš Zachar
29a7358e19 Drop STI and use tmt instead
Resolves: rhbz#2383058
2025-08-04 22:43:05 +00:00
Fedora Release Engineering
b9238cffc1 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:17 +00:00
Charalampos Stratakis
959b0d3fec Enable PAC and BTI hardware protections for aarch64 2025-06-12 02:59:48 +02:00
Tomáš Hrnčiar
2108326f50 Update to 3.12.11 2025-06-04 13:41:02 +02:00
Charalampos Stratakis
3a160e8114 Fix PySSL_SetError handling SSL_ERROR_SYSCALL
This fixes random flakiness of test_ssl on stressed machines
2025-05-13 01:48:23 +02:00
Charalampos Stratakis
8b88d87c44 Add perf to the testing BuildRequires
Perf profiling showing the Python functions is only
supported on x86_64 and aarch64 at the moment.

Adding perf as a BuildRequires allows tests that utilize the
perf binary to run.
2025-05-13 01:46:01 +02:00
Miro Hrončok
1821cc8674 Drop requirement on python-wheel-wheel with setuptools >= 71 2025-05-06 19:12:43 +02:00
Charalampos Stratakis
6ad4282b30 Apply Intel's CET for mitigation against control-flow hijacking attacks 2025-04-23 16:19:06 +02:00
Tomáš Hrnčiar
893248a931 Regenerate patches with updated importpatches script 2025-04-17 12:02:56 +02:00
Miro Hrončok
fe206952d2 Update to 3.12.10
Patch 452 was merged upstream.
2025-04-09 09:32:57 +02:00
Charalampos Stratakis
ebed0922de Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356301
2025-04-01 01:15:52 +02:00
Miro Hrončok
5c4e561e0d Rebuilt with mpdecimal 4.0.0 2025-02-06 12:04:28 +01:00
Charalampos Stratakis
5c479251a5 Update to 3.12.9
Security fix for CVE-2025-0938

Fixes: rhbz#2343275
2025-02-04 22:58:21 +01:00
Miro Hrončok
bfa6da811b Ensure this package is built with Tk 8
- Fixes: rhbz#2337759
2025-02-03 12:13:44 +01:00
14bc169807
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:57:00 +01:00
Charalampos Stratakis
c1f875abc3 Remove redundant --with-system-ffi configure option
The option has been removed since Python 3.12

See: 25590eb5de
2025-01-23 02:02:55 +01:00
Fedora Release Engineering
bc9c975019 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:08:49 +00:00
Charalampos Stratakis
62fc5ae5ed Security fix for CVE-2024-12254
Fixes: rhbz#2330926
2024-12-08 18:44:41 +01:00
Miro Hrončok
e84b7727f4 Optimize patch 251 a tiny bit
Before:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 157 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 162 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    1000 loops, best of 5: 146 usec per loop

After:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 75.9 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 77.1 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 76.2 usec per loop

The results are inconclusive on 3.12,
but we want the patch to be identical (if possible).

This can be shipped with the next update.
2024-12-05 12:02:54 +01:00
Charalampos Stratakis
e24cfa720b Update to 3.12.8
Security fix for CVE-2024-9287

Fixes: rhbz#2321656
2024-12-04 14:40:14 +01:00
Tomáš Hrnčiar
981784693b Update to 3.12.7 2024-10-01 17:49:05 +02:00
Tomáš Hrnčiar
4a4efadd0a Revert "Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le"
This was fixed upstream in https://github.com/python/cpython/pull/123422

This reverts commit b2d96079e9.
2024-09-09 16:37:00 +02:00
Tomáš Hrnčiar
d4fd1f4b06 Update to 3.12.6
Fixes: rhbz#2310090
2024-09-09 11:18:33 +02:00
Miro Hrončok
b2d96079e9 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:32:12 +02:00
Charalampos Stratakis
4a75a45976 Security fix for CVE-2024-8088
Fixes: rhbz#2307461
2024-08-23 14:58:55 +02:00
Tomáš Hrnčiar
6b761c505d Update to 3.12.5
Fixes: rhbz#2303159
2024-08-08 14:55:00 +02:00
Lumir Balhar
f5fd37367b Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:25:43 +02:00
Fedora Release Engineering
f5bad4d55e Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:26:43 +00:00
Tomáš Hrnčiar
69b24e3153 Update to 3.12.4 2024-06-07 11:36:14 +02:00
Miro Hrončok
7cb850e10c Skip test_gdb for now 2024-06-06 16:49:05 +02:00