Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python310 for openSUSE:Factory
checked in at 2023-09-04 22:52:31
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python310 (Old)
and /work/SRC/openSUSE:Factory/.python310.new.1766 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python310"
Mon Sep 4 22:52:31 2023 rev:36 rq:1108911 version:3.10.13
Changes:
--------
--- /work/SRC/openSUSE:Factory/python310/python310.changes 2023-08-06
16:29:13.831570412 +0200
+++ /work/SRC/openSUSE:Factory/.python310.new.1766/python310.changes
2023-09-04 22:52:41.261870333 +0200
@@ -1,0 +2,21 @@
+Mon Sep 4 13:18:29 UTC 2023 - Daniel Garcia <daniel.gar...@suse.com>
+
+- Add fix-sphinx-72.patch to make it work with latest sphinx version
+ gh#python/cpython#97950
+- Update to 3.10.13:
+ - gh-108310: Fixed an issue where instances of ssl.SSLSocket were
+ vulnerable to a bypass of the TLS handshake and included
+ protections (like certificate verification) and treating sent
+ unencrypted data as if it were post-handshake TLS encrypted data.
+ Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by
+ Gregory P. Smith.
+ - gh-107845: tarfile.data_filter() now takes the location of
+ symlinks into account when determining their target, so it will no
+ longer reject some valid tarballs with
+ LinkOutsideDestinationError.
+ - gh-107565: Update multissltests and GitHub CI workflows to use
+ OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
+ - gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data:
+ *consumed was not set.
+
+-------------------------------------------------------------------
Old:
----
Python-3.10.12.tar.xz
Python-3.10.12.tar.xz.asc
New:
----
Python-3.10.13.tar.xz
Python-3.10.13.tar.xz.asc
fix-sphinx-72.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python310.spec ++++++
--- /var/tmp/diff_new_pack.raTNOT/_old 2023-09-04 22:52:44.625989249 +0200
+++ /var/tmp/diff_new_pack.raTNOT/_new 2023-09-04 22:52:44.629989389 +0200
@@ -103,7 +103,7 @@
%define dynlib()
%{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
%bcond_without profileopt
Name: %{python_pkg_name}%{psuffix}
-Version: 3.10.12
+Version: 3.10.13
Release: 0
Summary: Python 3 Interpreter
License: Python-2.0
@@ -180,6 +180,20 @@
# PATCH-FIX-UPSTREAM Revert-gh105127-left-tests.patch bsc#1210638
mc...@suse.com
# Partially revert previous patch
Patch41: Revert-gh105127-left-tests.patch
+# PATCH-FIX-UPSTREAM fix-sphinx-72.patch gh#python/cpython#97950
+# This is a patch with a lot of PR combined to make the doc work with
+# sphinx 7.2
+# This patch has the following github pull requests:
+# * gh#python/cpython#104151
+# * gh#python/cpython#104154
+# * gh#python/cpython#104155
+# * gh#python/cpython#104157
+# * gh#python/cpython#104159
+# * gh#python/cpython#104161
+# * gh#python/cpython#104163
+# * gh#python/cpython#104221
+# * gh#python/cpython#107246
+Patch42: fix-sphinx-72.patch
BuildRequires: autoconf-archive
BuildRequires: automake
BuildRequires: fdupes
@@ -455,6 +469,7 @@
%patch39 -p1
%patch40 -p1
%patch41 -p1
+%patch42 -p1
# drop Autoconf version requirement
sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac
++++++ Python-3.10.12.tar.xz -> Python-3.10.13.tar.xz ++++++
/work/SRC/openSUSE:Factory/python310/Python-3.10.12.tar.xz
/work/SRC/openSUSE:Factory/.python310.new.1766/Python-3.10.13.tar.xz differ:
char 27, line 1
++++++ Revert-gh105127-left-tests.patch ++++++
--- /var/tmp/diff_new_pack.raTNOT/_old 2023-09-04 22:52:44.701991935 +0200
+++ /var/tmp/diff_new_pack.raTNOT/_new 2023-09-04 22:52:44.701991935 +0200
@@ -19,10 +19,10 @@
4 files changed, 31 insertions(+), 159 deletions(-)
create mode 100644
Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
-Index: Python-3.10.12/Doc/library/email.utils.rst
+Index: Python-3.10.13/Doc/library/email.utils.rst
===================================================================
---- Python-3.10.12.orig/Doc/library/email.utils.rst
-+++ Python-3.10.12/Doc/library/email.utils.rst
+--- Python-3.10.13.orig/Doc/library/email.utils.rst
++++ Python-3.10.13/Doc/library/email.utils.rst
@@ -67,11 +67,6 @@ of the new API.
*email address* parts. Returns a tuple of that information, unless the
parse
fails, in which case a 2-tuple of ``('', '')`` is returned.
@@ -70,10 +70,10 @@
.. function:: parsedate(date)
-Index: Python-3.10.12/Lib/email/utils.py
+Index: Python-3.10.13/Lib/email/utils.py
===================================================================
---- Python-3.10.12.orig/Lib/email/utils.py
-+++ Python-3.10.12/Lib/email/utils.py
+--- Python-3.10.13.orig/Lib/email/utils.py
++++ Python-3.10.13/Lib/email/utils.py
@@ -106,54 +106,12 @@ def formataddr(pair, charset='utf-8'):
return address
@@ -154,10 +154,10 @@
return addrs[0]
-Index: Python-3.10.12/Lib/test/test_email/test_email.py
+Index: Python-3.10.13/Lib/test/test_email/test_email.py
===================================================================
---- Python-3.10.12.orig/Lib/test/test_email/test_email.py
-+++ Python-3.10.12/Lib/test/test_email/test_email.py
+--- Python-3.10.13.orig/Lib/test/test_email/test_email.py
++++ Python-3.10.13/Lib/test/test_email/test_email.py
@@ -3288,90 +3288,32 @@ Foo
[('Al Person', 'aper...@dom.ain'),
('Bud Person', 'bper...@dom.ain')])
@@ -268,10 +268,10 @@
def test_getaddresses_embedded_comment(self):
"""Test proper handling of a nested comment"""
-Index:
Python-3.10.12/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
+Index:
Python-3.10.13/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
===================================================================
----
Python-3.10.12.orig/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
-+++
Python-3.10.12/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
+---
Python-3.10.13.orig/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
++++
Python-3.10.13/Misc/NEWS.d/next/Security/2023-06-13-20-52-24.gh-issue-102988.Kei7Vf.rst
@@ -1,3 +1,8 @@
+Reverted the :mod:`email.utils` security improvement change released in
+3.12beta4 that unintentionally caused :mod:`email.utils.getaddresses` to fail
++++++ fix-sphinx-72.patch ++++++
++++ 3118 lines (skipped)
