Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python310 for openSUSE:Factory checked in at 2026-10-08 15:14:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python310 (Old) and /work/SRC/openSUSE:Factory/.python310.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python310" Thu Oct 8 15:14:01 2026 rev:84 rq:1383280 version:3.10.22 Changes: -------- --- /work/SRC/openSUSE:Factory/python310/python310.changes 2026-10-01 16:47:15.795589456 +0200 +++ /work/SRC/openSUSE:Factory/.python310.new.3698736/python310.changes 2026-10-08 15:14:39.448946217 +0200 @@ -1,0 +2,94 @@ +Thu Oct 8 06:59:58 UTC 2026 - Matej Cepl <[email protected]> + +- Update to 3.10.22 (final release, upstream EOS) + - Security + - gh-158446: Fix a crash or incorrect output that could occur + when formatting a float or complex with a precision close + to the platform’s INT_MAX. PyOS_double_to_string() now + raises ValueError for any precision of that magnitude, + regardless of presentation type or value, as the format + string parsers already did for precisions above INT_MAX. + - gh-156793: asyncio: loop.start_tls() and + loop.create_connection() now validate the server_hostname + argument if an ssl.SSLContext is passed with check_hostname + set to True, emitting DeprecationWarning if server_hostname + is missing. (This will raise ValueError in Python 3.13 and + later.) (bsc#1283826, CVE-2026-19553) + - gh-156793: ssl.SSLContext.wrap_bio() now validates its + server_side, server_hostname and session arguments similar + to ssl.SSLContext.wrap_socket(), but for backward + compatiblity reasons emits DeprecationWarning instead of + ValueError. + In particular, a context with check_hostname enabled and no + server_hostname passed to wrap_bio() now emits + DeprecationWarning to indicate the hostname wasn’t + checked. (In Python 3.13 and later, this raises + ValueError.) + - gh-157265: In tarfile, when extracting a link falls back to + extracting a member of the archive, skip the member when + the filter function returns None when called with the + extracted member’s name replaced with the link’s. + - gh-157190: Fixed a vulnerability in the tarfile data and + tar extraction filters where a crafted archive using a hard + link to a symbolic link could change the permissions and + modification time of a file outside the destination + directory, and expose its contents inside the extracted + tree. This addresses CVE 2026-82049.(bsc#1280459, + CVE-2026-82049) + - gh-157953: Update bundled libexpat to version 2.8.5. + - gh-156002: Bound the amount of data zipfile decompresses + per read for members compressed with bzip2, LZMA, or + Zstandard, matching the existing limit for deflate. A small + archive member could previously expand into an unbounded + allocation even when read in small chunks. (bsc#1277111, + CVE-2026-15310) + - gh-155999: Fix the tarfile tar and data extraction filters + creating directories outside the destination for members + whose name leaves the destination and returns to it, such + as ../evil/../dest/sub/file. The containment check used the + resolved path, but intermediate directories were created + from the name as given. (bsc#1276227, CVE-2026-19672) + - gh-156293: Fix a crash in ssl when an sni_callback switches + a connection to another SSLContext and the context that + carries the callback is no longer referenced by the + application. Servers that keep their sni_callback context + alive (the usual case when it wraps the listening socket or + is stored on the server object) were not affected. This + addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) + - gh-155292: Change the stringprep module and encodings.idna + codec to not consider Unicode codepoint attributes beyond + those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) + - gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr + credentials to the URL scheme, preventing credentials + stored for an HTTPS URL from being used for a matching HTTP + URL, while URIs without a scheme continue to match any + scheme. (bsc#1276223, CVE-2026-15806) + - gh-149018: Improved protection against XML hash-flooding + attacks in xml.parsers.expat and xml.etree.ElementTree when + Python is compiled with libExpat 2.8.0 or later. + (bsc#1264962, CVE-2026-7210) + - Library + - gh-156002: zipfile again reads members through a + third-party decompressor installed by monkey-patching the + private _get_decompressor() to return an object that only + implements old BZ2Decompressor API from Python 3.3. Note + that decompressors without needs_input and two-argument + decompress() are vulnerable to CVE 2026-15310. + - gh-156353: Fix configparser parsing when using whitespace + in delimiters. +- Removed upstreamed patches: + * CVE-2026-7210-pyexpat-entropy-hash-flooding.patch + * CVE-2026-15806-HTTPPasswordMgr-scheme.patch + * CVE-2026-17084-stringprep-rfc3454.patch + * CVE-2026-19672-tarfile-outside-dirs.patch + * CVE-2026-15310-bound-zipfile-decompression.patch + * CVE-2026-82049-tarfile-hard-link.patch + +------------------------------------------------------------------- +Fri Oct 2 00:11:45 UTC 2026 - Matej Cepl <[email protected]> + +- CVE-2026-82049: to follow symlinks when extracting tarfile hard + links (bsc#1280459, gh#pyhton/cpython#157190) + CVE-2026-82049-tarfile-hard-link.patch + +------------------------------------------------------------------- Old: ---- CVE-2026-15310-bound-zipfile-decompression.patch CVE-2026-15806-HTTPPasswordMgr-scheme.patch CVE-2026-17084-stringprep-rfc3454.patch CVE-2026-19672-tarfile-outside-dirs.patch CVE-2026-7210-pyexpat-entropy-hash-flooding.patch Python-3.10.21.tar.xz Python-3.10.21.tar.xz.sigstore New: ---- Python-3.10.22.tar.xz Python-3.10.22.tar.xz.sigstore ----------(Old B)---------- Old: * CVE-2026-19672-tarfile-outside-dirs.patch * CVE-2026-15310-bound-zipfile-decompression.patch * CVE-2026-82049-tarfile-hard-link.patch Old: * CVE-2026-7210-pyexpat-entropy-hash-flooding.patch * CVE-2026-15806-HTTPPasswordMgr-scheme.patch * CVE-2026-17084-stringprep-rfc3454.patch Old: * CVE-2026-15806-HTTPPasswordMgr-scheme.patch * CVE-2026-17084-stringprep-rfc3454.patch * CVE-2026-19672-tarfile-outside-dirs.patch Old: * CVE-2026-17084-stringprep-rfc3454.patch * CVE-2026-19672-tarfile-outside-dirs.patch * CVE-2026-15310-bound-zipfile-decompression.patch Old:- Removed upstreamed patches: * CVE-2026-7210-pyexpat-entropy-hash-flooding.patch * CVE-2026-15806-HTTPPasswordMgr-scheme.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python310.spec ++++++ --- /var/tmp/diff_new_pack.VI0UfM/_old 2026-10-08 15:14:42.441071581 +0200 +++ /var/tmp/diff_new_pack.VI0UfM/_new 2026-10-08 15:14:42.443071665 +0200 @@ -108,7 +108,7 @@ # _md5.cpython-38m-x86_64-linux-gnu.so %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so Name: %{python_pkg_name}%{psuffix} -Version: 3.10.21 +Version: 3.10.22 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 @@ -225,26 +225,11 @@ # PATCH-FIX-UPSTREAM CVE-2026-6019-Morsel-js_output.patch bsc#1262654 [email protected] # Base64-encode cookie values embedded in JS Patch51: CVE-2026-6019-Morsel-js_output.patch -# PATCH-FIX-UPSTREAM CVE-2026-7210-pyexpat-entropy-hash-flooding.patch bsc#1264962 [email protected] -# Use XML_SetHashSalt16Bytes in pyexpat/_elementtree when possible -Patch54: CVE-2026-7210-pyexpat-entropy-hash-flooding.patch # PATCH-FIX-UPSTREAM Based on gh#python/cpython#142057 Support fixes required for Sphinx 9 Patch56: support-sphinx-9.patch # PATCH-FIX-UPSTREAM bsc1263083-http-cookies-atob-utf8.patch bsc#1263083 [email protected] # Use decodeURIComponent() for UTF-8 support in js_output() Patch63: bsc1263083-http-cookies-atob-utf8.patch -# PATCH-FIX-UPSTREAM CVE-2026-15806-HTTPPasswordMgr-scheme.patch bsc#1276223 [email protected] -# Scope HTTPPasswordMgr credentials by URL scheme -Patch64: CVE-2026-15806-HTTPPasswordMgr-scheme.patch -# PATCH-FIX-UPSTREAM CVE-2026-17084-stringprep-rfc3454.patch bsc#1276226 Matej Cepl <[email protected]> -# Don't consider Unicode codepoint attributes outside RFC 3454 -Patch65: CVE-2026-17084-stringprep-rfc3454.patch -# PATCH-FIX-UPSTREAM CVE-2026-19672-tarfile-outside-dirs.patch bsc#1276227 [email protected] -# in tarfile, handle a member that leaves the destination and comes back -Patch66: CVE-2026-19672-tarfile-outside-dirs.patch -# PATCH-FIX-UPSTREAM CVE-2026-15310-bound-zipfile-decompression.patch bsc#1277111 [email protected] -# Bound zipfile decompression for bzip2/LZMA/Zstandard (gh#python/cpython!156003) -Patch67: CVE-2026-15310-bound-zipfile-decompression.patch ### END OF PATCHES BuildRequires: autoconf-archive BuildRequires: automake ++++++ Python-3.10.21.tar.xz -> Python-3.10.22.tar.xz ++++++ /work/SRC/openSUSE:Factory/python310/Python-3.10.21.tar.xz /work/SRC/openSUSE:Factory/.python310.new.3698736/Python-3.10.22.tar.xz differ: char 27, line 1 ++++++ Python-3.10.21.tar.xz.sigstore -> Python-3.10.22.tar.xz.sigstore ++++++ --- /work/SRC/openSUSE:Factory/python310/Python-3.10.21.tar.xz.sigstore 2026-09-10 11:51:05.796849067 +0200 +++ /work/SRC/openSUSE:Factory/.python310.new.3698736/Python-3.10.22.tar.xz.sigstore 2026-10-08 15:14:39.295939806 +0200 @@ -1 +1 @@ -{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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 IeetdzhKzHfNH20VCpA1p3mkGze7rC0V9DNywdn2GcwCgYIKoZIzj0EAwMDaQAwZgIxANB/+gPZe9/NRw/f+XPuyEb3VDQHir5HyXqtNEy+tdRj8F8g2ha5FGMB7KAIudWd6gIxAJuzBUAXBbPvU8Ixm0VwQrldfbzA6WKi8IrAew9++0m+cXkxqkYkU2OuA20h8Ek6ag=="},"tlogEntries":[{"logIndex":"2442736215","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1786577594","inclusionPromise":{"signedEntryTimestamp":"MEQCIA4eVwyWwKxz6EqzfB+wFalbDZbFENCq7+OGVQKnikJJAiAMeFlsmbJf1ep6L6YOVH/zdUNpxt7hBKrzfOV3uahPAQ=="},"inclusionProof":{"logIndex":"2320831953","rootHash":"HwsHVV06fYsjvo9iSU6CD/Ejl/SBd0Rqbj/vKsFkW14=","treeSize":"2320832015","hashes":["tDvqYraAyWpLUuqvumyYfOnAxWMVWlkEH01pOeVP5cc=","gkooyM8dqwo7DbgFMds6sWCQ6jBIlWCCptvllrt5K6E=","g/yCOFOzeXOils3ZoJeK9fvSj9JHCM/ClSX7136YVYI=","KHGvA1ALvdF/95aK4/tUZR3GRtWFNbnV3+tkZDm1GfU=","SnE4WVPaYstdtEgLlKxZAaNXnmcvoNCl2weka+nKnMU=","Ur+VLHFyCoMHmATJwRByfpmxgarNZdKvWzxle3CXrj0=","RW97sZ1SD2UMkr6ORLflTT7fPRUNiiZGRXNahokD dto=","9cTu3ym/PgzV8o0UfJeYqJ1gJM/OUaaz+9IJ2JQSiXk=","ItvLnXU5C8roUFzTN8XHqdfG+wELSs/Z4+lw7p/+1K0=","DSNGatGEXaYgc8COuDGpsS1u9nFNeu+EaB80RFp+tRI=","y/s2+f9Wt8g/PF81FLu9VC2bG064q8bQbwD2scqfOM4=","Qffk+/QbjfcfJnS2WBCA+JUtSyts2fQ1g5IBJvUBglk=","T2NKmdJrIJ9ijegazbOe6pbmJqCfVPNREh8sLBn3BQI=","idxH7nlAPWU7iZWZfcsn2a6elqdvieyLGf7kDho5F2s=","t0Kxuz4wgjA2WMJAiqRkioEg4N/1Q8fpaZ46tznUp/A=","7NLCBAvZaVsKvlXyy0JA5YCKHkOV6F47NTF7COo2eOA=","mYkFdqU5C9m3w88wTn9l6UpYo+PI93c232s+vBiBEpM=","ygTG08vB2EEmJQPXRvF5H06Tlac72AkODENK7PhCPkw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2320832015\nHwsHVV06fYsjvo9iSU6CD/Ejl/SBd0Rqbj/vKsFkW14=\n\n— rekor.sigstore.dev wNI9ajBGAiEAjUU9qqM6oiiM6irC2DFGH+aPhK/PC4K5r3lQv5RHl4sCIQD7UQO7/xwkqi0a+u72BrZDP3Udo+pegCGaHy725u6ZAQ==\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiJhMGRhMWU3MjEz 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 pkME5uV1VsTGIxcEplbW93UlVGM1RVUmhVVUYzV21kSmVFRk9RaThyWjFCYUNtVTVMMDVTZHk5bUsxaFFkWGxGWWpOV1JGRklhWEkxU0hsWWNYUk9SWGtyZEdSU2FqaEdPR2N5YUdFMVJrZE5RamRMUVVsMVpGZGtObWRKZUVGS2RYb0tRbFZCV0VKaVVIWlZPRWw0YlRCV2QxRnliR1JtWW5wQk5sZExhVGhKY2tGbGR6a3JLekJ0SzJOWWEzaHhhMWxyVlRKUGRVRXlNR2c0UldzMllXYzlQUW90TFMwdExVVk9SQ0JEUlZKVVNVWkpRMEZVUlMwdExTMHRDZz09In19fX0="}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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 kbh5Xvy1ynVSgEA5Q5WN9W728fKwZ0NBSJQpA0E01KTKOBAjAXzf7H46GK6KHvsonnJkMVRLLI3M9nULoo9SBgrr5sOVuYlzMoYv9miFxvE+q3WPo="}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"oNoechMulQFU7KD29H1duChFRwDeIOURNmeUDYHg2wQ="},"signature":"MEUCIFWOjsnOxULjw0dLHqdk7L1O0udEtzyh0V9Y4PHIm9jaAiEA67sioevWrlzPLrPaF5phWxCtoGOpmVHrJSwJjRkq6c0="}} +{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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 FK9tZh0S1UMrY8jkbiFxrdn0C3z40rkVCvmuhih4G9ZMAoGCCqGSM49BAMDA2gAMGUCMQC3Dz/5diq4vhOPFVHnEjHXsXb66xODg/IknWIiUrAmueupzNAB7ULqyN+wJpaboGYCMBwKrDtXRyrF3S/WZKkbBfzcTUdJ80/Lyg9PFfbe2ivYgra/IZ83MKYlJsv1ZRLEaQ=="},"tlogEntries":[{"logIndex":"3028519171","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1790817280","inclusionPromise":{"signedEntryTimestamp":"MEYCIQDmLTpCMHe82OtbTYGXKaLrnBWMTuLV2ohOvn1ZXl67JQIhAJ0m/b/zztkHeiP/wM/JQvRTya7WFztC2FLjtn10KF2N"},"inclusionProof":{"logIndex":"2906614909","rootHash":"o860c6ufP/7p74y1lscWxVOzuwqadWCaCOBI3E9SeeA=","treeSize":"2906614914","hashes":["SVrp9U1iPrLiDlM2pgQEo9VeDUB/Nh5Pa0160V0NnII=","Vbtg+RyeChDpCY6fcxVLR6Q5UnIlWcKGet0g6SKlhBo=","NreVu4kgs8h3MVZiR7lSJXdQKxYn5dLabIuH6ICqcDE=","8fDmd4gCVhVtQpjNXt8RadGQtINDe1ULQGQJ4SMFE/M=","Bps0amFgE6C/uGAarFoHx/o78C4iZ1QTiTinXf40FDA=","joN91KPKcVuRsQBiZtP6e14l7Uf3wW1FKgpmCwLXpfc=","bP0BduIE0/UU5py0pesUAVOpz2d3IuYS1RC7nLVA 4ko=","q9NMhNeSzjWLo6Bpd5fROaf3UmE9tBa5wC0BefJZ4lE=","iBiAzi/z36GB3JgtNiC/RRbmPYNqLget+Y2fNhZ0uFw=","3lmeBziqOMbtqT5UekE5s2c+K8Vno6EIaYyrzpV1PwE=","lBFVodO6xgl4BY/sEnfnDpvvJkVHa4Nsy11lTuRFRlM=","nZ+/VxFAY+NclDdnpAd+RRr9VbR6+8ag7kvefxBWv5A=","jWM2/mBgUk+DxVMiveOmCv8VMwfCfOImfval7bFsg98=","gC5tIzrSNV/K+W+H/hQriFY0CyGsvkXy20igMFHKeok=","ShItQJ+hT7oag+MfncFLsQZkRTVG3jmpsvsEgSDjlWM=","viajkCmK6VpH9YFpBl7uEv5LO472fSOeOb639THV0QA=","ZQ6rIcD2ggDozkmorpBeVxj2C9MK7qEskWgeiO3dlY0=","W63Nufihd6Q6Q/ecTaQuv/f1NEWXcsdQbZ0DPiY3mxw=","cIz1OY2tO8cVEgp0TmAffPApps2hJuAcAN+pESrpHHY=","4lYk7cX8PszZLoyQMWjMDB1BOBn4f7hehtFiHo92e5Y=","ttpxd0TJprOUtb/8Wf5DeIzwNtUw72Q0YnXE2LFMIZo=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2906614914\no860c6ufP/7p74y1lscWxVOzuwqadWCaCOBI3E9SeeA=\n\n— rekor.sigstore.dev wNI9ajBEAiBPqpae56Yndf6qVxL6IAnwZZu7NfiklHcZfTfW/AKqEwIgGBx9k364Ltajvcv9OHoTdhBvRsC6yX/ rO1GTJ6bXi+0=\n"}},"canonicalizedBody":"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 tGQlFVSkJUVUVLVW5wQ1JrRnBSVUYyVDFCRmJHODNiMFl6WTJwclpXWkNaeXN3Um5wUVdXSldTbVF6TmpVMEwwWkNMek5SWkRCWVZFNXpRMGxHU3psMFdtZ3dVekZWVFFweVdUaHFhMkpwUm5oeVpHNHdRek42TkRCeWExWkRkbTExYUdsb05FYzVXazFCYjBkRFEzRkhVMDAwT1VKQlRVUkJNbWRCVFVkVlEwMVJRek5FZWk4MUNtUnBjVFIyYUU5UVJsWklia1ZxU0ZoeldHSTJObmhQUkdjdlNXdHVWMGxwVlhKQmJYVmxkWEI2VGtGQ04xVk1jWGxPSzNkS2NHRmliMGRaUTAxQ2Qwc0tja1IwV0ZKNWNrWXpVeTlYV2t0cllrSm1lbU5VVldSS09EQXZUSGxuT1ZCR1ptSmxNbWwyV1dkeVlTOUpXamd6VFV0WmJFcHpkakZhVWt4RllWRTlQUW90TFMwdExVVk9SQ0JEUlZKVVNVWkpRMEZVUlMwdExTMHRDZz09In19fX0="}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"MIIE6jADAgEAMIIE4QYJKoZIhvcNAQcCoIIE0jCCBM4CAQMxDTALBglghkgBZQMEAgEwgcMGCyqGSIb3DQEJEAEEoIGzBIGwMIGtAgEBBgkrBgEEAYO/MAIwMTANBglghkgBZQMEAgEFAAQgLregbP5krmPYufDzxGEM7jPQv1X0gc2qlOrP4+Z0rgYCFQCtkbi1l1IgzFTsnJrLjstmJHA44BgPMjAyNjEwMDEwMTE0NDBaMAMCAQECCQCohhj8lwmpC6AypDAwLjEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MRUwEwYDVQQDEwxzaWdzdG9yZS10c2GgggIUMIICEDCCAZagAwIBAgIUOhNULwyQYe68wUMvy4qOiyojiwwwCgYIK oZIzj0EAwMwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZDAeFw0yNTA0MDgwNjU5NDNaFw0zNTA0MDYwNjU5NDNaMC4xFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEVMBMGA1UEAxMMc2lnc3RvcmUtdHNhMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE4ra2Z8hKNig2T9kFjCAToGG30jky+WQv3BzL+mKvh1SKNR/UwuwsfNCg4sryoYAd8E6isovVA3M4aoNdm9QDi50Z8nTEyvqgfDPtTIwXItfiW/AFf1V7uwkbkAoj0xxco2owaDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0OBBYEFIn9eUOHz9BlRsMCRscsc1t9tOsDMB8GA1UdIwQYMBaAFJjsAe9/u1H/1JUeb4qImFMHic6/MBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMAoGCCqGSM49BAMDA2gAMGUCMDtpsV/6KaO0qyF/UMsX2aSUXKQFdoGTptQGc0ftq1csulHPGG6dsmyMNd3JB+G3EQIxAOajvBcjpJmKb4Nv+2Taoj8Uc5+b6ih6FXCCKraSqupe07zqswMcXJTe1cExvHvvlzGCAdowggHWAgEBMFEwOTEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MSAwHgYDVQQDExdzaWdzdG9yZS10c2Etc2VsZnNpZ25lZAIUOhNULwyQYe68wUMvy4qOiyojiwwwCwYJYIZIAWUDBAIBoIH8MBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjYxMDAxMDExNDQwWjAvBgkqhkiG9w0BCQQxIgQg/5+XOdjRmyklgML8mgjFaKRYEKWIonGcSBomIoOHqQIwgY4GCyqGSIb3DQEJEAIvMX8wfTB7MHkEIIX5J7wHq2LKw7RDVs EO/IGyxog/2nq55thw2dE6zQW3MFUwPaQ7MDkxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEgMB4GA1UEAxMXc2lnc3RvcmUtdHNhLXNlbGZzaWduZWQCFDoTVC8MkGHuvMFDL8uKjosqI4sMMAoGCCqGSM49BAMCBGYwZAIwZk94OzYzSc6xSuVkN47uykYU9ZyAQBWOh6bTMpD0xny+TxnxMmPGjUwtY+GjR2maAjAlwx33pNFEQHHLlGbXuiqTAa5PUj/mrH6CuMwU7ksA+SXf4vHLTAEZ2p0DhKfIShk="}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"xh/psaGn7CoLA4jmZBh8N4pTJaieNgbSIKv1vfzLJUM="},"signature":"MEUCIQC8RhLaKmNKO1FNbbPeaj3wv6MY3fryYynmpao9CRB6vAIgRk9jjSgT4fvRvSn1OpznymB1mbSMEpZTQ170C5wTkok="}} ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.VI0UfM/_old 2026-10-08 15:14:42.583077531 +0200 +++ /var/tmp/diff_new_pack.VI0UfM/_new 2026-10-08 15:14:42.589077783 +0200 @@ -1,6 +1,6 @@ -mtime: 1789741924 -commit: 8e25bf4dd8802cd9baae7d8d418daa809ba1acc9d825b4d663d35fb4892e11a6 +mtime: 1791453966 +commit: 85f46665122f719c2d54c630694248fd713a241c6bdb8e8c5e3304af0ea04f87 url: https://src.opensuse.org/python-interpreters/python310 -revision: 8e25bf4dd8802cd9baae7d8d418daa809ba1acc9d825b4d663d35fb4892e11a6 +revision: 85f46665122f719c2d54c630694248fd713a241c6bdb8e8c5e3304af0ea04f87 projectscmsync: https://src.opensuse.org/python-interpreters/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-08 12:06:06.000000000 +0200 @@ -0,0 +1,7 @@ +.osc +*.obscpio +*.osc +_build.* +.pbuild +*.rej +python310*-build/
