Skip to content

Commit

Permalink
Update python310 to version 3.10.14 / rev 42 via SR 1161074
Browse files Browse the repository at this point in the history
https://build.opensuse.org/request/show/1161074
by user mcepl + anag+factory
- Add old-libexpat.patch making the test suite work with
  libexpat < 2.6.0 (gh#python/cpython#117187).
- Because of bsc#1189495 we have to revert use of %autopatch.
- Update 3.10.14:
  - gh-115399 & gh-115398: bundled libexpat was updated to 2.6.0
    to address CVE-2023-52425, and control of the new reparse
    deferral functionality was exposed with new APIs
    (bsc#1219559).
  - gh-109858: zipfile is now protected from the “quoted-overlap”
    zipbomb to address CVE-2024-0450. It now raises BadZipFile
    when attempting to read an entry that overlaps with another
    entry or central directory. (bsc#1221854)
  - gh-91133: tempfile.TemporaryDirectory cleanup no longer
    dereferences symlinks when working around file system
    permission errors to address CVE-2023-6597 (bsc#1219666)
  • Loading branch information
mcepl authored and bmwiedemann committed Mar 26, 2024
1 parent 3f20224 commit 09fd7b1
Show file tree
Hide file tree
Showing 16 changed files with 935 additions and 478 deletions.
Binary file modified packages/p/python310/.files
Binary file not shown.
47 changes: 47 additions & 0 deletions packages/p/python310/.rev
Expand Up @@ -743,4 +743,51 @@
<comment>Automatic submission by obs-autosubmit</comment>
<requestid>1157645</requestid>
</revision>
<revision rev="42" vrev="1">
<srcmd5>a94a27bdf246c590f61faba46101ca60</srcmd5>
<version>3.10.14</version>
<time>1711477482</time>
<user>anag+factory</user>
<comment>- Add old-libexpat.patch making the test suite work with
libexpat &lt; 2.6.0 (gh#python/cpython#117187).
- Because of bsc#1189495 we have to revert use of %autopatch.
- Update 3.10.14:
- gh-115399 &amp; gh-115398: bundled libexpat was updated to 2.6.0
to address CVE-2023-52425, and control of the new reparse
deferral functionality was exposed with new APIs
(bsc#1219559).
- gh-109858: zipfile is now protected from the “quoted-overlap”
zipbomb to address CVE-2024-0450. It now raises BadZipFile
when attempting to read an entry that overlaps with another
entry or central directory. (bsc#1221854)
- gh-91133: tempfile.TemporaryDirectory cleanup no longer
dereferences symlinks when working around file system
permission errors to address CVE-2023-6597 (bsc#1219666)
- gh-115197: urllib.request no longer resolves the hostname
before checking it against the system’s proxy bypass list on
macOS and Windows
- gh-81194: a crash in socket.if_indextoname() with a specific
value (UINT_MAX) was fixed. Relatedly, an integer overflow in
socket.if_indextoname() on 64-bit non-Windows platforms was
fixed
- gh-113659: .pth files with names starting with a dot or
containing the hidden file attribute are now skipped
- gh-102388: iso2022_jp_3 and iso2022_jp_2004 codecs no longer
read out of bounds
- gh-114572: ssl.SSLContext.cert_store_stats() and
ssl.SSLContext.get_ca_certs() now correctly lock access to
the certificate store, when the ssl.SSLContext is shared
across multiple threads
- Remove upstreamed patches:
- CVE-2023-6597-TempDir-cleaning-symlink.patch
- libexpat260.patch
- Readjust patches:
- F00251-change-user-install-location.patch
- fix_configure_rst.patch
- python-3.3.0b1-localpath.patch
- skip-test_pyobject_freed_is_freed.patch
- Port to %autosetup and %autopatch.
</comment>
<requestid>1161074</requestid>
</revision>
</revisionlist>
191 changes: 0 additions & 191 deletions packages/p/python310/CVE-2023-6597-TempDir-cleaning-symlink.patch

This file was deleted.

Expand Up @@ -39,7 +39,7 @@ Fedora Change: https://fedoraproject.org/wiki/Changes/Making_sudo_pip_safe
if self.exec_prefix is None:
--- a/Lib/site.py
+++ b/Lib/site.py
@@ -380,8 +380,15 @@ def getsitepackages(prefixes=None):
@@ -390,8 +390,15 @@ def getsitepackages(prefixes=None):
return sitepackages

def addsitepackages(known_paths, prefixes=None):
Expand Down
1 change: 0 additions & 1 deletion packages/p/python310/Python-3.10.13.tar.xz

This file was deleted.

16 changes: 0 additions & 16 deletions packages/p/python310/Python-3.10.13.tar.xz.asc

This file was deleted.

1 change: 1 addition & 0 deletions packages/p/python310/Python-3.10.14.tar.xz
16 changes: 16 additions & 0 deletions packages/p/python310/Python-3.10.14.tar.xz.asc
@@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----
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=9/7V
-----END PGP SIGNATURE-----
14 changes: 5 additions & 9 deletions packages/p/python310/fix_configure_rst.patch
Expand Up @@ -3,10 +3,8 @@
Misc/NEWS | 2 +-
2 files changed, 1 insertion(+), 4 deletions(-)

Index: Python-3.10.12/Doc/using/configure.rst
===================================================================
--- Python-3.10.12.orig/Doc/using/configure.rst
+++ Python-3.10.12/Doc/using/configure.rst
--- a/Doc/using/configure.rst
+++ b/Doc/using/configure.rst
@@ -42,7 +42,6 @@ General Options

See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
Expand All @@ -29,11 +27,9 @@ Index: Python-3.10.12/Doc/using/configure.rst
.. cmdoption:: --enable-framework=INSTALLDIR

Create a Python.framework rather than a traditional Unix install. Optional
Index: Python-3.10.12/Misc/NEWS
===================================================================
--- Python-3.10.12.orig/Misc/NEWS
+++ Python-3.10.12/Misc/NEWS
@@ -3618,7 +3618,7 @@ C API
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -3731,7 +3731,7 @@ C API
-----

- bpo-43795: The list in :ref:`stable-abi-list` now shows the public name
Expand Down

0 comments on commit 09fd7b1

Please sign in to comment.