Commit graph

601 commits

Author SHA1 Message Date
Miro Hrončok
b8f7f2f8f1 Conditionalize python3-devel runtime dependencies on RPM packages
Installing python3-devel currently brings in many RPM-related packages.

For somebody who needs python3-devel to build extension modules,
those are all useless, so we conditionalize it on rpm-build.

(cherry picked from commit e9ba67b74b9849d00cfc8e332b711db142dfd3e3)
2025-11-27 20:08:55 +01:00
Tomas Orsava
c03d34a103 Move _sysconfigdata_dm_linux*.py to the debug subpackage
(cherry picked from python3.10 commit 55d25b67d6153038b462d312e40c083d965ed5dc)
2025-11-27 20:08:55 +01:00
Miro Hrončok
7b13c3ecf0 On Fedora 44+, split this package into multiple subpackages
python3.9 and python3.6 were the only remaining Pythons that are "flatpackaged".

As they are likely to stay around for a while,
it makes no sense to wait this out (like we did with e.g. 3.7 and 3.8).

This (together with similar change in python3.9)
will make all the packaged Pythons packaged in the same way.

Additionally, this also enables the debug build, which was added to CI.

See https://src.fedoraproject.org/rpms/python3.9/c/7a81f94ccc

Assisted-By: Cursor 2.0.38 with gpt-5
2025-11-27 20:08:55 +01:00
Miro Hrončok
5d945b7395 Inject SBOM into the installed wheels 2025-09-05 13:30:22 +02:00
Lumir Balhar
39181c1766 Security fix for CVE-2025-8194 2025-08-11 16:55:16 +00:00
Lukáš Zachar
78ecfade39 Drop STI and use tmt instead
Resolve: rhbz#2383061
2025-08-11 12:32:41 +02:00
Fedora Release Engineering
abe83deb5c Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:35 +00:00
Miro Hrončok
b9056bf46d Fixup patch 1 and 435 commit messages after the importpatches/exportpatches change
This fixes up 552eb34bb5
2025-07-04 12:58:04 +02:00
Lumir Balhar
47fdac4069 Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 2025-06-26 21:58:58 +02:00
Miro Hrončok
6cbf255ebe Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test
This is a first step to switch the flatpackage bcond
in order to maintain the same structure as Python 3.10+.
2025-04-24 13:48:14 +00:00
Tomáš Hrnčiar
552eb34bb5 Regenerate patches with updated importpatches script 2025-04-23 13:54:45 +02:00
Charalampos Stratakis
7021a8ec7a Fix the flakiness of test_ftplib 2025-04-16 05:05:44 +02:00
Charalampos Stratakis
428e86b010 Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356306
2025-04-01 02:48:38 +02:00
Charalampos Stratakis
5fcb85d793 Security fix CVE-2025-0938
Fixes: rhbz#2343277
2025-02-14 23:47:25 +01:00
Björn Esser
a544fb51c7
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:57:02 +01:00
Miro Hrončok
c16725b85b CI: Test tox provision with this end-of-life Python version
https://tox.wiki/en/4.23.0/faq.html#testing-end-of-life-python-versions
2025-01-31 17:23:09 +01:00
Miro Hrončok
227b325880 Ensure this package is built with Tk 8
- Fixes: rhbz#2337762
2025-01-31 15:51:17 +01:00
Fedora Release Engineering
2e3909264f Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:09:25 +00:00
Miro Hrončok
19ee6ed27b Reformat patch 446 2025-01-03 11:34:51 +01:00
Victor Stinner
e3854e3b62 Fix author 2024-12-19 14:18:09 +01:00
Victor Stinner
23474a3864 Fix compatibility with glibc 2.41 (resolve sinpi name clash) 2024-12-18 14:41:51 +01:00
Lumir Balhar
8bbf00bf46 Security fix for CVE-2024-11168 2024-11-14 12:48:30 +01:00
Lumir Balhar
3a8e45d12c Security fix for CVE-2024-9287 (rhbz#2321659) 2024-11-04 15:05:21 +01:00
Lumir Balhar
d55a5b69cb Security fix for CVE-2024-6232 (rhbz#2310092) 2024-09-05 22:22:42 +02:00
Miroslav Suchý
d25952110e convert license to SPDX
This is part of https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_4
2024-09-04 21:12:00 +02:00
Tomáš Hrnčiar
b25130dc5d Security fix for CVE-2024-6923 (rhbz#2303161) 2024-08-16 15:57:21 +02:00
Miro Hrončok
9ee03a1d19 Security fix for CVE-2024-6345 (in bundled setuptools wheel) 2024-08-01 18:59:48 +02:00
Miro Hrončok
fd37853159 Separate patches for wheel from other sources, apply them only --without rpmwheels 2024-08-01 18:52:25 +02:00
Lumir Balhar
c25545104d Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:16:32 +02:00
Fedora Release Engineering
4d20b0aadf Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:27:04 +00:00
Lumir Balhar
71a50aaed7 Security fix for CVE-2024-4032 (rhbz#2293394) 2024-07-03 11:50:34 +02:00
Lumir Balhar
ce66491a8a Security fix for CVE-2024-0450 and CVE-2023-6597 2024-05-22 15:56:41 +02:00
Miro Hrončok
c1a44dfbbd Preserve OpenSSL 3 patch authors 2024-03-26 11:06:33 +01:00
Charalampos Stratakis
bb16462457 Support OpenSSL 3
Fixes: rhbz#2254550
2024-03-25 16:28:33 +01:00
Miro Hrončok
24f0369012 Fix build on riscv64
This backports an upstream commit from Python 3.8+.

The commit adds a platform triplet for riscv64, riscv64-linux-gnu.
This equals to %{_arch}-linux%{_gnu} (the "legacy" Fedora triplet)
so no adjustments are needed to patch 00353 and/or the related parts of the spec.
2024-03-07 17:04:21 +01:00
Charalampos Stratakis
98e458e2e0 Security fix for CVE-2007-4559
Fixes: rhzb#2141080
2024-03-06 13:59:39 +01:00
Charalampos Stratakis
882b7bd781 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-28 15:41:29 +01:00
Karolina Surma
ae70f06722 Fix test_zlib with zlib-ng-compat 2024-01-29 12:17:24 +01:00
Fedora Release Engineering
9b42bb214d Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:33:50 +00:00
Fedora Release Engineering
dd9d75bd55 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:22:16 +00:00
Lumir Balhar
d048413253 Security fix for CVE-2023-27043 (rhbz#2196191) 2023-12-18 13:17:25 +01:00
Miro Hrončok
2dfbe7e5df Fix implicit-function-declarations in configure
- Fixes: rhbz#2147519
2023-11-28 15:01:38 +01:00
Charalampos Stratakis
61a82b989b Remove extra distro-applied CFLAGS passed to user-built C extensions
Only -fexceptions and -fcf-protection are preserved for binary
compatibility with user-built python C extension.

https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction
2023-08-04 17:00:47 +02:00
Fedora Release Engineering
ff2179f9fa Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 15:42:43 +00:00
Charalampos Stratakis
1fbd10cd98 Security fix for CVE-2023-24329
Resolves: rhbz#2174013
2023-05-26 02:16:15 +02:00
Fedora Release Engineering
055e00d4ab Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-20 18:45:28 +00:00
Miro Hrončok
60835d7222 Opt-out from https://fedoraproject.org/wiki/Changes/fno-omit-frame-pointer
See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/6TQYCHMX4FZLF27U5BCEC7IFV6XNBKJP/
for rationale, namely https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/message/ZVDEXGPU6JQFXB3XHYZ4IXVQNNR3YM3V/

Summary: Python is currently slower with frame pointers
due to a slowdown in _PyEval_EvalFrameDefault,
but we expect this to be solved in Python 3.12.

Tracking bugzilla: https://bugzilla.redhat.com/2158729

This change does not require a release bump.
It is only needed to be here to prevent the next builds from including frame pointers.
2023-01-11 15:47:08 +01:00
Miro Hrončok
8d2dded310 Ensure the source mtime is clamped to $SOURCE_DATE_EPOCH before bytecompilation
This is part of https://fedoraproject.org/wiki/Changes/ReproducibleBuildsClampMtimes
2023-01-03 12:37:02 +01:00
Charalampos Stratakis
7dc6fb6d8c CVE-2022-45061: CPU denial of service via inefficient IDNA decoder 2022-12-19 16:39:29 +01:00
Miro Hrončok
6d49aa0b1c CVE-2022-37454: Fix buffer overflows in _sha3 module 2022-11-10 13:59:56 +01:00