Commit graph

794 commits

Author SHA1 Message Date
Lumir Balhar
f82d8070ea Security fix for CVE-2025-12084 2026-01-14 07:09:06 +01:00
Miro Hrončok
300b96687a Inject SBOM into the installed wheels (when using the bundled ones) 2025-11-20 09:53:02 +00:00
Tomas Orsava
d76398c8f9 Move _sysconfigdata_d_linux*.py to the debug subpackage
(cherry picked from python3.10 commit 55d25b67d6153038b462d312e40c083d965ed5dc)
2025-11-10 12:12:53 +01:00
Karolina Surma
849638dd21 Update to Python 3.9.25 2025-11-03 09:30:56 +01:00
Miro Hrončok
7a81f94ccc On Fedora 44+, split this package into multiple subpackages
python3.9 and python3.6 are the only remaining Pythons that are "flatpackaged".

As they are likely to stay around for a while,
it makes no sense to wait this out (like we did with e.g. 3.7 and 3.8).

This (together with similar change in python3.6)
will make all the packaged Pythons packaged in the same way.

Additionally, this also enables the debug build, which was added to CI.
2025-10-22 13:13:21 +02:00
Karolina Surma
5d32305ea3 Update to Python 3.9.24 2025-10-10 15:35:04 +02:00
Lukáš Zachar
a718540a1c Drop STI and use tmt instead
Resolves: rhbz#2383062
2025-08-04 22:44:05 +00:00
Fedora Release Engineering
85baa2650d Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-25 11:19:42 +00:00
Miro Hrončok
218a51625a Fixup the patch 1 commit message after the importpatches/exportpatches change
This fixes up d5085b58cc + ce0a8a4ce5.
2025-06-26 13:15:55 +02:00
Tomáš Hrnčiar
ce0a8a4ce5 Update to 3.9.23 2025-06-04 13:36:59 +02:00
Miro Hrončok
38f74ff6f9 Add RPM Provides for python3.9-libs, python3.9-devel, python3.9-idle, python3.9-tkinter, python3.9-test
This is a first step to switch the flatpackage bcond
in order to maintain the same structure as Python 3.10+.
2025-04-23 13:44:23 +02:00
Tomáš Hrnčiar
d5085b58cc Regenerate patches with updated importpatches script 2025-04-17 11:37:56 +02:00
Tomáš Hrnčiar
6f034960f5 Update to 3.9.22 2025-04-09 10:21:52 +02:00
Charalampos Stratakis
b696aebe3d Properly apply exported CFLAGS for dtrace/systemtap builds
Fixes: rhbz#2356304
2025-04-01 01:52:07 +02:00
Charalampos Stratakis
e575a4e5ce Security fix for CVE-2025-0938
Fixes: rhbz#2343278
2025-02-10 23:59:20 +01:00
Miro Hrončok
eeac858b09 Ensure this package is built with Tk 8
- Fixes: rhbz#2337764
2025-02-03 12:22:30 +01:00
Björn Esser
f400b226ef
Add explicit BR: libxcrypt-devel
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
2025-02-01 19:57:05 +01:00
Fedora Release Engineering
603a075b88 Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild 2025-01-18 21:09:49 +00:00
Lumir Balhar
0a29aebca7 Update to 3.9.21
Fixes: rhbz#2321662
2024-12-03 23:05:19 +01:00
Tomáš Hrnčiar
2fef19cb00 Fix ThreadedVSOCKSocketStreamTest 2024-09-11 20:17:24 +02:00
Tomáš Hrnčiar
994b826cd1 Update to 3.9.20 2024-09-11 20:17:01 +02:00
Miro Hrončok
1f0b956059 Skip test_sendfile_close_peer_in_the_middle_of_receiving on ppc64le
Reported upstream https://github.com/python/cpython/issues/123384
Which was a duplicate of https://github.com/python/cpython/issues/120226

The test is fixed on the main branch, but skipping is easier than backporting.

The failure occurs with Kernel 6.10.x even when Python is built with an older Kernel.
By skipping the tests, we can ship a CVE fix.
2024-08-27 15:47:15 +02:00
Charalampos Stratakis
931a09385d Security fix for CVE-2024-8088
Fixes: rhbz#2307466
2024-08-23 15:17:50 +02:00
Lumir Balhar
77d7aaf42c Security fix for CVE-2024-6923 (rhbz#2303164) 2024-08-14 07:36:16 +02:00
Lumir Balhar
d6f5072e8d Security fix for CVE-2024-4032 (rhbz#2293397) 2024-08-14 07:34:35 +02:00
Lumir Balhar
b5c1ec2e2e Require systemtap-sdt-devel for sys/sdt.h 2024-07-23 13:22:18 +02:00
Fedora Release Engineering
66a8abedb7 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-19 17:27:24 +00:00
Miro Hrončok
64188e0cae Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-04-18 01:54:19 +02:00
Tomáš Hrnčiar
59b6d298e9 Update to 3.9.19 2024-03-20 13:53:11 +01:00
Tomáš Hrnčiar
37c08da35c Merge rawhide with f39 2024-03-20 13:52:24 +01:00
Charalampos Stratakis
8af0aa70c5 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-28 17:18:56 +01:00
Charalampos Stratakis
800c22e484 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-28 17:16:55 +01:00
Karolina Surma
d1898e800c Fix test_zlib with zlib-ng-compat 2024-01-29 12:07:08 +01:00
Fedora Release Engineering
53abe334d1 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:34:33 +00:00
Fedora Release Engineering
45fe9e38c3 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:22:35 +00:00
Lumir Balhar
1341447949 Security fix for CVE-2023-27043 (rhbz#2196194) 2023-12-18 13:15:55 +01:00
Miro Hrončok
d25ca05b8f Fix implicit int compiler warning in configure check for PTHREAD_SCOPE_SYSTEM
- Resolves: rhbz#2147519
2023-11-23 11:50:56 +01:00
Tomáš Hrnčiar
77e0d4f156 Update to 3.9.18 2023-08-28 16:21:38 +02:00
Charalampos Stratakis
c7a252caa8 Remove extra distro-applied CFLAGS passed to user-built C extensions
Only -fexceptions and -fcf-protection are preserved for binary
compatibility with user-built python C extension.

https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction
2023-08-04 16:28:11 +02:00
Fedora Release Engineering
7b9f870dc5 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 15:43:15 +00:00
Tomáš Hrnčiar
4b77d9d333 Update to 3.9.17 2023-06-08 11:50:59 +02:00
Miro Hrončok
721e68226e Merge rawhide and f38 back together, the content is identical 2023-06-08 11:50:28 +02:00
Charalampos Stratakis
9a234fc316 Security fix for CVE-2023-24329
Resolves: rhbz#2174016
2023-05-30 07:16:22 +02:00
Charalampos Stratakis
1d79558046 Security fix for CVE-2023-24329
Resolves: rhbz#2174016
2023-05-30 07:15:31 +02:00
Fedora Release Engineering
26dc60a272 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-20 18:45:57 +00:00
Miro Hrončok
9b71f83691 Opt-out from https://fedoraproject.org/wiki/Changes/fno-omit-frame-pointer
See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/6TQYCHMX4FZLF27U5BCEC7IFV6XNBKJP/
for rationale, namely https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/message/ZVDEXGPU6JQFXB3XHYZ4IXVQNNR3YM3V/

Summary: Python is currently slower with frame pointers
due to a slowdown in _PyEval_EvalFrameDefault,
but we expect this to be solved in Python 3.12.

Tracking bugzilla: https://bugzilla.redhat.com/2158729

This change does not require a release bump.
It is only needed to be here to prevent the next builds from including frame pointers.
2023-01-11 15:43:03 +01:00
Miro Hrončok
e8f06b736b No longer patch the default bytecode cache invalidation policy
That is, drop patch 328.

Fixes https://bugzilla.redhat.com/2133850

See also https://src.fedoraproject.org/rpms/python-rpm-macros/pull-request/154

This is part of https://fedoraproject.org/wiki/Changes/ReproducibleBuildsClampMtimes
2023-01-03 12:18:10 +01:00
Tomáš Hrnčiar
3afb626968 Update to 3.9.16 2022-12-07 10:03:57 +01:00
Miro Hrončok
66cc30cc44 Rebuilt for infrastructure problems 2022-11-17 14:47:28 +01:00
Lumir Balhar
3bae8212c1 Fix for CVE-2022-42919 2022-11-09 12:32:02 +01:00