Commit graph

91 commits

Author SHA1 Message Date
Karolina Surma
5590da1492 Update to Python 3.12.14 2026-08-14 11:29:07 +02:00
Lukáš Zachar
06f5d3454f Security fix for CVE-2026-15308
Resolves: rhbz#2498688
2026-07-30 13:20:32 +02:00
Miro Hrončok
223df02052 Skip UDP Lite tests if it's not supported
- Fixes FTBFS on Linux kernel 7.1 and newer
2026-07-28 11:41:07 +02:00
Fedora Release Engineering
6836c73364 Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild 2026-07-16 22:48:14 +00:00
Charalampos Stratakis
5b0b65def8 Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222
2026-04-17 13:42:48 +02:00
Miro Hrončok
b85950ed24 Explicitly build with OpenSSL 3 for now
https://fedoraproject.org/wiki/Changes/OpenSSL40
2026-04-16 08:13:21 +00:00
Miro Hrončok
a7bbaa9903 Only explicitly require expat >= installed version when expat < 2.7.4
See https://src.fedoraproject.org/rpms/expat/c/4da0543472

(cherry picked from python3.15 commit ce1bde3e67443b7cf5df33bf58cb2ec75cc2c8e2)
2026-03-26 12:01:16 +00:00
Lumir Balhar
928429ac6e Security fix for CVE-2026-4519 (rhbz#2449728) 2026-03-26 09:30:06 +01:00
Tomáš Hrnčiar
0399a359ea Update to 3.12.13 2026-03-03 14:55:29 +01:00
Tomáš Hrnčiar
af31abb4d6 Security fixes for CVE-2026-0865, CVE-2025-15366 and CVE-2025-15367 2026-02-19 09:27:15 +01:00
Lumir Balhar
ddb24d27e2 Security fix for CVE-2025-13836 2026-01-16 09:29:14 +01:00
Karolina Surma
2d0b50b214 Extend the expat requirement to differentiate between 32 and 64 arches
(cherry picked from python3.15 commit a5ca170d3f1e6e19f5df66f21482c2b10593af42)
2026-01-13 16:31:17 +01:00
Karolina Surma
0b2d48a807 Require at least the same expat version as used during the build
The versioned requirement is no longer valid -
this happens again now with expat 2.7.2 introducing new symbols.

Make the versioned requirement future-proof - the generated version will always
match at least the one present in the buildroot during the Python build.
2026-01-07 16:58:28 +01:00
Lumir Balhar
44d63ded35 Security fix for CVE-2025-12084 2026-01-06 11:32:44 +01:00
Miro Hrončok
1c0680c74f Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:48:56 +00:00
Karolina Surma
e6a47de8e8 Verify the bundled setuptools provides are correct 2025-10-10 14:54:30 +02:00
Karolina Surma
9dc158f0bf Update to Python 3.12.12 2025-10-10 14:48:21 +02:00
Fedora Release Engineering
b9238cffc1 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:17 +00:00
Charalampos Stratakis
959b0d3fec Enable PAC and BTI hardware protections for aarch64 2025-06-12 02:59:48 +02:00
Tomáš Hrnčiar
2108326f50 Update to 3.12.11 2025-06-04 13:41:02 +02:00
Charalampos Stratakis
3a160e8114 Fix PySSL_SetError handling SSL_ERROR_SYSCALL
This fixes random flakiness of test_ssl on stressed machines
2025-05-13 01:48:23 +02:00
Charalampos Stratakis
8b88d87c44 Add perf to the testing BuildRequires
Perf profiling showing the Python functions is only
supported on x86_64 and aarch64 at the moment.

Adding perf as a BuildRequires allows tests that utilize the
perf binary to run.
2025-05-13 01:46:01 +02:00
Miro Hrončok
1821cc8674 Drop requirement on python-wheel-wheel with setuptools >= 71 2025-05-06 19:12:43 +02:00
Charalampos Stratakis
6ad4282b30 Apply Intel's CET for mitigation against control-flow hijacking attacks 2025-04-23 16:19:06 +02:00
Miro Hrončok
fe206952d2 Update to 3.12.10
Patch 452 was merged upstream.
2025-04-09 09:32:57 +02:00
Charalampos Stratakis
ebed0922de Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356301
2025-04-01 01:15:52 +02:00
Miro Hrončok
5c4e561e0d Rebuilt with mpdecimal 4.0.0 2025-02-06 12:04:28 +01:00
Charalampos Stratakis
5c479251a5 Update to 3.12.9
Security fix for CVE-2025-0938

Fixes: rhbz#2343275
2025-02-04 22:58:21 +01:00
Miro Hrončok
bfa6da811b Ensure this package is built with Tk 8
- Fixes: rhbz#2337759
2025-02-03 12:13:44 +01:00
14bc169807
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:57:00 +01:00
Charalampos Stratakis
c1f875abc3 Remove redundant --with-system-ffi configure option
The option has been removed since Python 3.12

See: 25590eb5de
2025-01-23 02:02:55 +01:00
Fedora Release Engineering
bc9c975019 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:08:49 +00:00
Charalampos Stratakis
62fc5ae5ed Security fix for CVE-2024-12254
Fixes: rhbz#2330926
2024-12-08 18:44:41 +01:00
Miro Hrončok
e84b7727f4 Optimize patch 251 a tiny bit
Before:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 157 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 162 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    1000 loops, best of 5: 146 usec per loop

After:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 75.9 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 77.1 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 76.2 usec per loop

The results are inconclusive on 3.12,
but we want the patch to be identical (if possible).

This can be shipped with the next update.
2024-12-05 12:02:54 +01:00
Charalampos Stratakis
e24cfa720b Update to 3.12.8
Security fix for CVE-2024-9287

Fixes: rhbz#2321656
2024-12-04 14:40:14 +01:00
Tomáš Hrnčiar
981784693b Update to 3.12.7 2024-10-01 17:49:05 +02:00
Tomáš Hrnčiar
4a4efadd0a Revert "Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le"
This was fixed upstream in https://github.com/python/cpython/pull/123422

This reverts commit b2d96079e9.
2024-09-09 16:37:00 +02:00
Tomáš Hrnčiar
d4fd1f4b06 Update to 3.12.6
Fixes: rhbz#2310090
2024-09-09 11:18:33 +02:00
Miro Hrončok
b2d96079e9 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:32:12 +02:00
Charalampos Stratakis
4a75a45976 Security fix for CVE-2024-8088
Fixes: rhbz#2307461
2024-08-23 14:58:55 +02:00
Tomáš Hrnčiar
6b761c505d Update to 3.12.5
Fixes: rhbz#2303159
2024-08-08 14:55:00 +02:00
Lumir Balhar
f5fd37367b Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:25:43 +02:00
Fedora Release Engineering
f5bad4d55e Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:26:43 +00:00
Tomáš Hrnčiar
69b24e3153 Update to 3.12.4 2024-06-07 11:36:14 +02:00
Miro Hrončok
7cb850e10c Skip test_gdb for now 2024-06-06 16:49:05 +02:00
Python Maint
a13c80a2a0 Build as non-main Python 2024-06-06 16:15:54 +02:00
Miro Hrončok
2f95a59112 Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-04-18 01:44:36 +02:00
Tomáš Hrnčiar
7b3b8ccc6d Update to 3.12.3 2024-04-11 09:45:59 +02:00
Miro Hrončok
9c9178a72b Move all test modules to the test subpackage
- __phello__
  - _xxsubinterpreters
  - xxlimited
  - xxlimited_35
  - xxsubtype

Source: https://github.com/python/cpython/blob/v3.12.2/Tools/build/generate_stdlib_module_names.py#L23
2024-03-21 12:29:18 +01:00
Miro Hrončok
c0ffafcda5 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-21 11:58:17 +01:00