Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python311 for openSUSE:Factory checked in at 2026-09-11 18:59:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python311 (Old) and /work/SRC/openSUSE:Factory/.python311.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python311" Fri Sep 11 18:59:54 2026 rev:73 rq:1376615 version:3.11.16 Changes: -------- --- /work/SRC/openSUSE:Factory/python311/python311.changes 2026-08-15 22:40:52.574114585 +0200 +++ /work/SRC/openSUSE:Factory/.python311.new.1265/python311.changes 2026-09-11 19:00:07.746612212 +0200 @@ -1,0 +2,167 @@ +Fri Sep 4 20:24:11 UTC 2026 - Matej Cepl <[email protected]> + +- Update to 3.11.16: + - Build + - gh-153438: Update Windows build and installer tooling and + documentation to use the current download URL for + nuget.exe. + - Library + - gh-109638: Fix exponential time in csv.Sniffer.sniff() for + a sample which contains many quote characters. A doubled + quote character is now also detected in a field which + contains the delimiter or a line break. + - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for + a sample which contains quoted fields, in particular for + a single column of quoted fields. + - gh-149231: In tomllib, the number of parts in TOML keys is + now limited. + - gh-146083: Update bundled libexpat to version 2.7.5. + - gh-141707: Don’t change tarfile.TarInfo type from AREGTYPE + to DIRTYPE when parsing GNU long name or link headers + (bsc#1259611, CVE-2025-13462). + - gh-90949: Add + SetBillionLaughsAttackProtectionActivationThreshold() and + SetBillionLaughsAttackProtectionMaximumAmplification() to + xmlparser objects to tune protections against billion + laughs attacks. Patch by Bénédikt Tran. + - gh-100372: ssl.SSLContext.load_verify_locations() no longer + incorrectly accepts some cases of trailing data when + parsing DER. + - Security + - gh-155558: Update bundled libexpat to version 2.8.3 for the + fix to CVE-2026-72522. + - gh-153030: Fixed quadratic complexity in incremental + parsing of long unterminated constructs (such as tags or + comments) in html.parser.HTMLParser, which could be + exploited for a denial of service (bsc#1271192, + CVE-2026-15308). + - gh-152674: The xml.etree.ElementTree.Element methods + findall(), iterfind() and find() avoid quadratic behavior + when using XPath index predicates ([1], [last()], + [last()-N]) on XML documents with many same-tag siblings. + - gh-152216: Update bundled libexpat to version 2.8.2. + - gh-151987: The tarfile.TarFile.extract() method now applies + the given filter when it extracts a link target from the + archive as a fallback (bsc#1269959, CVE-2026-4360). + - gh-151981: In tarfile, seeking a stream now stops when end + of the stream is reached (bsc#1269788, CVE-2026-11972). + - gh-151544: Modules/Setup.local is no longer used as + a landmark to discover whether Python is running in + a source tree, as it could potentially affect actual + installs. The pybuilddir.txt file is now the sole indicator + of running in a source tree. + - gh-151558: Fixed an vulnerability in the tarfile data and + tar extraction filters where crafted archives could create + a symlink pointing outside the destination directory. This + was a bypass of CVE-2025-4330 (bsc#1268977, + CVE-2026-11940). + - gh-150599: Fix a possible stack buffer overflow in bz2 when + a bz2.BZ2Decompressor is reused after a decompression + error. The decompressor now becomes unusable after libbz2 + reports an error (bsc#1267974, CVE-2026-9669). + - gh-150743: http.client now limits the number of + chunked-response trailer lines it will read to 100, and the + number of interim (1xx) responses it will skip to 100. + A malicious or broken server could previously stream + trailer lines or 100 Continue responses forever, hanging + the client even when a socket timeout was in use. Reported + by @YLChen-007 via GHSA-w4q2-g22w-6fr4. + - gh-149698: Update bundled libexpat to version 2.8.1 for the + fix for CVE-2026-45186. + - gh-87451: The ftplib module’s undocumented ftpcp function + no longer trusts the IPv4 address value returned from the + source server in response to the PASV command by default, + completing the fix for CVE-2021-4189. As with ftplib.FTP, + the former behavior can be re-enabled by setting the + trust_server_pasv_ipv4_address attribute on the source + ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape + AI for the report (bsc#1265268, CVE-2026-8328). + - gh-149486: tarfile.data_filter() now validates link targets + using the same normalised value that is written to disk, + strips trailing separators from the member name when + resolving a symlink’s directory, and rejects link members + that would replace the destination directory itself. This + closes several path-traversal bypasses of the data + extraction filter (bsc#1267821, CVE-2026-7774). + - gh-149079: Fix a potential denial of service in + unicodedata.normalize(). The canonical ordering step of + Unicode normalization used a quadratic-time insertion sort + for reordering combining characters, which could be + exploited with crafted input containing many combining + characters in non-canonical order. Replaced with + a linear-time counting sort for long runs (bsc#1267581, + CVE-2026-3276). + - gh-149018: Improved protection against XML hash-flooding + attacks in xml.parsers.expat and xml.etree.ElementTree when + Python is compiled with libExpat 2.8.0 or later + (bsc#1264962, CVE-2026-7210). + - gh-149017: Update bundled libexpat to version 2.8.0. + - gh-148808: Added buffer boundary check when using nbytes + parameter with + asyncio.AbstractEventLoop.sock_recvfrom_into(). Only + relevant for Windows and the asyncio.ProactorEventLoop. + - gh-148395: Fix a dangling input pointer in + lzma.LZMADecompressor, and bz2.BZ2Decompressor when memory + allocation fails with MemoryError, which could let + a subsequent decompress() call read or write through + a stale pointer to the already-released caller buffer + (bsc#1262098, CVE-2026-6100). + - gh-148169: A bypass in webbrowser allowed URLs prefixed + with %action to pass the dash-prefix safety check + (bsc#1262319, CVE-2026-4786). + - gh-146581: Fix vulnerability in shutil.unpack_archive() for + ZIP files on Windows which allowed to write files outside + of the destination tree if the patch in the archive + contains a Windows drive prefix. Now such invalid paths + will be skipped. Files containing “..” in the name (like + “foo..bar”) are no longer skipped. + - gh-146333: Fix quadratic backtracking in + configparser.RawConfigParser option parsing regexes (OPTCRE + and OPTCRE_NV). A crafted configuration line with many + whitespace characters could cause excessive CPU usage. + - gh-146211: Reject CR/LF characters in tunnel request + headers for the HTTPConnection.set_tunnel() method + (bsc#1261969, CVE-2026-1502). + - gh-145986: xml.parsers.expat: Fixed a crash caused by + unbounded C recursion when converting deeply nested XML + content models with ElementDeclHandler(). This addresses + CVE-2026-4224 (bsc#1259735, CVE-2026-4224). + - gh-145599: Reject control characters in http.cookies.Morsel + update() and js_output(). This addresses CVE-2026-3644 + (bsc#1259734, CVE-2026-3644). + - gh-145506: Fixes CVE-2026-2297 by ensuring that + SourcelessFileLoader uses io.open_code() when opening .pyc + files (bsc#1259240, CVE-2026-2297). + - gh-144370: Disallow usage of control characters in status + in wsgiref.handlers to prevent HTTP header injections. + Patch by Benedikt Johannes. + - gh-143930: Reject leading dashes in URLs passed to + webbrowser.open() (bsc#1260026, CVE-2026-4519). + - gh-143927: Normalize all line endings (CR, CRLF, and LF) to + LF+TAB when writing multi-line configparser values + (bsc#1269066, CVE-2026-0864). + - Tests + - gh-149776: Fix test_socket on Linux kernel 7.1 and newer: + skip UDP Lite tests if it’s not supported. Patch by Victor + Stinner. +- Removed upstreamed patches: + - CVE-2025-13462-tarinfo-header-parse.patch + - CVE-2026-0864-normalize-LFTAB-configparser.patch + - CVE-2026-11940-tarfile-escape.patch + - CVE-2026-11972-tarfile-Stream-seek-EOF.patch + - CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch + - CVE-2026-15308-HTMLParser-CPU-exhaust.patch + - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch + - CVE-2026-3276-On2-unicodedata-normalize.patch + - CVE-2026-3644-cookies-Morsel-update-II.patch + - CVE-2026-4224-expat-unbound-C-recursion.patch + - CVE-2026-4360-filter_function-TarFile-extractone.patch + - CVE-2026-4519-webbrowser-open-dashes.patch + - CVE-2026-4786-webbrowser-open-action.patch + - CVE-2026-6100-use-after-free-decompression.patch + - CVE-2026-7210-pyexpat-entropy-hash-flooding.patch + - CVE-2026-7774-tarfile-data_filter-symlink.patch + - CVE-2026-8328-ftplib-no-trust-PASV-resp.patch + - test_UDPLITE_support.patch + +------------------------------------------------------------------- Old: ---- CVE-2025-13462-tarinfo-header-parse.patch CVE-2026-0864-normalize-LFTAB-configparser.patch CVE-2026-11940-tarfile-escape.patch CVE-2026-11972-tarfile-Stream-seek-EOF.patch CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch CVE-2026-15308-HTMLParser-CPU-exhaust.patch CVE-2026-2297-SourcelessFileLoader-io_open_code.patch CVE-2026-3276-On2-unicodedata-normalize.patch CVE-2026-3644-cookies-Morsel-update-II.patch CVE-2026-4224-expat-unbound-C-recursion.patch CVE-2026-4360-filter_function-TarFile-extractone.patch CVE-2026-4519-webbrowser-open-dashes.patch CVE-2026-4786-webbrowser-open-action.patch CVE-2026-6100-use-after-free-decompression.patch CVE-2026-7210-pyexpat-entropy-hash-flooding.patch CVE-2026-7774-tarfile-data_filter-symlink.patch CVE-2026-8328-ftplib-no-trust-PASV-resp.patch Python-3.11.15.tar.xz Python-3.11.15.tar.xz.sigstore test_UDPLITE_support.patch New: ---- Python-3.11.16.tar.xz Python-3.11.16.tar.xz.sigstore ----------(Old B)---------- Old:- Removed upstreamed patches: - CVE-2025-13462-tarinfo-header-parse.patch - CVE-2026-0864-normalize-LFTAB-configparser.patch Old: - CVE-2025-13462-tarinfo-header-parse.patch - CVE-2026-0864-normalize-LFTAB-configparser.patch - CVE-2026-11940-tarfile-escape.patch Old: - CVE-2026-0864-normalize-LFTAB-configparser.patch - CVE-2026-11940-tarfile-escape.patch - CVE-2026-11972-tarfile-Stream-seek-EOF.patch Old: - CVE-2026-11940-tarfile-escape.patch - CVE-2026-11972-tarfile-Stream-seek-EOF.patch - CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch Old: - CVE-2026-11972-tarfile-Stream-seek-EOF.patch - CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch - CVE-2026-15308-HTMLParser-CPU-exhaust.patch Old: - CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch - CVE-2026-15308-HTMLParser-CPU-exhaust.patch - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch Old: - CVE-2026-15308-HTMLParser-CPU-exhaust.patch - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch - CVE-2026-3276-On2-unicodedata-normalize.patch Old: - CVE-2026-2297-SourcelessFileLoader-io_open_code.patch - CVE-2026-3276-On2-unicodedata-normalize.patch - CVE-2026-3644-cookies-Morsel-update-II.patch Old: - CVE-2026-3276-On2-unicodedata-normalize.patch - CVE-2026-3644-cookies-Morsel-update-II.patch - CVE-2026-4224-expat-unbound-C-recursion.patch Old: - CVE-2026-3644-cookies-Morsel-update-II.patch - CVE-2026-4224-expat-unbound-C-recursion.patch - CVE-2026-4360-filter_function-TarFile-extractone.patch Old: - CVE-2026-4224-expat-unbound-C-recursion.patch - CVE-2026-4360-filter_function-TarFile-extractone.patch - CVE-2026-4519-webbrowser-open-dashes.patch Old: - CVE-2026-4360-filter_function-TarFile-extractone.patch - CVE-2026-4519-webbrowser-open-dashes.patch - CVE-2026-4786-webbrowser-open-action.patch Old: - CVE-2026-4519-webbrowser-open-dashes.patch - CVE-2026-4786-webbrowser-open-action.patch - CVE-2026-6100-use-after-free-decompression.patch Old: - CVE-2026-4786-webbrowser-open-action.patch - CVE-2026-6100-use-after-free-decompression.patch - CVE-2026-7210-pyexpat-entropy-hash-flooding.patch Old: - CVE-2026-6100-use-after-free-decompression.patch - CVE-2026-7210-pyexpat-entropy-hash-flooding.patch - CVE-2026-7774-tarfile-data_filter-symlink.patch Old: - CVE-2026-7210-pyexpat-entropy-hash-flooding.patch - CVE-2026-7774-tarfile-data_filter-symlink.patch - CVE-2026-8328-ftplib-no-trust-PASV-resp.patch Old: - CVE-2026-7774-tarfile-data_filter-symlink.patch - CVE-2026-8328-ftplib-no-trust-PASV-resp.patch - test_UDPLITE_support.patch Old: - CVE-2026-8328-ftplib-no-trust-PASV-resp.patch - test_UDPLITE_support.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python311.spec ++++++ --- /var/tmp/diff_new_pack.GoPH4k/_old 2026-09-11 19:00:09.453683354 +0200 +++ /var/tmp/diff_new_pack.GoPH4k/_new 2026-09-11 19:00:09.455683438 +0200 @@ -107,7 +107,7 @@ # _md5.cpython-38m-x86_64-linux-gnu.so %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so Name: %{python_pkg_name}%{psuffix} -Version: 3.11.15 +Version: 3.11.16 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 @@ -190,77 +190,23 @@ # PATCH-FIX-UPSTREAM CVE-2025-15366-imap-ctrl-chars.patch bsc#1257044 [email protected] # Reject control characters in wsgiref.headers.Headers Patch33: CVE-2025-15366-imap-ctrl-chars.patch -# PATCH-FIX-OPENSUSE test_UDPLITE_support.patch [email protected] -# improve testing of the presence of IPPROTO_UDPLITE support -Patch34: test_UDPLITE_support.patch # PATCH-FIX-UPSTREAM CVE-2025-15367-poplib-ctrl-chars.patch bsc#1257041 [email protected] # Reject control characters in poplib Patch35: CVE-2025-15367-poplib-ctrl-chars.patch # PATCH-FIX-UPSTREAM CVE-2025-12781-b64decode-alt-chars.patch bsc#1257108 [email protected] # Fix decoding with non-standard Base64 alphabet gh#python/cpython#125346 Patch36: CVE-2025-12781-b64decode-alt-chars.patch -# PATCH-FIX-UPSTREAM CVE-2026-2297-SourcelessFileLoader-io_open_code.patch bsc#1259240 [email protected] -# Ensure SourcelessFileLoader uses io.open_code -Patch37: CVE-2026-2297-SourcelessFileLoader-io_open_code.patch -# PATCH-FIX-UPSTREAM CVE-2026-3644-cookies-Morsel-update-II.patch bsc#1259734 [email protected] -# Reject control characters in http.cookies.Morsel.update() and http.cookies.BaseCookie.js_output -Patch38: CVE-2026-3644-cookies-Morsel-update-II.patch -# PATCH-FIX-UPSTREAM CVE-2026-4224-expat-unbound-C-recursion.patch bsc#1259735 [email protected] -# Avoid unbound C recursion in conv_content_model -Patch39: CVE-2026-4224-expat-unbound-C-recursion.patch -# PATCH-FIX-UPSTREAM CVE-2025-13462-tarinfo-header-parse.patch bsc#1259611 [email protected] -# Skip TarInfo DIRTYPE normalization during GNU long name handling -Patch40: CVE-2025-13462-tarinfo-header-parse.patch -# PATCH-FIX-UPSTREAM CVE-2026-4519-webbrowser-open-dashes.patch bsc#1260026 [email protected] -# reject leading dashes in webbrowser URLs -Patch41: CVE-2026-4519-webbrowser-open-dashes.patch # PATCH-FIX-UPSTREAM CVE-2026-3479-pkgutil_get_data.patch bsc#1259989 [email protected] # pkgutil.get_data() reject invalid resource arguments Patch42: CVE-2026-3479-pkgutil_get_data.patch # PATCH-FIX-UPSTREAM CVE-2026-3446-base64-padding.patch bsc#1261970 [email protected] # Do not ignore excess Base64 data after the first padded quad Patch43: CVE-2026-3446-base64-padding.patch -# PATCH-FIX-UPSTREAM CVE-2026-6100-use-after-free-decompression.patch bsc#1262098 [email protected] -# NULL dangling pointer to avoid use-after-free error -Patch44: CVE-2026-6100-use-after-free-decompression.patch -# PATCH-FIX-UPSTREAM CVE-2026-4786-webbrowser-open-action.patch bsc#1262319 [email protected] -# Fix webbrowser %action substitution bypass of dash-prefix check -Patch45: CVE-2026-4786-webbrowser-open-action.patch -# PATCH-FIX-UPSTREAM CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch bsc#1261969 [email protected] -# Reject CR/LF in HTTP tunnel request headers -Patch46: CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch # PATCH-FIX-UPSTREAM CVE-2026-6019-Morsel-js_output.patch bsc#1262654 [email protected] # Base64-encode cookie values embedded in JS Patch47: CVE-2026-6019-Morsel-js_output.patch -# PATCH-FIX-UPSTREAM CVE-2026-11940-tarfile-escape.patch bsc#1268977 [email protected] -# Fix symlink escape via tarfile hardlink-extraction fallback -Patch48: CVE-2026-11940-tarfile-escape.patch -# PATCH-FIX-UPSTREAM CVE-2026-8328-ftplib-no-trust-PASV-resp.patch bsc#1265268 [email protected] -# Make ftplib not trust the PASV response -Patch49: CVE-2026-8328-ftplib-no-trust-PASV-resp.patch -# PATCH-FIX-UPSTREAM CVE-2026-7210-pyexpat-entropy-hash-flooding.patch bsc#1264962 [email protected] -# Use XML_SetHashSalt16Bytes in pyexpat/_elementtree when possible -Patch50: CVE-2026-7210-pyexpat-entropy-hash-flooding.patch # PATCH-FIX-UPSTREAM Based on gh#python/cpython#142057 Support fixes required for Sphinx 9 Patch51: support-sphinx-9.patch -# PATCH-FIX-UPSTREAM CVE-2026-15308-HTMLParser-CPU-exhaust.patch bsc#1271192 [email protected] -# Fix quadratic complexity in incremental parsing in HTMLParser -Patch52: CVE-2026-15308-HTMLParser-CPU-exhaust.patch -# PATCH-FIX-UPSTREAM CVE-2026-4360-filter_function-TarFile-extractone.patch bsc#1269959 [email protected] -# Pass filter_function to TarFile._extract_one() during .extract() -Patch53: CVE-2026-4360-filter_function-TarFile-extractone.patch -# PATCH-FIX-UPSTREAM CVE-2026-11972-tarfile-Stream-seek-EOF.patch bsc#1269788 [email protected] -# Make tarfile._Stream.seek break at EOF -Patch54: CVE-2026-11972-tarfile-Stream-seek-EOF.patch -# PATCH-FIX-UPSTREAM CVE-2026-0864-normalize-LFTAB-configparser.patch bsc#1269066 [email protected] -# Normalize all line endings (CR, CRLF, and LF) in configparser -Patch55: CVE-2026-0864-normalize-LFTAB-configparser.patch -# PATCH-FIX-UPSTREAM CVE-2026-7774-tarfile-data_filter-symlink.patch bsc#1267821 [email protected] -# tarfile.data_filter: validate written link target -Patch56: CVE-2026-7774-tarfile-data_filter-symlink.patch -# PATCH-FIX-UPSTREAM CVE-2026-3276-On2-unicodedata-normalize.patch bsc#1267581 [email protected] -# gh-149079: Fix O(n^2) canonical ordering in unicodedata.normalize() -Patch57: CVE-2026-3276-On2-unicodedata-normalize.patch # PATCH-FIX-UPSTREAM bsc1263083-http-cookies-atob-utf8.patch bsc#1263083 [email protected] # Use decodeURIComponent() for UTF-8 support in js_output() Patch58: bsc1263083-http-cookies-atob-utf8.patch ++++++ Python-3.11.15.tar.xz -> Python-3.11.16.tar.xz ++++++ /work/SRC/openSUSE:Factory/python311/Python-3.11.15.tar.xz /work/SRC/openSUSE:Factory/.python311.new.1265/Python-3.11.16.tar.xz differ: char 26, line 1 ++++++ Python-3.11.15.tar.xz.sigstore -> Python-3.11.16.tar.xz.sigstore ++++++ --- /work/SRC/openSUSE:Factory/python311/Python-3.11.15.tar.xz.sigstore 2026-03-10 17:46:51.303552304 +0100 +++ /work/SRC/openSUSE:Factory/.python311.new.1265/Python-3.11.16.tar.xz.sigstore 2026-09-11 19:00:07.697610170 +0200 @@ -1 +1 @@ -{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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 itkA6Nm4wIxAPCQecOoqRnP6OEP51arhHdtMVknBJMaJ26wfyRSVsnKyi3DHF30nTOuVetJ2Fam4w=="},"tlogEntries":[{"logIndex":"1013496923","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1772499863","inclusionPromise":{"signedEntryTimestamp":"MEYCIQD9btJM4z88Jjs+dnFQPNitVE00joL/V0oaZYH6gxGMZgIhAKXx4hnuI60kDzRtvSOt1jZnggLTyiQF0LnSiqa4qk0D"},"inclusionProof":{"logIndex":"891592661","rootHash":"JK+1Umj5tvwdPhfBBbYD5UpiZA4fGUrt4GwehHKIcNI=","treeSize":"891592665","hashes":["s5AxwJ+t2gq0HIqW+ns8u59lldXwfv+yc2A3BGSrPis=","PAtZZmfHY9yavnppNM9Gmk+WqCJp68j2DVyB1/9QZ7w=","YpXdu4vbBuO+tHi1rd5gt5zbNu1csURZQROlGGw8StI=","oHenKqg2Pax643jd6J9plud+zRvWWr4XylTQ7ZuGesc=","2Fgbz1TsPBrhhyJNzNlf97xasPVWvjTRnxCIdVO85ZY=","BAVTdfJ//YgqqbF5CC5ly+o4KGLRQAapZTb7z0bEFFU=","vkI1W3s2WTouxaKvL+oEa85gPCaXFne20armi9bsfOw=","Kr1IZBtxX03UsOZdo6rsM2EPV0/q75toGqzT+3K/ri8=","Kjof0zMo+Hb6JNPs/Yoxt0ZOVOTDkBVzPDvA14+ONiM=","ZtgvM2m+592JolIGliHZ1mgjp h/xHOzG6lmyNtQuw8o=","yaLcjLp9ldnUTWyy/PouoOddMS22Et9RPJrGE7WCDYc=","50BdkX7nkRgG4UrWoLVyZogLPlcHZQP2khTmOteFbho=","UFjcw2ByTVPBmHuBXkpFOLynDtU0JPa0rs1lvSVm9ns=","UfqWnx1YuXWnR6tQB8LboYpg7AuaUmwROEn7wJBVDjM=","HU7296NTl8Wek0AyCPeTMXdik0fZbtCiBDPDqVeye0E=","Xo5tam8gxbsWohATkFEqn5hvHpPFwBJ0SDjNE5DiI2A=","ZleKYeRKwUF3HP3HO0kxHMVeJgY3N/euGinVhlVWaq0=","fLAvE46NqCVV86EpB2pKkwJlFjjFk7ntX3lC+PiZuIo=","T4DqWD42hAtN+vX8jKCWqoC4meE4JekI9LxYGCcPy1M="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n891592665\nJK+1Umj5tvwdPhfBBbYD5UpiZA4fGUrt4GwehHKIcNI=\n\n— rekor.sigstore.dev wNI9ajBEAiAltxt+A0tLVa+o0H/ajiGUgmqyTo4EnQ61UY0mMB8GewIgaNKdAMRpHkk9y09X1pjyH++ayq8uM37PI8q8rJNEYYg=\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiIyNzIxNzlkZGQ5YTJlNDFhMGZjOGU0MmUzM2RmYmRjYTBiMzcxMWFhNWFiZjM3MmQzZjJkNTE1NDNkMDliNjI1In19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FWUNJUURlTUZ3ZHVwZ0l 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 a0tXa1E0ZDBsbldVUldVakJTUVZGSUwwSkNaM2RHYjBWVlkwZEdhV0pIT1c1ak1rWnpVVWhDTldSSGFIWmlhVFYyWTIxamQwdFJXVXRMZDFsQ1FrRkhSQXAyZWtGQ1FWRlJZbUZJVWpCalNFMDJUSGs1YUZreVRuWmtWelV3WTNrMWJtSXlPVzVpUjFWMVdUSTVkRTFEYzBkRGFYTkhRVkZSUW1jM09IZEJVV2RGQ2toUmQySmhTRkl3WTBoTk5reDVPV2haTWs1MlpGYzFNR041Tlc1aU1qbHVZa2RWZFZreU9YUk5TVWRLUW1kdmNrSm5SVVZCWkZvMVFXZFJRMEpJYzBVS1pWRkNNMEZJVlVFelZEQjNZWE5pU0VWVVNtcEhValJqYlZkak0wRnhTa3RZY21wbFVFc3pMMmcwY0hsblF6aHdOMjgwUVVGQlIyTnpWRzFHVUZGQlFRcENRVTFCVW1wQ1JVRnBRV1pMVmpRNU16Sm5XbWRpWVhRdloyeE9lalZHY21GVVpVUnlRMk5GY1RBemRHRXpSVE4wUmpST1FsRkpaMFpaUnpsVVNsbEZDbEpIVDBKNmJERjRLMDFQWTJRcmVrSTBOMDVPU0d4QmIwTnRTVXhtVkZOa2FVdG5kME5uV1VsTGIxcEplbW93UlVGM1RVUmhVVUYzV21kSmVFRlBVM2dLZUdNMlJ6SXhUVXBoWXpOa2EwNDFOVkJNVWtnMU0yUjVhazlpY0hkVVZIbHJXa1pIY0ZSd2FuVlZiekpQTTJaME9WRkZVRnBwZEd0Qk5rNXROSGRKZUFwQlVFTlJaV05QYjNGU2JsQTJUMFZRTlRGaGNtaElaSFJOVm10dVFrcE5ZVW95Tm5kbWVWSlRWbk51UzNscE0wUklSak13YmxSUGRWWmxkRW95Um1GdENqUjNQVDBLTFMwdExTMUZUa1FnUTBWU1ZFbEdTVU5CVkVVdExTMHRMUW89In19fX0="}]," timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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"}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"JyF53dmi5BoPyOQuM9+9ygs3EapavzctPy1RVD0JtiU="},"signature":"MEYCIQDeMFwdupgIJilIXrzIkSKGaquuvTMKpXfrYgnjo3imywIhAO5qw4S2B9YoVnJq8hLMGTjI4RMU/xXu9BelUztWBTbJ"}} +{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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 8vGVjoM7KvX020re+1LeXnLeGRfKrxV3Ohm/ZPKi6YwCgYIKoZIzj0EAwMDaAAwZQIxAJKFPENtv+doAETBVlegQrilDa9teHP01IWm8Lux2qAlerbS0X/f94SzuqTuqw75KAIwMFHsWELECaOaHXzwqCwPECDZkqmiuIgyzJMiOY37ogqI4FTTxXLWNdYOBs28z4KI"},"tlogEntries":[{"logIndex":"2442742138","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1786577619","inclusionPromise":{"signedEntryTimestamp":"MEUCIEXEfmreEGmfvtdI6/GvmcesSNd4M9ztRi+soBn37AMSAiEA6F6WhbFGXZKWcdRdgTuC2MEvOLQrkEp8kSA6MoFfKdw="},"inclusionProof":{"logIndex":"2320837876","rootHash":"tLEjVgkPvjw6p0gW829BGY2bg+co8kTZ6EOc8sb4w4E=","treeSize":"2320837996","hashes":["9oOrBcIE0GmspyfWdPlGkPk3ztO8uxncSyhtx7fpgRM=","R0C6ZTs5XaySZNa9ys3EuOuEeu+xubthjdHSJ+6ynDs=","eYOd0qz160pvhNia1sSl+z+GAmH2++qmM49N2k08Amg=","toYiG+YFojLrct1td5hLDb2euwLU3Tii9QVIy8ylyX4=","Qi7EGPsTXJgEGzALJGN9zXera9au3RH4kcK3YuWL66Q=","PdvkQAKleFNKz61c5LPLKJltM7HqPH+aTCgVgJ3VelA=","DqcJeUcjGJi5k/q1Uotf4Yx1wzi+gR+SdqgKA46mJQY= ","Nwp1ctd1yvP8fekFYX6JK2FHRnDyursmF39obWNi+BE=","InGuu2yML4wR0xwn6alsaMeif31YdawLkVGAL9zCclE=","o6FEkyIj68yiskKz5EkriJXRv4UGGZf2cAZfMaiCe+I=","Mq04EaWUl64ysUbQh56rAKh7pEVu6OUGgv7QT/M8bfk=","dtr3gF37QBi8dTHFFBsXQCJ1dp8/7L6RifFh6/DIv2k=","T2NKmdJrIJ9ijegazbOe6pbmJqCfVPNREh8sLBn3BQI=","idxH7nlAPWU7iZWZfcsn2a6elqdvieyLGf7kDho5F2s=","t0Kxuz4wgjA2WMJAiqRkioEg4N/1Q8fpaZ46tznUp/A=","7NLCBAvZaVsKvlXyy0JA5YCKHkOV6F47NTF7COo2eOA=","mYkFdqU5C9m3w88wTn9l6UpYo+PI93c232s+vBiBEpM=","ygTG08vB2EEmJQPXRvF5H06Tlac72AkODENK7PhCPkw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2320837996\ntLEjVgkPvjw6p0gW829BGY2bg+co8kTZ6EOc8sb4w4E=\n\n— rekor.sigstore.dev wNI9ajBFAiEA1VSieOjEYYc4c+GaWo1LCU9hIUbux4XVMYqwfeXFlSICIGWkyDs+FcXWzvHfbdiOK26jpHbO2AG+VeUZ7xACL02M\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI5MWJjZGViZmRkZTIzOWEw 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 VsTGIxcEplbW93UlVGM1RVUmhRVUYzV2xGSmVFRktTMFpRUlU1MENuWXJaRzlCUlZSQ1ZteGxaMUZ5YVd4RVlUbDBaVWhRTURGSlYyMDRUSFY0TW5GQmJHVnlZbE13V0M5bU9UUlRlblZ4VkhWeGR6YzFTMEZKZDAxR1NITUtWMFZNUlVOaFQyRklXSHAzY1VOM1VFVkRSRnByY1cxcGRVbG5lWHBLVFdsUFdUTTNiMmR4U1RSR1ZGUjRXRXhYVG1SWlQwSnpNamg2TkV0SkNpMHRMUzB0UlU1RUlFTkZVbFJKUmtsRFFWUkZMUzB0TFMwSyJ9fX19"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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 GlUWiG6HlCKbk3roDOCy8+tV8CME9e8OJgtiWoAjVllD18FOy78bL+PesO8MgCjWLsm7VOpHaSbLf2YLMj+1RHCl9CQA=="}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"kbzev93iOaADrpNzin/OD5Iw/uXEvCuG9uboxvmKq+g="},"signature":"MEUCIQChii0s+0LibKnO7pDM6dqLzNJMof8CT3/YbtM7lek8zwIgHGk4rGiRdSybWhCr3miDPpzSxzayh7OCU3LcX8mfs/E="}} ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.GoPH4k/_old 2026-09-11 19:00:09.611689939 +0200 +++ /var/tmp/diff_new_pack.GoPH4k/_new 2026-09-11 19:00:09.615690106 +0200 @@ -1,6 +1,6 @@ -mtime: 1786312480 -commit: 26d43f9c46fae0a0be12add2d4bcff4da26a2d67d184177bb91bfca3b4ea31ae +mtime: 1788802751 +commit: 095976ce39ed3b0443d0b4bba207d5564941f83019da2e8eef3782b3ff79f113 url: https://src.opensuse.org/python-interpreters/python311 -revision: 26d43f9c46fae0a0be12add2d4bcff4da26a2d67d184177bb91bfca3b4ea31ae +revision: 095976ce39ed3b0443d0b4bba207d5564941f83019da2e8eef3782b3ff79f113 projectscmsync: https://src.opensuse.org/python-interpreters/_ObsPrj ++++++ bsc1263083-http-cookies-atob-utf8.patch ++++++ --- /var/tmp/diff_new_pack.GoPH4k/_old 2026-09-11 19:00:09.662692065 +0200 +++ /var/tmp/diff_new_pack.GoPH4k/_new 2026-09-11 19:00:09.668692315 +0200 @@ -10,10 +10,10 @@ Lib/test/test_http_cookies.py | 27 ++++++++++++++------------- 2 files changed, 17 insertions(+), 16 deletions(-) -Index: Python-3.11.15/Lib/http/cookies.py +Index: Python-3.11.16/Lib/http/cookies.py =================================================================== ---- Python-3.11.15.orig/Lib/http/cookies.py 2026-08-08 22:20:13.129398461 +0200 -+++ Python-3.11.15/Lib/http/cookies.py 2026-08-08 22:20:17.089716398 +0200 +--- Python-3.11.16.orig/Lib/http/cookies.py 2026-09-04 22:20:56.043968167 +0200 ++++ Python-3.11.16/Lib/http/cookies.py 2026-09-04 22:23:33.229550165 +0200 @@ -389,18 +389,18 @@ return '<%s: %s>' % (self.__class__.__name__, self.OutputString()) @@ -36,10 +36,10 @@ // end hiding --> </script> """ % (output_encoded,) -Index: Python-3.11.15/Lib/test/test_http_cookies.py +Index: Python-3.11.16/Lib/test/test_http_cookies.py =================================================================== ---- Python-3.11.15.orig/Lib/test/test_http_cookies.py 2026-08-08 22:20:13.131379374 +0200 -+++ Python-3.11.15/Lib/test/test_http_cookies.py 2026-08-08 22:20:17.090353950 +0200 +--- Python-3.11.16.orig/Lib/test/test_http_cookies.py 2026-09-04 22:20:56.044597544 +0200 ++++ Python-3.11.16/Lib/test/test_http_cookies.py 2026-09-04 22:23:33.229848860 +0200 @@ -1,5 +1,5 @@ # Simple test suite for http/cookies.py -import base64 ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-07 19:39:11.000000000 +0200 @@ -0,0 +1,7 @@ +_build.* +*.obscpio +*.osc +.osc +.pbuild +python311*-build/ +*.rej
