Commit graph

882 commits

Author SHA1 Message Date
Lumir Balhar
ddb24d27e2 Security fix for CVE-2025-13836 2026-01-16 09:29:14 +01:00
Karolina Surma
2d0b50b214 Extend the expat requirement to differentiate between 32 and 64 arches
(cherry picked from python3.15 commit a5ca170d3f1e6e19f5df66f21482c2b10593af42)
2026-01-13 16:31:17 +01:00
Karolina Surma
0b2d48a807 Require at least the same expat version as used during the build
The versioned requirement is no longer valid -
this happens again now with expat 2.7.2 introducing new symbols.

Make the versioned requirement future-proof - the generated version will always
match at least the one present in the buildroot during the Python build.
2026-01-07 16:58:28 +01:00
Lumir Balhar
44d63ded35 Security fix for CVE-2025-12084 2026-01-06 11:32:44 +01:00
Miro Hrončok
1c0680c74f Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:48:56 +00:00
Karolina Surma
e6a47de8e8 Verify the bundled setuptools provides are correct 2025-10-10 14:54:30 +02:00
Karolina Surma
9dc158f0bf Update to Python 3.12.12 2025-10-10 14:48:21 +02:00
Lumir Balhar
d05b5cbd7e rpminspect: Wrap strings with globs with single quotes
It seems to be required since rpminspect 2.0:
1593c38ce4
2025-08-26 13:22:13 +02:00
Lukáš Zachar
29a7358e19 Drop STI and use tmt instead
Resolves: rhbz#2383058
2025-08-04 22:43:05 +00:00
Fedora Release Engineering
b9238cffc1 Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:17 +00:00
Charalampos Stratakis
959b0d3fec Enable PAC and BTI hardware protections for aarch64 2025-06-12 02:59:48 +02:00
Tomáš Hrnčiar
2108326f50 Update to 3.12.11 2025-06-04 13:41:02 +02:00
Charalampos Stratakis
3a160e8114 Fix PySSL_SetError handling SSL_ERROR_SYSCALL
This fixes random flakiness of test_ssl on stressed machines
2025-05-13 01:48:23 +02:00
Charalampos Stratakis
8b88d87c44 Add perf to the testing BuildRequires
Perf profiling showing the Python functions is only
supported on x86_64 and aarch64 at the moment.

Adding perf as a BuildRequires allows tests that utilize the
perf binary to run.
2025-05-13 01:46:01 +02:00
Miro Hrončok
1821cc8674 Drop requirement on python-wheel-wheel with setuptools >= 71 2025-05-06 19:12:43 +02:00
Charalampos Stratakis
6ad4282b30 Apply Intel's CET for mitigation against control-flow hijacking attacks 2025-04-23 16:19:06 +02:00
Tomáš Hrnčiar
893248a931 Regenerate patches with updated importpatches script 2025-04-17 12:02:56 +02:00
Miro Hrončok
fe206952d2 Update to 3.12.10
Patch 452 was merged upstream.
2025-04-09 09:32:57 +02:00
Charalampos Stratakis
ebed0922de Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356301
2025-04-01 01:15:52 +02:00
Miro Hrončok
5c4e561e0d Rebuilt with mpdecimal 4.0.0 2025-02-06 12:04:28 +01:00
Charalampos Stratakis
5c479251a5 Update to 3.12.9
Security fix for CVE-2025-0938

Fixes: rhbz#2343275
2025-02-04 22:58:21 +01:00
Miro Hrončok
bfa6da811b Ensure this package is built with Tk 8
- Fixes: rhbz#2337759
2025-02-03 12:13:44 +01:00
14bc169807
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:57:00 +01:00
Charalampos Stratakis
c1f875abc3 Remove redundant --with-system-ffi configure option
The option has been removed since Python 3.12

See: 25590eb5de
2025-01-23 02:02:55 +01:00
Fedora Release Engineering
bc9c975019 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:08:49 +00:00
Charalampos Stratakis
62fc5ae5ed Security fix for CVE-2024-12254
Fixes: rhbz#2330926
2024-12-08 18:44:41 +01:00
Miro Hrončok
e84b7727f4 Optimize patch 251 a tiny bit
Before:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 157 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    2000 loops, best of 5: 162 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    1000 loops, best of 5: 146 usec per loop

After:

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 75.9 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 77.1 usec per loop

    $ python3.14 -m timeit -s 'import sysconfig' 'sysconfig.get_paths()'
    5000 loops, best of 5: 76.2 usec per loop

The results are inconclusive on 3.12,
but we want the patch to be identical (if possible).

This can be shipped with the next update.
2024-12-05 12:02:54 +01:00
Charalampos Stratakis
e24cfa720b Update to 3.12.8
Security fix for CVE-2024-9287

Fixes: rhbz#2321656
2024-12-04 14:40:14 +01:00
Tomáš Hrnčiar
981784693b Update to 3.12.7 2024-10-01 17:49:05 +02:00
Tomáš Hrnčiar
4a4efadd0a Revert "Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le"
This was fixed upstream in https://github.com/python/cpython/pull/123422

This reverts commit b2d96079e9.
2024-09-09 16:37:00 +02:00
Tomáš Hrnčiar
d4fd1f4b06 Update to 3.12.6
Fixes: rhbz#2310090
2024-09-09 11:18:33 +02:00
Miro Hrončok
b2d96079e9 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:32:12 +02:00
Charalampos Stratakis
4a75a45976 Security fix for CVE-2024-8088
Fixes: rhbz#2307461
2024-08-23 14:58:55 +02:00
Tomáš Hrnčiar
6b761c505d Update to 3.12.5
Fixes: rhbz#2303159
2024-08-08 14:55:00 +02:00
Lumir Balhar
f5fd37367b Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:25:43 +02:00
Fedora Release Engineering
f5bad4d55e Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:26:43 +00:00
Tomáš Hrnčiar
69b24e3153 Update to 3.12.4 2024-06-07 11:36:14 +02:00
Miro Hrončok
7cb850e10c Skip test_gdb for now 2024-06-06 16:49:05 +02:00
Python Maint
a13c80a2a0 Build as non-main Python 2024-06-06 16:15:54 +02:00
Miro Hrončok
2f95a59112 Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-04-18 01:44:36 +02:00
Tomáš Hrnčiar
7b3b8ccc6d Update to 3.12.3 2024-04-11 09:45:59 +02:00
Miro Hrončok
9c9178a72b Move all test modules to the test subpackage
- __phello__
  - _xxsubinterpreters
  - xxlimited
  - xxlimited_35
  - xxsubtype

Source: https://github.com/python/cpython/blob/v3.12.2/Tools/build/generate_stdlib_module_names.py#L23
2024-03-21 12:29:18 +01:00
Miro Hrončok
c0ffafcda5 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-21 11:58:17 +01:00
Tomáš Hrnčiar
d3e4f80070 Update to 3.12.2 2024-02-08 16:33:19 +01:00
Fedora Release Engineering
ff956d27be Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:32:50 +00:00
Fedora Release Engineering
c604248608 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:22:06 +00:00
Tomáš Hrnčiar
90929e6c2e Require python3-rpm-generators even when bootstrapping non-main Pythons 2024-01-05 11:51:54 +01:00
Lumir Balhar
7a094a0571 Security fix for CVE-2023-27043 (rhbz#2196190) 2023-12-18 13:17:51 +01:00
Miro Hrončok
3c67985ace Own stray directories in /usr/lib64/python3.12
Fixes https://bugzilla.redhat.com/2252143
2023-12-08 20:15:03 +01:00
Tomáš Hrnčiar
cc458c9fb3 Update to 3.12.1 2023-12-08 14:38:32 +01:00