Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python312 for openSUSE:Factory
checked in at 2023-06-30 19:59:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python312 (Old)
and /work/SRC/openSUSE:Factory/.python312.new.13546 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python312"
Fri Jun 30 19:59:53 2023 rev:3 rq:1096094 version:3.12.0b3
Changes:
--------
--- /work/SRC/openSUSE:Factory/python312/python312.changes 2023-06-04
00:13:03.281696195 +0200
+++ /work/SRC/openSUSE:Factory/.python312.new.13546/python312.changes
2023-06-30 20:00:21.946176465 +0200
@@ -1,0 +2,28 @@
+Wed Jun 28 19:59:03 UTC 2023 - Matej Cepl <mc...@suse.com>
+
+- Update to 3.12.0b3:
+ - gh-103142: The version of OpenSSL used in Windows and
+ Mac installers has been upgraded to 1.1.1u to address
+ CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464,
+ as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303
+ fixed previously in 1.1.1t (gh-101727).
+ - gh-102153: urllib.parse.urlsplit() now strips leading C0
+ control and space characters following the specification for
+ URLs defined by WHATWG in response to CVE-2023-24329.
+ - gh-99889: Fixed a security in flaw in uu.decode() that could
+ allow for directory traversal based on the input if no
+ out_file was specified.
+ - gh-104049: Do not expose the local on-disk
+ location in directory indexes produced by
+ http.client.SimpleHTTPRequestHandler.
+ - gh-103935: trace.__main__ now uses io.open_code() for files
+ to be executed instead of raw open().
+ - gh-102953: The extraction methods in tarfile, and
+ shutil.unpack_archive(), have a new filter argument that
+ allows limiting tar features than may be surprising or
+ dangerous, such as creating files outside the destination
+ directory. See Extraction filters for details.
+- Remove upstreamed patches:
+ -
00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch
+
+-------------------------------------------------------------------
Old:
----
00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch
Python-3.12.0b1.tar.xz
Python-3.12.0b1.tar.xz.asc
New:
----
Python-3.12.0b3.tar.xz
Python-3.12.0b3.tar.xz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python312.spec ++++++
--- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.374184959 +0200
+++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.378184982 +0200
@@ -105,7 +105,7 @@
%define dynlib()
%{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
%bcond_without profileopt
Name: %{python_pkg_name}%{psuffix}
-Version: 3.12.0b1
+Version: 3.12.0b3
Release: 0
Summary: Python 3 Interpreter
License: Python-2.0
@@ -162,9 +162,6 @@
# PATCH-FIX-SLE fix_configure_rst.patch bpo#43774 mc...@suse.com
# remove duplicate link targets and make documentation with old Sphinx in SLE
Patch35: fix_configure_rst.patch
-# PATCH-FIX-UPSTREAM
00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch
-- gh#python/cpython#104811
-# fix stack overwrite on 32-bit in perf map test harness
-Patch36:
00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch
BuildRequires: autoconf-archive
BuildRequires: automake
@@ -427,14 +424,13 @@
%patch09 -p1
%patch15 -p1
%patch29 -p1
-%if 0%{?suse_version} <= 1500
+# %%if 0%%{?suse_version} <= 1500
%patch33 -p1
-%endif
-%if 0%{?sle_version} && 0%{?sle_version} <= 150300
+# %%endif
+# %%if 0%%{?sle_version} && 0%%{?sle_version} <= 150300
%patch34 -p1
-%endif
+# %%endif
%patch35 -p1
-%patch36 -p1
# drop Autoconf version requirement
sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac
++++++ Python-3.12.0b1.tar.xz -> Python-3.12.0b3.tar.xz ++++++
/work/SRC/openSUSE:Factory/python312/Python-3.12.0b1.tar.xz
/work/SRC/openSUSE:Factory/.python312.new.13546/Python-3.12.0b3.tar.xz differ:
char 26, line 1
++++++ fix_configure_rst.patch ++++++
--- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.482185601 +0200
+++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.486185625 +0200
@@ -3,10 +3,8 @@
Misc/NEWS | 2 +-
2 files changed, 1 insertion(+), 3 deletions(-)
-Index: Python-3.12.0b1/Doc/using/configure.rst
-===================================================================
---- Python-3.12.0b1.orig/Doc/using/configure.rst
-+++ Python-3.12.0b1/Doc/using/configure.rst
+--- a/Doc/using/configure.rst
++++ b/Doc/using/configure.rst
@@ -599,13 +599,11 @@ macOS Options
See ``Mac/README.rst``.
@@ -21,14 +19,12 @@
.. cmdoption:: --enable-framework=INSTALLDIR
Create a Python.framework rather than a traditional Unix install. Optional
-Index: Python-3.12.0b1/Misc/NEWS
-===================================================================
---- Python-3.12.0b1.orig/Misc/NEWS
-+++ Python-3.12.0b1/Misc/NEWS
-@@ -10780,7 +10780,7 @@ C API
+--- a/Misc/NEWS
++++ b/Misc/NEWS
+@@ -11173,7 +11173,7 @@ C API
- bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
- - bpo-43795: The list in :ref:`stable-abi-list` now shows the public name
+ - bpo-43795: The list in :ref:`limited-api-list` now shows the public name
- :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry
+ :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry
``_node`` no longer appears in the list.
++++++ no-skipif-doctests.patch ++++++
++++ 693 lines (skipped)
++++ between /work/SRC/openSUSE:Factory/python312/no-skipif-doctests.patch
++++ and
/work/SRC/openSUSE:Factory/.python312.new.13546/no-skipif-doctests.patch
++++++ subprocess-raise-timeout.patch ++++++
--- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.602186315 +0200
+++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.606186338 +0200
@@ -2,11 +2,9 @@
Lib/test/test_subprocess.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
-Index: Python-3.12.0b1/Lib/test/test_subprocess.py
-===================================================================
---- Python-3.12.0b1.orig/Lib/test/test_subprocess.py
-+++ Python-3.12.0b1/Lib/test/test_subprocess.py
-@@ -279,7 +279,8 @@ class ProcessTestCase(BaseTestCase):
+--- a/Lib/test/test_subprocess.py
++++ b/Lib/test/test_subprocess.py
+@@ -280,7 +280,8 @@ class ProcessTestCase(BaseTestCase):
"time.sleep(3600)"],
# Some heavily loaded buildbots (sparc Debian 3.x) require
# this much time to start and print.
