Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package python311 for openSUSE:Factory 
checked in at 2025-11-24 14:05:14
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python311 (Old)
 and      /work/SRC/openSUSE:Factory/.python311.new.14147 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python311"

Mon Nov 24 14:05:14 2025 rev:61 rq:1318940 version:3.11.14

Changes:
--------
--- /work/SRC/openSUSE:Factory/python311/python311.changes      2025-10-17 
17:25:30.909316926 +0200
+++ /work/SRC/openSUSE:Factory/.python311.new.14147/python311.changes   
2025-11-24 14:05:27.315866508 +0100
@@ -1,0 +2,12 @@
+Thu Nov 13 17:13:03 UTC 2025 - Matej Cepl <[email protected]>
+
+- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
+  quadratic complexity vulnerabilities of os.path.expandvars()
+  (CVE-2025-6075, bsc#1252974).
+- Readjusted patches:
+  - CVE-2023-52425-libexpat-2.6.0-backport.patch
+  - CVE-2023-52425-remove-reparse_deferral-tests.patch
+  - fix_configure_rst.patch
+  - skip_if_buildbot-extend.patch
+
+-------------------------------------------------------------------
@@ -8 +20,2 @@
-      if there are no bytes prepended to the ZIP file.
+      if there are no bytes prepended to the ZIP file
+      (CVE-2025-8291, bsc#1251305).

New:
----
  CVE-2025-6075-expandvars-perf-degrad.patch
  _scmsync.obsinfo
  build.specials.obscpio

----------(New B)----------
  New:
- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
----------(New E)----------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python311.spec ++++++
--- /var/tmp/diff_new_pack.YYmXcA/_old  2025-11-24 14:05:29.215946336 +0100
+++ /var/tmp/diff_new_pack.YYmXcA/_new  2025-11-24 14:05:29.219946504 +0100
@@ -188,6 +188,9 @@
 Patch24:        add-loongarch64-support.patch
 # PATCH-FIX-OPENSUSE gh139257-Support-docutils-0.22.patch 
gh#python/cpython#139257 [email protected]
 Patch25:        gh139257-Support-docutils-0.22.patch
+# PATCH-FIX-UPSTREAM CVE-2025-6075-expandvars-perf-degrad.patch bsc#1252974 
[email protected]
+# Avoid potential quadratic complexity vulnerabilities in path modules
+Patch26:        CVE-2025-6075-expandvars-perf-degrad.patch
 BuildRequires:  autoconf-archive
 BuildRequires:  automake
 BuildRequires:  crypto-policies-scripts

++++++ CVE-2023-52425-libexpat-2.6.0-backport.patch ++++++
--- /var/tmp/diff_new_pack.YYmXcA/_old  2025-11-24 14:05:29.251947848 +0100
+++ /var/tmp/diff_new_pack.YYmXcA/_new  2025-11-24 14:05:29.255948017 +0100
@@ -6,10 +6,10 @@
  Lib/test/test_xml_etree.py   |   12 ------------
  5 files changed, 37 insertions(+), 44 deletions(-)
 
-Index: Python-3.11.12/Lib/test/support/__init__.py
+Index: Python-3.11.14/Lib/test/support/__init__.py
 ===================================================================
---- Python-3.11.12.orig/Lib/test/support/__init__.py   2025-04-11 
10:52:43.191010503 +0200
-+++ Python-3.11.12/Lib/test/support/__init__.py        2025-04-11 
10:52:44.802161741 +0200
+--- Python-3.11.14.orig/Lib/test/support/__init__.py   2025-11-15 
19:15:08.449938538 +0100
++++ Python-3.11.14/Lib/test/support/__init__.py        2025-11-15 
19:15:12.859120260 +0100
 @@ -8,6 +8,7 @@
  import functools
  import os
@@ -27,7 +27,7 @@
      ]
  
  
-@@ -2244,6 +2245,17 @@
+@@ -2279,6 +2280,17 @@
          }
      return ignored
  
@@ -46,10 +46,10 @@
 +fails_with_expat_2_6_0 = (unittest.expectedFailure
 +                          if is_expat_2_6_0
 +                          else lambda test: test)
-Index: Python-3.11.12/Lib/test/test_minidom.py
+Index: Python-3.11.14/Lib/test/test_minidom.py
 ===================================================================
---- Python-3.11.12.orig/Lib/test/test_minidom.py       2025-04-11 
10:52:21.907086938 +0200
-+++ Python-3.11.12/Lib/test/test_minidom.py    2025-04-11 10:52:44.802522893 
+0200
+--- Python-3.11.14.orig/Lib/test/test_minidom.py       2025-11-15 
19:14:53.915952608 +0100
++++ Python-3.11.14/Lib/test/test_minidom.py    2025-11-15 19:15:12.859877278 
+0100
 @@ -6,7 +6,6 @@
  from test import support
  import unittest
@@ -94,10 +94,10 @@
              parseString('<element xmlns:abc="http:abc.com/de f g/hi/j 
k"><abc:foo /></element>')
  
      def testDocRemoveChild(self):
-Index: Python-3.11.12/Lib/test/test_pyexpat.py
+Index: Python-3.11.14/Lib/test/test_pyexpat.py
 ===================================================================
---- Python-3.11.12.orig/Lib/test/test_pyexpat.py       2025-04-11 
10:52:22.076696906 +0200
-+++ Python-3.11.12/Lib/test/test_pyexpat.py    2025-04-11 10:52:44.803228085 
+0200
+--- Python-3.11.14.orig/Lib/test/test_pyexpat.py       2025-11-15 
19:14:53.915952608 +0100
++++ Python-3.11.14/Lib/test/test_pyexpat.py    2025-11-15 19:15:12.860334045 
+0100
 @@ -14,8 +14,7 @@
  from xml.parsers import expat
  from xml.parsers.expat import errors
@@ -108,7 +108,7 @@
  
  class SetAttributeTest(unittest.TestCase):
      def setUp(self):
-@@ -770,9 +769,8 @@
+@@ -806,9 +805,8 @@
          self.assertIs(parser.GetReparseDeferralEnabled(), enabled)
  
      def test_reparse_deferral_enabled(self):
@@ -120,7 +120,7 @@
  
          started = []
  
-@@ -801,9 +799,9 @@
+@@ -837,9 +835,9 @@
  
          parser = expat.ParserCreate()
          parser.StartElementHandler = start_element
@@ -132,10 +132,10 @@
  
          for chunk in (b'<doc', b'/>'):
              parser.Parse(chunk, False)
-Index: Python-3.11.12/Lib/test/test_sax.py
+Index: Python-3.11.14/Lib/test/test_sax.py
 ===================================================================
---- Python-3.11.12.orig/Lib/test/test_sax.py   2025-04-11 10:52:22.111440337 
+0200
-+++ Python-3.11.12/Lib/test/test_sax.py        2025-04-11 10:52:44.803567098 
+0200
+--- Python-3.11.14.orig/Lib/test/test_sax.py   2025-11-15 19:14:53.915952608 
+0100
++++ Python-3.11.14/Lib/test/test_sax.py        2025-11-15 19:15:12.860746114 
+0100
 @@ -19,13 +19,11 @@
  from io import BytesIO, StringIO
  import codecs
@@ -187,10 +187,10 @@
  
          self.assertFalse(parser._parser.GetReparseDeferralEnabled())
  
-Index: Python-3.11.12/Lib/test/test_xml_etree.py
+Index: Python-3.11.14/Lib/test/test_xml_etree.py
 ===================================================================
---- Python-3.11.12.orig/Lib/test/test_xml_etree.py     2025-04-11 
10:52:22.425637912 +0200
-+++ Python-3.11.12/Lib/test/test_xml_etree.py  2025-04-11 10:52:44.804234785 
+0200
+--- Python-3.11.14.orig/Lib/test/test_xml_etree.py     2025-11-15 
19:14:53.915952608 +0100
++++ Python-3.11.14/Lib/test/test_xml_etree.py  2025-11-15 19:15:12.861491049 
+0100
 @@ -13,7 +13,6 @@
  import operator
  import os

++++++ CVE-2023-52425-remove-reparse_deferral-tests.patch ++++++
--- /var/tmp/diff_new_pack.YYmXcA/_old  2025-11-24 14:05:29.275948857 +0100
+++ /var/tmp/diff_new_pack.YYmXcA/_new  2025-11-24 14:05:29.279949025 +0100
@@ -4,9 +4,11 @@
  Lib/test/test_xml_etree.py |    2 ++
  3 files changed, 6 insertions(+)
 
---- a/Lib/test/test_pyexpat.py
-+++ b/Lib/test/test_pyexpat.py
-@@ -768,6 +768,7 @@ class ReparseDeferralTest(unittest.TestC
+Index: Python-3.11.14/Lib/test/test_pyexpat.py
+===================================================================
+--- Python-3.11.14.orig/Lib/test/test_pyexpat.py       2025-11-15 
19:15:12.860334045 +0100
++++ Python-3.11.14/Lib/test/test_pyexpat.py    2025-11-15 19:15:15.541090355 
+0100
+@@ -804,6 +804,7 @@
          parser.SetReparseDeferralEnabled(True)
          self.assertIs(parser.GetReparseDeferralEnabled(), enabled)
  
@@ -14,7 +16,7 @@
      def test_reparse_deferral_enabled(self):
          if not is_expat_2_6_0:
              self.skipTest("Linked libexpat doesn't support reparse deferral")
-@@ -791,6 +792,7 @@ class ReparseDeferralTest(unittest.TestC
+@@ -827,6 +828,7 @@
  
          self.assertEqual(started, ['doc'])
  
@@ -22,9 +24,11 @@
      def test_reparse_deferral_disabled(self):
          started = []
  
---- a/Lib/test/test_sax.py
-+++ b/Lib/test/test_sax.py
-@@ -1213,6 +1213,7 @@ class ExpatReaderTest(XmlTestBase):
+Index: Python-3.11.14/Lib/test/test_sax.py
+===================================================================
+--- Python-3.11.14.orig/Lib/test/test_sax.py   2025-11-15 19:15:12.860746114 
+0100
++++ Python-3.11.14/Lib/test/test_sax.py        2025-11-15 19:15:15.541608234 
+0100
+@@ -1213,6 +1213,7 @@
  
          self.assertEqual(result.getvalue(), start + b"<doc>text</doc>")
  
@@ -32,7 +36,7 @@
      def test_flush_reparse_deferral_enabled(self):
          if not is_expat_2_6_0:
              self.skipTest("Linked libexpat doesn't support reparse deferral")
-@@ -1238,6 +1239,7 @@ class ExpatReaderTest(XmlTestBase):
+@@ -1238,6 +1239,7 @@
  
          self.assertEqual(result.getvalue(), start + b"<doc></doc>")
  
@@ -40,9 +44,11 @@
      def test_flush_reparse_deferral_disabled(self):
          if not is_expat_2_6_0:
              self.skipTest("Linked libexpat doesn't support reparse deferral")
---- a/Lib/test/test_xml_etree.py
-+++ b/Lib/test/test_xml_etree.py
-@@ -1620,6 +1620,7 @@ class XMLPullParserTest(unittest.TestCas
+Index: Python-3.11.14/Lib/test/test_xml_etree.py
+===================================================================
+--- Python-3.11.14.orig/Lib/test/test_xml_etree.py     2025-11-15 
19:15:12.861491049 +0100
++++ Python-3.11.14/Lib/test/test_xml_etree.py  2025-11-15 19:15:15.542327817 
+0100
+@@ -1620,6 +1620,7 @@
          with self.assertRaises(ValueError):
              ET.XMLPullParser(events=('start', 'end', 'bogus'))
  
@@ -50,7 +56,7 @@
      def test_flush_reparse_deferral_enabled(self):
          parser = ET.XMLPullParser(events=('start', 'end'))
  
-@@ -1641,6 +1642,7 @@ class XMLPullParserTest(unittest.TestCas
+@@ -1641,6 +1642,7 @@
  
          self.assert_event_tags(parser, [('end', 'doc')])
  

++++++ CVE-2025-6075-expandvars-perf-degrad.patch ++++++
>From e717839989908ecea9c1c8f3bd17ec9fb1ac8963 Mon Sep 17 00:00:00 2001
From: Serhiy Storchaka <[email protected]>
Date: Fri, 31 Oct 2025 15:49:51 +0200
Subject: [PATCH] [3.11] gh-136065: Fix quadratic complexity in
 os.path.expandvars() (GH-134952) (cherry picked from commit
 f029e8db626ddc6e3a3beea4eff511a71aaceb5c)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Serhiy Storchaka <[email protected]>
Co-authored-by: Ɓukasz Langa <[email protected]>
---
 Lib/ntpath.py                                                            |  
126 +++-------
 Lib/posixpath.py                                                         |   
43 +--
 Lib/test/test_genericpath.py                                             |   
14 +
 Lib/test/test_ntpath.py                                                  |   
22 +
 Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst |    
1 
 5 files changed, 94 insertions(+), 112 deletions(-)
 create mode 100644 
Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst

Index: Python-3.11.14/Lib/ntpath.py
===================================================================
--- Python-3.11.14.orig/Lib/ntpath.py   2025-11-15 19:14:27.424009612 +0100
+++ Python-3.11.14/Lib/ntpath.py        2025-11-15 19:14:41.389069009 +0100
@@ -378,17 +378,23 @@
 # XXX With COMMAND.COM you can use any characters in a variable name,
 # XXX except '^|<>='.
 
+_varpattern = r"'[^']*'?|%(%|[^%]*%?)|\$(\$|[-\w]+|\{[^}]*\}?)"
+_varsub = None
+_varsubb = None
+
 def expandvars(path):
     """Expand shell variables of the forms $var, ${var} and %var%.
 
     Unknown variables are left unchanged."""
     path = os.fspath(path)
+    global _varsub, _varsubb
     if isinstance(path, bytes):
         if b'$' not in path and b'%' not in path:
             return path
-        import string
-        varchars = bytes(string.ascii_letters + string.digits + '_-', 'ascii')
-        quote = b'\''
+        if not _varsubb:
+            import re
+            _varsubb = re.compile(_varpattern.encode(), re.ASCII).sub
+        sub = _varsubb
         percent = b'%'
         brace = b'{'
         rbrace = b'}'
@@ -397,94 +403,44 @@
     else:
         if '$' not in path and '%' not in path:
             return path
-        import string
-        varchars = string.ascii_letters + string.digits + '_-'
-        quote = '\''
+        if not _varsub:
+            import re
+            _varsub = re.compile(_varpattern, re.ASCII).sub
+        sub = _varsub
         percent = '%'
         brace = '{'
         rbrace = '}'
         dollar = '$'
         environ = os.environ
-    res = path[:0]
-    index = 0
-    pathlen = len(path)
-    while index < pathlen:
-        c = path[index:index+1]
-        if c == quote:   # no expansion within single quotes
-            path = path[index + 1:]
-            pathlen = len(path)
-            try:
-                index = path.index(c)
-                res += c + path[:index + 1]
-            except ValueError:
-                res += c + path
-                index = pathlen - 1
-        elif c == percent:  # variable or '%'
-            if path[index + 1:index + 2] == percent:
-                res += c
-                index += 1
-            else:
-                path = path[index+1:]
-                pathlen = len(path)
-                try:
-                    index = path.index(percent)
-                except ValueError:
-                    res += percent + path
-                    index = pathlen - 1
-                else:
-                    var = path[:index]
-                    try:
-                        if environ is None:
-                            value = os.fsencode(os.environ[os.fsdecode(var)])
-                        else:
-                            value = environ[var]
-                    except KeyError:
-                        value = percent + var + percent
-                    res += value
-        elif c == dollar:  # variable or '$$'
-            if path[index + 1:index + 2] == dollar:
-                res += c
-                index += 1
-            elif path[index + 1:index + 2] == brace:
-                path = path[index+2:]
-                pathlen = len(path)
-                try:
-                    index = path.index(rbrace)
-                except ValueError:
-                    res += dollar + brace + path
-                    index = pathlen - 1
-                else:
-                    var = path[:index]
-                    try:
-                        if environ is None:
-                            value = os.fsencode(os.environ[os.fsdecode(var)])
-                        else:
-                            value = environ[var]
-                    except KeyError:
-                        value = dollar + brace + var + rbrace
-                    res += value
-            else:
-                var = path[:0]
-                index += 1
-                c = path[index:index + 1]
-                while c and c in varchars:
-                    var += c
-                    index += 1
-                    c = path[index:index + 1]
-                try:
-                    if environ is None:
-                        value = os.fsencode(os.environ[os.fsdecode(var)])
-                    else:
-                        value = environ[var]
-                except KeyError:
-                    value = dollar + var
-                res += value
-                if c:
-                    index -= 1
+
+    def repl(m):
+        lastindex = m.lastindex
+        if lastindex is None:
+            return m[0]
+        name = m[lastindex]
+        if lastindex == 1:
+            if name == percent:
+                return name
+            if not name.endswith(percent):
+                return m[0]
+            name = name[:-1]
         else:
-            res += c
-        index += 1
-    return res
+            if name == dollar:
+                return name
+            if name.startswith(brace):
+                if not name.endswith(rbrace):
+                    return m[0]
+                name = name[1:-1]
+
+        try:
+            if environ is None:
+                return os.fsencode(os.environ[os.fsdecode(name)])
+            else:
+                return environ[name]
+        except KeyError:
+            return m[0]
+
+    return sub(repl, path)
 
 
 # Normalize a path, e.g. A//B, A/./B and A/foo/../B all become A\B.
Index: Python-3.11.14/Lib/posixpath.py
===================================================================
--- Python-3.11.14.orig/Lib/posixpath.py        2025-11-15 19:14:27.465471369 
+0100
+++ Python-3.11.14/Lib/posixpath.py     2025-11-15 19:14:41.389334199 +0100
@@ -287,42 +287,41 @@
 # This expands the forms $variable and ${variable} only.
 # Non-existent variables are left unchanged.
 
-_varprog = None
-_varprogb = None
+_varpattern = r'\$(\w+|\{[^}]*\}?)'
+_varsub = None
+_varsubb = None
 
 def expandvars(path):
     """Expand shell variables of form $var and ${var}.  Unknown variables
     are left unchanged."""
     path = os.fspath(path)
-    global _varprog, _varprogb
+    global _varsub, _varsubb
     if isinstance(path, bytes):
         if b'$' not in path:
             return path
-        if not _varprogb:
+        if not _varsubb:
             import re
-            _varprogb = re.compile(br'\$(\w+|\{[^}]*\})', re.ASCII)
-        search = _varprogb.search
+            _varsubb = re.compile(_varpattern.encode(), re.ASCII).sub
+        sub = _varsubb
         start = b'{'
         end = b'}'
         environ = getattr(os, 'environb', None)
     else:
         if '$' not in path:
             return path
-        if not _varprog:
+        if not _varsub:
             import re
-            _varprog = re.compile(r'\$(\w+|\{[^}]*\})', re.ASCII)
-        search = _varprog.search
+            _varsub = re.compile(_varpattern, re.ASCII).sub
+        sub = _varsub
         start = '{'
         end = '}'
         environ = os.environ
-    i = 0
-    while True:
-        m = search(path, i)
-        if not m:
-            break
-        i, j = m.span(0)
-        name = m.group(1)
-        if name.startswith(start) and name.endswith(end):
+
+    def repl(m):
+        name = m[1]
+        if name.startswith(start):
+            if not name.endswith(end):
+                return m[0]
             name = name[1:-1]
         try:
             if environ is None:
@@ -330,13 +329,11 @@
             else:
                 value = environ[name]
         except KeyError:
-            i = j
+            return m[0]
         else:
-            tail = path[j:]
-            path = path[:i] + value
-            i = len(path)
-            path += tail
-    return path
+            return value
+
+    return sub(repl, path)
 
 
 # Normalize a path, e.g. A//B, A/./B and A/foo/../B all become A/B.
Index: Python-3.11.14/Lib/test/test_genericpath.py
===================================================================
--- Python-3.11.14.orig/Lib/test/test_genericpath.py    2025-11-15 
19:14:28.470950071 +0100
+++ Python-3.11.14/Lib/test/test_genericpath.py 2025-11-15 19:14:41.389533528 
+0100
@@ -7,6 +7,7 @@
 import sys
 import unittest
 import warnings
+from test import support
 from test.support import is_emscripten
 from test.support import os_helper
 from test.support import warnings_helper
@@ -434,6 +435,19 @@
                   os.fsencode('$bar%s bar' % nonascii))
             check(b'$spam}bar', os.fsencode('%s}bar' % nonascii))
 
+    @support.requires_resource('cpu')
+    def test_expandvars_large(self):
+        expandvars = self.pathmodule.expandvars
+        with os_helper.EnvironmentVarGuard() as env:
+            env.clear()
+            env["A"] = "B"
+            n = 100_000
+            self.assertEqual(expandvars('$A'*n), 'B'*n)
+            self.assertEqual(expandvars('${A}'*n), 'B'*n)
+            self.assertEqual(expandvars('$A!'*n), 'B!'*n)
+            self.assertEqual(expandvars('${A}A'*n), 'BA'*n)
+            self.assertEqual(expandvars('${'*10*n), '${'*10*n)
+
     def test_abspath(self):
         self.assertIn("foo", self.pathmodule.abspath("foo"))
         with warnings.catch_warnings():
Index: Python-3.11.14/Lib/test/test_ntpath.py
===================================================================
--- Python-3.11.14.orig/Lib/test/test_ntpath.py 2025-11-15 19:14:29.042372971 
+0100
+++ Python-3.11.14/Lib/test/test_ntpath.py      2025-11-15 19:14:41.389799697 
+0100
@@ -6,8 +6,8 @@
 import unittest
 import warnings
 from ntpath import ALLOW_MISSING
-from test.support import os_helper
-from test.support import TestFailed, is_emscripten
+from test import support
+from test.support import os_helper, is_emscripten
 from test.support.os_helper import FakePath
 from test import test_genericpath
 from tempfile import TemporaryFile
@@ -57,7 +57,7 @@
     fn = fn.replace("\\", "\\\\")
     gotResult = eval(fn)
     if wantResult != gotResult and _norm(wantResult) != _norm(gotResult):
-        raise TestFailed("%s should return: %s but returned: %s" \
+        raise support.TestFailed("%s should return: %s but returned: %s" \
               %(str(fn), str(wantResult), str(gotResult)))
 
     # then with bytes
@@ -73,7 +73,7 @@
         warnings.simplefilter("ignore", DeprecationWarning)
         gotResult = eval(fn)
     if _norm(wantResult) != _norm(gotResult):
-        raise TestFailed("%s should return: %s but returned: %s" \
+        raise support.TestFailed("%s should return: %s but returned: %s" \
               %(str(fn), str(wantResult), repr(gotResult)))
 
 
@@ -820,6 +820,19 @@
             check('%spam%bar', '%sbar' % nonascii)
             check('%{}%bar'.format(nonascii), 'ham%sbar' % nonascii)
 
+    @support.requires_resource('cpu')
+    def test_expandvars_large(self):
+        expandvars = ntpath.expandvars
+        with os_helper.EnvironmentVarGuard() as env:
+            env.clear()
+            env["A"] = "B"
+            n = 100_000
+            self.assertEqual(expandvars('%A%'*n), 'B'*n)
+            self.assertEqual(expandvars('%A%A'*n), 'BA'*n)
+            self.assertEqual(expandvars("''"*n + '%%'), "''"*n + '%')
+            self.assertEqual(expandvars("%%"*n), "%"*n)
+            self.assertEqual(expandvars("$$"*n), "$"*n)
+
     def test_expanduser(self):
         tester('ntpath.expanduser("test")', 'test')
 
@@ -1090,6 +1103,7 @@
             self.assertIsInstance(b_final_path, bytes)
             self.assertGreater(len(b_final_path), 0)
 
+
 class NtCommonTest(test_genericpath.CommonTest, unittest.TestCase):
     pathmodule = ntpath
     attributes = ['relpath']
Index: 
Python-3.11.14/Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst
===================================================================
--- /dev/null   1970-01-01 00:00:00.000000000 +0000
+++ 
Python-3.11.14/Misc/NEWS.d/next/Security/2025-05-30-22-33-27.gh-issue-136065.bu337o.rst
     2025-11-15 19:14:41.390091148 +0100
@@ -0,0 +1 @@
+Fix quadratic complexity in :func:`os.path.expandvars`.

++++++ _scmsync.obsinfo ++++++
mtime: 1763676995
commit: 48953809e458d0c5b4092d0c4594af8e2f98f49dfce8800edac9b7f0c6fdf334
url: https://src.opensuse.org/python-interpreters/python311.git
revision: 48953809e458d0c5b4092d0c4594af8e2f98f49dfce8800edac9b7f0c6fdf334
projectscmsync: https://src.opensuse.org/python-interpreters/_ObsPrj

++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore      1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore      2025-11-20 23:17:11.000000000 +0100
@@ -0,0 +1 @@
+.osc

++++++ fix_configure_rst.patch ++++++
--- /var/tmp/diff_new_pack.YYmXcA/_old  2025-11-24 14:05:29.499958268 +0100
+++ /var/tmp/diff_new_pack.YYmXcA/_new  2025-11-24 14:05:29.503958436 +0100
@@ -3,9 +3,11 @@
  Misc/NEWS               |    2 +-
  2 files changed, 1 insertion(+), 4 deletions(-)
 
---- a/Doc/using/configure.rst
-+++ b/Doc/using/configure.rst
-@@ -43,7 +43,6 @@ General Options
+Index: Python-3.11.14/Doc/using/configure.rst
+===================================================================
+--- Python-3.11.14.orig/Doc/using/configure.rst        2025-11-15 
19:14:54.096952433 +0100
++++ Python-3.11.14/Doc/using/configure.rst     2025-11-15 19:15:04.439920979 
+0100
+@@ -43,7 +43,6 @@
  
     See :data:`sys.int_info.bits_per_digit <sys.int_info>`.
  
@@ -13,7 +15,7 @@
  .. option:: --with-cxx-main=COMPILER
  
     Compile the Python ``main()`` function and link Python executable with C++
-@@ -529,13 +528,11 @@ macOS Options
+@@ -529,13 +528,11 @@
  
  See ``Mac/README.rst``.
  
@@ -27,9 +29,11 @@
  .. option:: --enable-framework=INSTALLDIR
  
     Create a Python.framework rather than a traditional Unix install. Optional
---- a/Misc/NEWS
-+++ b/Misc/NEWS
-@@ -9911,7 +9911,7 @@ C API
+Index: Python-3.11.14/Misc/NEWS
+===================================================================
+--- Python-3.11.14.orig/Misc/NEWS      2025-11-15 19:14:54.096952433 +0100
++++ Python-3.11.14/Misc/NEWS   2025-11-15 19:15:04.445942414 +0100
+@@ -9987,7 +9987,7 @@
  - bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
  
  - bpo-43795: The list in :ref:`limited-api-list` now shows the public name


++++++ skip_if_buildbot-extend.patch ++++++
--- /var/tmp/diff_new_pack.YYmXcA/_old  2025-11-24 14:05:29.639964150 +0100
+++ /var/tmp/diff_new_pack.YYmXcA/_new  2025-11-24 14:05:29.639964150 +0100
@@ -2,9 +2,11 @@
  Lib/test/support/__init__.py |    2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
---- a/Lib/test/support/__init__.py
-+++ b/Lib/test/support/__init__.py
-@@ -384,7 +384,7 @@ def skip_if_buildbot(reason=None):
+Index: Python-3.11.14/Lib/test/support/__init__.py
+===================================================================
+--- Python-3.11.14.orig/Lib/test/support/__init__.py   2025-11-15 
19:14:54.049952478 +0100
++++ Python-3.11.14/Lib/test/support/__init__.py        2025-11-15 
19:15:08.449938538 +0100
+@@ -394,7 +394,7 @@
      if not reason:
          reason = 'not suitable for buildbots'
      try:

Reply via email to