Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python311 for openSUSE:Factory checked in at 2026-10-13 17:43:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python311 (Old) and /work/SRC/openSUSE:Factory/.python311.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python311" Tue Oct 13 17:43:24 2026 rev:75 rq:1383247 version:3.11.17 Changes: -------- --- /work/SRC/openSUSE:Factory/python311/python311.changes 2026-09-24 22:55:20.894915530 +0200 +++ /work/SRC/openSUSE:Factory/.python311.new.3698736/python311.changes 2026-10-13 17:43:55.394739527 +0200 @@ -1,0 +2,91 @@ +Fri Oct 2 22:45:02 UTC 2026 - Matej Cepl <[email protected]> +- Update to 3.11.17: + - Security + - gh-158446: Fix a crash or incorrect output that could occur + when formatting a float or complex with a precision close + to the platform’s INT_MAX. PyOS_double_to_string() now + raises ValueError for any precision of that magnitude, + regardless of presentation type or value, as the format + string parsers already did for precisions above INT_MAX. + - gh-157190: Fixed a vulnerability in the tarfile data and + tar extraction filters where a crafted archive using a hard + link to a symbolic link could change the permissions and + modification time of a file outside the destination + directory, and expose its contents inside the extracted + tree. This addresses CVE 2026-82049. (bsc#1280459, + CVE-2026-82049) + - gh-156793: asyncio: loop.start_tls() and + loop.create_connection() now validate the server_hostname + argument if an ssl.SSLContext is passed with check_hostname + set to True, emitting DeprecationWarning if server_hostname + is missing. (This will raise ValueError in Python 3.13 and + later.) (bsc#1283826, CVE-2026-19553) + - gh-156793: ssl.SSLContext.wrap_bio() now validates its + server_side, server_hostname and session arguments similar + to ssl.SSLContext.wrap_socket(), but for backward + compatiblity reasons emits DeprecationWarning instead of + ValueError. + In particular, a context with check_hostname enabled and no + server_hostname passed to wrap_bio() now emits + DeprecationWarning to indicate the hostname wasn’t + checked. (In Python 3.13 and later, this raises + ValueError.) + - gh-157265: In tarfile, when extracting a link falls back to + extracting a member of the archive, skip the member when + the filter function returns None when called with the + extracted member’s name replaced with the link’s. + - gh-157190: Fixed a vulnerability in the tarfile data and + tar extraction filters where a crafted archive using a hard + link to a symbolic link could change the permissions and + modification time of a file outside the destination + directory, and expose its contents inside the extracted + tree. This addresses CVE 2026-82049. (bsc#1280459, + CVE-2026-82049) + - gh-157953: Update bundled libexpat to version 2.8.5. + - gh-156002: Bound the amount of data zipfile decompresses + per read for members compressed with bzip2, LZMA, or + Zstandard, matching the existing limit for deflate. A small + archive member could previously expand into an unbounded + allocation even when read in small chunks. (bsc#1277111, + CVE-2026-15310) + - gh-155999: Fix the tarfile tar and data extraction filters + creating directories outside the destination for members + whose name leaves the destination and returns to it, such + as ../evil/../dest/sub/file. The containment check used the + resolved path, but intermediate directories were created + from the name as given. (bsc#1276227, CVE-2026-19672) + - gh-156293: Fix a crash in ssl when an sni_callback switches + a connection to another SSLContext and the context that + carries the callback is no longer referenced by the + application. Servers that keep their sni_callback context + alive (the usual case when it wraps the listening socket or + is stored on the server object) were not affected. This + addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) + - gh-155292: Change the stringprep module and encodings.idna + codec to not consider Unicode codepoint attributes beyond + those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) + - gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr + credentials to the URL scheme, preventing credentials + stored for an HTTPS URL from being used for a matching HTTP + URL, while URIs without a scheme continue to match any + scheme. (bsc#1276223, CVE-2026-15806) + - Library + - gh-156002: zipfile again reads members through a + third-party decompressor installed by monkey-patching the + private _get_decompressor() to return an object that only + implements old BZ2Decompressor API from Python 3.3. Note + that decompressors without needs_input and two-argument + decompress() are vulnerable to CVE 2026-15310. + - gh-156353: Fix configparser parsing when using whitespace + in delimiters. + - Build + - gh-155757: Set the --argv0 argument to wasmtime for WASI + builds so the test suite passes. Otherwise the calculated + paths to the stdlib for frozen modules is incorrect. +- Removed upstreamed patches: + * CVE-2026-15806-HTTPPasswordMgr-scheme.patch + * CVE-2026-17084-stringprep-rfc3454.patch + * CVE-2026-19672-tarfile-outside-dirs.patch + * CVE-2026-15310-bound-zipfile-decompression.patch + +------------------------------------------------------------------- Old: ---- CVE-2026-15310-bound-zipfile-decompression.patch CVE-2026-15806-HTTPPasswordMgr-scheme.patch CVE-2026-17084-stringprep-rfc3454.patch CVE-2026-19672-tarfile-outside-dirs.patch Python-3.11.16.tar.xz Python-3.11.16.tar.xz.sigstore New: ---- Python-3.11.17.tar.xz Python-3.11.17.tar.xz.sigstore ----------(Old B)---------- Old: * CVE-2026-19672-tarfile-outside-dirs.patch * CVE-2026-15310-bound-zipfile-decompression.patch Old:- Removed upstreamed patches: * CVE-2026-15806-HTTPPasswordMgr-scheme.patch * CVE-2026-17084-stringprep-rfc3454.patch Old: * CVE-2026-15806-HTTPPasswordMgr-scheme.patch * CVE-2026-17084-stringprep-rfc3454.patch * CVE-2026-19672-tarfile-outside-dirs.patch Old: * CVE-2026-17084-stringprep-rfc3454.patch * CVE-2026-19672-tarfile-outside-dirs.patch * CVE-2026-15310-bound-zipfile-decompression.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python311.spec ++++++ --- /var/tmp/diff_new_pack.prDQFT/_old 2026-10-13 17:43:56.989806371 +0200 +++ /var/tmp/diff_new_pack.prDQFT/_new 2026-10-13 17:43:56.991806455 +0200 @@ -103,7 +103,7 @@ # _md5.cpython-38m-x86_64-linux-gnu.so %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so Name: %{python_pkg_name}%{psuffix} -Version: 3.11.16 +Version: 3.11.17 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 @@ -206,18 +206,6 @@ # PATCH-FIX-UPSTREAM bsc1263083-http-cookies-atob-utf8.patch bsc#1263083 [email protected] # Use decodeURIComponent() for UTF-8 support in js_output() Patch58: bsc1263083-http-cookies-atob-utf8.patch -# PATCH-FIX-UPSTREAM CVE-2026-15806-HTTPPasswordMgr-scheme.patch bsc#1276223 [email protected] -# Scope HTTPPasswordMgr credentials by URL scheme -Patch59: CVE-2026-15806-HTTPPasswordMgr-scheme.patch -# PATCH-FIX-UPSTREAM CVE-2026-17084-stringprep-rfc3454.patch bsc#1276226 [email protected] -# Don't consider Unicode codepoint attributes outside RFC 3454 -Patch60: CVE-2026-17084-stringprep-rfc3454.patch -# PATCH-FIX-UPSTREAM CVE-2026-19672-tarfile-outside-dirs.patch bsc#1276227 [email protected] -# in tarfile, handle a member that leaves the destination and comes back -Patch61: CVE-2026-19672-tarfile-outside-dirs.patch -# PATCH-FIX-UPSTREAM CVE-2026-15310-bound-zipfile-decompression.patch bsc#1277111 [email protected] -# Bound zipfile decompression for bzip2/LZMA (gh#python/cpython!156003) -Patch62: CVE-2026-15310-bound-zipfile-decompression.patch ### END OF PATCHES BuildRequires: autoconf-archive BuildRequires: automake ++++++ Python-3.11.16.tar.xz -> Python-3.11.17.tar.xz ++++++ /work/SRC/openSUSE:Factory/python311/Python-3.11.16.tar.xz /work/SRC/openSUSE:Factory/.python311.new.3698736/Python-3.11.17.tar.xz differ: char 26, line 1 ++++++ Python-3.11.16.tar.xz.sigstore -> Python-3.11.17.tar.xz.sigstore ++++++ --- /work/SRC/openSUSE:Factory/python311/Python-3.11.16.tar.xz.sigstore 2026-09-11 19:00:07.697610170 +0200 +++ /work/SRC/openSUSE:Factory/.python311.new.3698736/Python-3.11.17.tar.xz.sigstore 2026-10-13 17:43:55.351737725 +0200 @@ -1 +1 @@ -{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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 8vGVjoM7KvX020re+1LeXnLeGRfKrxV3Ohm/ZPKi6YwCgYIKoZIzj0EAwMDaAAwZQIxAJKFPENtv+doAETBVlegQrilDa9teHP01IWm8Lux2qAlerbS0X/f94SzuqTuqw75KAIwMFHsWELECaOaHXzwqCwPECDZkqmiuIgyzJMiOY37ogqI4FTTxXLWNdYOBs28z4KI"},"tlogEntries":[{"logIndex":"2442742138","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1786577619","inclusionPromise":{"signedEntryTimestamp":"MEUCIEXEfmreEGmfvtdI6/GvmcesSNd4M9ztRi+soBn37AMSAiEA6F6WhbFGXZKWcdRdgTuC2MEvOLQrkEp8kSA6MoFfKdw="},"inclusionProof":{"logIndex":"2320837876","rootHash":"tLEjVgkPvjw6p0gW829BGY2bg+co8kTZ6EOc8sb4w4E=","treeSize":"2320837996","hashes":["9oOrBcIE0GmspyfWdPlGkPk3ztO8uxncSyhtx7fpgRM=","R0C6ZTs5XaySZNa9ys3EuOuEeu+xubthjdHSJ+6ynDs=","eYOd0qz160pvhNia1sSl+z+GAmH2++qmM49N2k08Amg=","toYiG+YFojLrct1td5hLDb2euwLU3Tii9QVIy8ylyX4=","Qi7EGPsTXJgEGzALJGN9zXera9au3RH4kcK3YuWL66Q=","PdvkQAKleFNKz61c5LPLKJltM7HqPH+aTCgVgJ3VelA=","DqcJeUcjGJi5k/q1Uotf4Yx1wzi+gR+SdqgKA46mJQY= ","Nwp1ctd1yvP8fekFYX6JK2FHRnDyursmF39obWNi+BE=","InGuu2yML4wR0xwn6alsaMeif31YdawLkVGAL9zCclE=","o6FEkyIj68yiskKz5EkriJXRv4UGGZf2cAZfMaiCe+I=","Mq04EaWUl64ysUbQh56rAKh7pEVu6OUGgv7QT/M8bfk=","dtr3gF37QBi8dTHFFBsXQCJ1dp8/7L6RifFh6/DIv2k=","T2NKmdJrIJ9ijegazbOe6pbmJqCfVPNREh8sLBn3BQI=","idxH7nlAPWU7iZWZfcsn2a6elqdvieyLGf7kDho5F2s=","t0Kxuz4wgjA2WMJAiqRkioEg4N/1Q8fpaZ46tznUp/A=","7NLCBAvZaVsKvlXyy0JA5YCKHkOV6F47NTF7COo2eOA=","mYkFdqU5C9m3w88wTn9l6UpYo+PI93c232s+vBiBEpM=","ygTG08vB2EEmJQPXRvF5H06Tlac72AkODENK7PhCPkw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2320837996\ntLEjVgkPvjw6p0gW829BGY2bg+co8kTZ6EOc8sb4w4E=\n\n— rekor.sigstore.dev wNI9ajBFAiEA1VSieOjEYYc4c+GaWo1LCU9hIUbux4XVMYqwfeXFlSICIGWkyDs+FcXWzvHfbdiOK26jpHbO2AG+VeUZ7xACL02M\n"}},"canonicalizedBody":"eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI5MWJjZGViZmRkZTIzOWEw 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 lV2ZEhSTUNsTllPVlZyY2xadWJ5OUhZbVYzWTBScFNTOTRXbXd3ZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDBsbldVUldVakJTUVZGSUwwSkNaM2RHYjBWVlkwZEdhV0pIT1c1ak1rWnpVVWhDTldSSGFIWmlhVFYyWTIxamQwdFJXVXRMZDFsQ1FrRkhSQXAyZWtGQ1FWRlJZbUZJVWpCalNFMDJUSGs1YUZreVRuWmtWelV3WTNrMWJtSXlPVzVpUjFWMVdUSTVkRTFEYzBkRGFYTkhRVkZSUW1jM09IZEJVV2RGQ2toUmQySmhTRkl3WTBoTk5reDVPV2haTWs1MlpGYzFNR041Tlc1aU1qbHVZa2RWZFZreU9YUk5Sbk5IUTJselIwRlJVVUpuTnpoM1FWSm5SVlJSZUV3S1VUSm9WbVZGTVVWWmVrSk9aV3RWZVZSdGNFNU5SVEUyVWxST1QxSkZSVEJVVjNCdVpVVTFWV0V4VGtsTmJXZDNXa1ZvUTJWck9YQldXR3hUWVZaV05RcFZiVEZIWVd4cmVVOVVSbWxpYkVvMlZFY3hhMlJ0U1hsYVNFNWhWWHBXY1ZscVNYZE5TVWRLUW1kdmNrSm5SVVZCWkZvMVFXZFJRMEpJYzBWbFVVSXpDa0ZJVlVFelZEQjNZWE5pU0VWVVNtcEhValJqYlZkak0wRnhTa3RZY21wbFVFc3pMMmcwY0hsblF6aHdOMjgwUVVGQlIyWXJSazFITUVGQlFVSkJUVUVLVW1wQ1JVRnBRbmxTYm1aSFYyWklTRVJ1ZVdweVQwSnJTbGhVZEV0WFp6QnNSbGhJUmxoSGNWRm5aakF4VTBFM0wzZEpaMW80ZGtkV2FtOU5OMHQyV0Fvd01qQnlaU3N4VEdWWWJreGxSMUptUzNKNFZqTlBhRzB2V2xCTGFUWlpkME5uV1 VsTGIxcEplbW93UlVGM1RVUmhRVUYzV2xGSmVFRktTMFpRUlU1MENuWXJaRzlCUlZSQ1ZteGxaMUZ5YVd4RVlUbDBaVWhRTURGSlYyMDRUSFY0TW5GQmJHVnlZbE13V0M5bU9UUlRlblZ4VkhWeGR6YzFTMEZKZDAxR1NITUtWMFZNUlVOaFQyRklXSHAzY1VOM1VFVkRSRnByY1cxcGRVbG5lWHBLVFdsUFdUTTNiMmR4U1RSR1ZGUjRXRXhYVG1SWlQwSnpNamg2TkV0SkNpMHRMUzB0UlU1RUlFTkZVbFJKUmtsRFFWUkZMUzB0TFMwSyJ9fX19"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"MIIE6TADAgEAMIIE4AYJKoZIhvcNAQcCoIIE0TCCBM0CAQMxDTALBglghkgBZQMEAgEwgcEGCyqGSIb3DQEJEAEEoIGxBIGuMIGrAgEBBgkrBgEEAYO/MAIwMTANBglghkgBZQMEAgEFAAQglQnUvJZ6FOR3nltfdHRPp/6bqLT12zeHeQqBugHeVIgCFB4yRtFRR6XqQzuJQ0RqnjkfqSd2GA8yMDI2MDgxMjIzMzMzOFowAwIBAQIIEmu0yGpWITygMqQwMC4xFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEVMBMGA1UEAxMMc2lnc3RvcmUtdHNhoIICFDCCAhAwggGWoAMCAQICFDoTVC8MkGHuvMFDL8uKjosqI4sMMAoGCCqGSM49BAMDMDkxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEgMB4GA1UEAxMXc2lnc3RvcmUtdHNhLXNlbGZzaWduZWQwHhcNMjUwNDA4MDY1OTQzWhcNMzUwNDA2MDY1OTQzWjAuMRUwEwYDVQQKEwxzaWdzdG9yZS5kZXYxFTATBgNVBAMTDHNpZ3N0b3JlLXRzYTB2MBAGByqGS M49AgEGBSuBBAAiA2IABOK2tmfISjYoNk/ZBYwgE6Bht9I5MvlkL9wcy/pir4dUijUf1MLsLHzQoOLK8qGAHfBOorKL1QNzOGqDXZvUA4udGfJ0xMr6oHwz7UyMFyLX4lvwBX9Ve7sJG5AKI9McXKNqMGgwDgYDVR0PAQH/BAQDAgeAMB0GA1UdDgQWBBSJ/XlDh8/QZUbDAkbHLHNbfbTrAzAfBgNVHSMEGDAWgBSY7AHvf7tR/9SVHm+KiJhTB4nOvzAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAKBggqhkjOPQQDAwNoADBlAjA7abFf+imjtKshf1DLF9mklFykBXaBk6bUBnNH7atXLLpRzxhunbJsjDXdyQfhtxECMQDmo7wXI6SZim+Db/tk2qI/FHOfm+ooehVwgiq2kqrqXtO86rMDHFyU3tXBMbx775cxggHbMIIB1wIBATBRMDkxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEgMB4GA1UEAxMXc2lnc3RvcmUtdHNhLXNlbGZzaWduZWQCFDoTVC8MkGHuvMFDL8uKjosqI4sMMAsGCWCGSAFlAwQCAaCB/DAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI2MDgxMjIzMzMzOFowLwYJKoZIhvcNAQkEMSIEIGz7A6ci9roGfIE8rW7kkuPSVzpPZdCmcNeCQqcKYp5fMIGOBgsqhkiG9w0BCRACLzF/MH0wezB5BCCF+Se8B6tiysO0Q1bBDvyBssaIP9p6uebYcNnROs0FtzBVMD2kOzA5MRUwEwYDVQQKEwxzaWdzdG9yZS5kZXYxIDAeBgNVBAMTF3NpZ3N0b3JlLXRzYS1zZWxmc2lnbmVkAhQ6E1QvDJBh7rzBQy/Lio6LKiOLDDAKBggqhkjOPQQDAgRnMGUCMQDMMm0KJ8gP6fqt4nJwkD+CZ9rNXiV3T1kmdpjYQC GlUWiG6HlCKbk3roDOCy8+tV8CME9e8OJgtiWoAjVllD18FOy78bL+PesO8MgCjWLsm7VOpHaSbLf2YLMj+1RHCl9CQA=="}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"kbzev93iOaADrpNzin/OD5Iw/uXEvCuG9uboxvmKq+g="},"signature":"MEUCIQChii0s+0LibKnO7pDM6dqLzNJMof8CT3/YbtM7lek8zwIgHGk4rGiRdSybWhCr3miDPpzSxzayh7OCU3LcX8mfs/E="}} +{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"MIIDKjCCAq+gAwIBAgIUP3Cj54wBUtSN6MnZbqeuY85gLmwwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjYxMDAxMDExNDU3WhcNMjYxMDAxMDEyNDU3WjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9GAuLpL7tRxOZs+jayITpGNUea8fQmNYvbWz7KedP1tghUIFX5MxgixaoKa7bhe8MAfUyc58DLgt8WNrcRDNG6OCAc4wggHKMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUsvWCFCOanbQZ+TUi+H8l3MzWYlIwHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wIgYDVR0RAQH/BBgwFoEUcGFibG9nc2FsQHB5dGhvbi5vcmcwKQYKKwYBBAGDvzABAQQbaHR0cHM6Ly9hY2NvdW50cy5nb29nbGUuY29tMCsGCisGAQQBg78wAQgEHQwbaHR0cHM6Ly9hY2NvdW50cy5nb29nbGUuY29tMFsGCisGAQQBg78wARgETQxLQ2hVeE1EYzBNekUyTmpNME16RTNOREE0TWpneE5Ua1NIMmgwZEhCek9pVXlSaVV5Um1GalkyOTFiblJ6TG1kdmIyZHNaUzVqYjIwMIGJBgorBgEEAdZ5AgQCBHsEeQB3AHUA3T0wasbHETJjGR4cmWc3AqJKXrjePK3/h4pygC8p7o4AAAGg9QdkLQAABAMARjBEAiBOZcnaDRZ0vtITzqZnGxIKDmft5viyY2Vnl1Y4F98DrQIgf VDbidCMYzBsMGrh3i01vSLBY+gpPMlshtFH3IGHfQwwCgYIKoZIzj0EAwMDaQAwZgIxAMzy6WcjmZ6vV69ZrNGUjIiBMBzR+hUADzJjhZbW+0qXDBh/tajIpWHuvpAQVzN4XgIxAMMW1ytrMrwOvi9jk/i3SloMnC8juKGO5HyrTYtHmWuPuynjXQW27R8t8LhCv7U62Q=="},"tlogEntries":[{"logIndex":"3028522094","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"hashedrekord","version":"0.0.1"},"integratedTime":"1790817297","inclusionPromise":{"signedEntryTimestamp":"MEQCIFzBpuTMxJWVo6vqOAihF63ViMDyKhFyH3FnIlLPv2WtAiBWlEOx2JNokFM36Zi8ep6sCxR+3SJJZt1ozwNdOct+KA=="},"inclusionProof":{"logIndex":"2906617832","rootHash":"fFRwlqu61fupL031Yxxwj78IgPYBnTNc02mbtL51K4w=","treeSize":"2906617862","hashes":["sUmaQOh0n+5Bi67LwkqGUN1N713esiMYshXdSNIwOmU=","F5fjEYzSYI/IotLC52Gyzkcyc/CqN0oLOJi2Q43q9W8=","w/YYQZvrJGalysO7lRq73nfaAn08tzHraRbLvgim/yw=","ycvL51c2k1WHaXu0OkuHRDRLkxJGKeNZ4pVsv5N2JMs=","3ONCbUOv0ADERxioxFFFwNDOX4wFAChTfksvKE0aFXk=","vuVlX8WSo7YMWL0hO720kRSgZxnnYcHet4ZYVnJstII=","ipvHwOfagMmCRBbbYZjV2DnTe/nncIg3XgiEaX7/ NX8=","UPCDiKQQud9yL4fdl0WTv+DxMlSvT4BKe+JeDWgdJrQ=","BxLz46VVr/GbhITtQqajtrglVGrhkxVMorrskzWCKP8=","QRtbF4GjWReiOB1lorMSuvPfMFBrz6Ak6fYNrQuzdnA=","fxcOEPFuWcREAM1qNW+V5DpL9RtBGW04jxqXzv5lsq4=","uINoDvzk7cPcU1SJmY9BsQRh+Scfw3/CVTDpxl9FOBU=","32nwxgMjET7NGcYM9Pv05zguluBiBfd/CG8jVT+W2eU=","lBFVodO6xgl4BY/sEnfnDpvvJkVHa4Nsy11lTuRFRlM=","nZ+/VxFAY+NclDdnpAd+RRr9VbR6+8ag7kvefxBWv5A=","jWM2/mBgUk+DxVMiveOmCv8VMwfCfOImfval7bFsg98=","gC5tIzrSNV/K+W+H/hQriFY0CyGsvkXy20igMFHKeok=","ShItQJ+hT7oag+MfncFLsQZkRTVG3jmpsvsEgSDjlWM=","viajkCmK6VpH9YFpBl7uEv5LO472fSOeOb639THV0QA=","ZQ6rIcD2ggDozkmorpBeVxj2C9MK7qEskWgeiO3dlY0=","W63Nufihd6Q6Q/ecTaQuv/f1NEWXcsdQbZ0DPiY3mxw=","cIz1OY2tO8cVEgp0TmAffPApps2hJuAcAN+pESrpHHY=","4lYk7cX8PszZLoyQMWjMDB1BOBn4f7hehtFiHo92e5Y=","ttpxd0TJprOUtb/8Wf5DeIzwNtUw72Q0YnXE2LFMIZo=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2906617862\nfFRwlqu61fupL031Y xxwj78IgPYBnTNc02mbtL51K4w=\n\n— rekor.sigstore.dev wNI9ajBGAiEA13Je+MxPF5ITUTLfoQ7xKR7hlMXQ5sBJCtDFlCiKA6QCIQCEQYLrAoIVygINWJ236mCYLwTFp19O/gWuXcoxhPkUIQ==\n"}},"canonicalizedBody":"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"}],"timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"MIIE6jADAgEAMIIE4QYJKoZIhvcNAQcCoIIE0jCCBM4CAQMxDTALBglghkgBZQMEAgEwgcMGCyqGSIb3DQEJEAEEoIGzBIGwMIGtAgEBBgkrBgEEAYO/MAIwMTANBglghkgBZQMEAgEFAAQgCqW2Iuo3VmsZ5a2kJKopMNZTJZNyhRUohB+5bxG+kUECFQCUEnoUMq3bqzo6iOJq2MAaRPHKzRgPMjAyNjEwMDEwMTE0NTdaMAMC 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 w0BCQUxDxcNMjYxMDAxMDExNDU3WjAvBgkqhkiG9w0BCQQxIgQg/jf8y5LswPzk6RCdvK5jdjw1z7/LYJgMq12kUgeLXmEwgY4GCyqGSIb3DQEJEAIvMX8wfTB7MHkEIIX5J7wHq2LKw7RDVsEO/IGyxog/2nq55thw2dE6zQW3MFUwPaQ7MDkxFTATBgNVBAoTDHNpZ3N0b3JlLmRldjEgMB4GA1UEAxMXc2lnc3RvcmUtdHNhLXNlbGZzaWduZWQCFDoTVC8MkGHuvMFDL8uKjosqI4sMMAoGCCqGSM49BAMCBGYwZAIwbVL5cM0ICFsu5KbbgF9XH+v+pcWMRSrHutXv2if2FzR0WPjLk/4IPe/6lNUolJE+AjAsgpxqx9j2ZIIz7nN0DqROCinKfxAXQzUDApMn7jyq4ryd4cE47hVjGKrXsc/vdYQ="}]}},"messageSignature":{"messageDigest":{"algorithm":"SHA2_256","digest":"v7dK05764nzaUQ8TSrQI4A+ZksVoUc/Asc21ZG2hFZk="},"signature":"MEUCIE3LBtISlZOHx+q0gRG9fdlJFBSjej1n6KSIaAse4k1fAiEA2zRlb1AinwESgxVwCduClj92ojxfUjk+JqCJ5hbxbnY="}} ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.prDQFT/_old 2026-10-13 17:43:57.132812364 +0200 +++ /var/tmp/diff_new_pack.prDQFT/_new 2026-10-13 17:43:57.135812490 +0200 @@ -1,6 +1,6 @@ -mtime: 1789690797 -commit: 5b7c5d747e0961cb68cf4ec3b1d41113884019b2b05eabc835b500919d7302a0 +mtime: 1791439815 +commit: 32e017d54e22f632cfdf83fe6105c707dae9d04af03371f6401d66a627a888f9 url: https://src.opensuse.org/python-interpreters/python311 -revision: 5b7c5d747e0961cb68cf4ec3b1d41113884019b2b05eabc835b500919d7302a0 +revision: 32e017d54e22f632cfdf83fe6105c707dae9d04af03371f6401d66a627a888f9 projectscmsync: https://src.opensuse.org/python-interpreters/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-08 08:10:15.000000000 +0200 @@ -0,0 +1,7 @@ +_build.* +*.obscpio +*.osc +.osc +.pbuild +python311*-build/ +*.rej
