Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python312 for openSUSE:Factory checked in at 2023-06-30 19:59:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python312 (Old) and /work/SRC/openSUSE:Factory/.python312.new.13546 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python312" Fri Jun 30 19:59:53 2023 rev:3 rq:1096094 version:3.12.0b3 Changes: -------- --- /work/SRC/openSUSE:Factory/python312/python312.changes 2023-06-04 00:13:03.281696195 +0200 +++ /work/SRC/openSUSE:Factory/.python312.new.13546/python312.changes 2023-06-30 20:00:21.946176465 +0200 @@ -1,0 +2,28 @@ +Wed Jun 28 19:59:03 UTC 2023 - Matej Cepl <mcepl@suse.com> + +- Update to 3.12.0b3: + - gh-103142: The version of OpenSSL used in Windows and + Mac installers has been upgraded to 1.1.1u to address + CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, + as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 + fixed previously in 1.1.1t (gh-101727). + - gh-102153: urllib.parse.urlsplit() now strips leading C0 + control and space characters following the specification for + URLs defined by WHATWG in response to CVE-2023-24329. + - gh-99889: Fixed a security in flaw in uu.decode() that could + allow for directory traversal based on the input if no + out_file was specified. + - gh-104049: Do not expose the local on-disk + location in directory indexes produced by + http.client.SimpleHTTPRequestHandler. + - gh-103935: trace.__main__ now uses io.open_code() for files + to be executed instead of raw open(). + - gh-102953: The extraction methods in tarfile, and + shutil.unpack_archive(), have a new filter argument that + allows limiting tar features than may be surprising or + dangerous, such as creating files outside the destination + directory. See Extraction filters for details. +- Remove upstreamed patches: + - 00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch + +------------------------------------------------------------------- Old: ---- 00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch Python-3.12.0b1.tar.xz Python-3.12.0b1.tar.xz.asc New: ---- Python-3.12.0b3.tar.xz Python-3.12.0b3.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python312.spec ++++++ --- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.374184959 +0200 +++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.378184982 +0200 @@ -105,7 +105,7 @@ %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so %bcond_without profileopt Name: %{python_pkg_name}%{psuffix} -Version: 3.12.0b1 +Version: 3.12.0b3 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 @@ -162,9 +162,6 @@ # PATCH-FIX-SLE fix_configure_rst.patch bpo#43774 mcepl@suse.com # remove duplicate link targets and make documentation with old Sphinx in SLE Patch35: fix_configure_rst.patch -# PATCH-FIX-UPSTREAM 00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch -- gh#python/cpython#104811 -# fix stack overwrite on 32-bit in perf map test harness -Patch36: 00398-fix-stack-overwrite-on-32-bit-in-perf-map-test-harness-gh-104811-104823.patch BuildRequires: autoconf-archive BuildRequires: automake @@ -427,14 +424,13 @@ %patch09 -p1 %patch15 -p1 %patch29 -p1 -%if 0%{?suse_version} <= 1500 +# %%if 0%%{?suse_version} <= 1500 %patch33 -p1 -%endif -%if 0%{?sle_version} && 0%{?sle_version} <= 150300 +# %%endif +# %%if 0%%{?sle_version} && 0%%{?sle_version} <= 150300 %patch34 -p1 -%endif +# %%endif %patch35 -p1 -%patch36 -p1 # drop Autoconf version requirement sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac ++++++ Python-3.12.0b1.tar.xz -> Python-3.12.0b3.tar.xz ++++++ /work/SRC/openSUSE:Factory/python312/Python-3.12.0b1.tar.xz /work/SRC/openSUSE:Factory/.python312.new.13546/Python-3.12.0b3.tar.xz differ: char 26, line 1 ++++++ fix_configure_rst.patch ++++++ --- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.482185601 +0200 +++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.486185625 +0200 @@ -3,10 +3,8 @@ Misc/NEWS | 2 +- 2 files changed, 1 insertion(+), 3 deletions(-) -Index: Python-3.12.0b1/Doc/using/configure.rst -=================================================================== ---- Python-3.12.0b1.orig/Doc/using/configure.rst -+++ Python-3.12.0b1/Doc/using/configure.rst +--- a/Doc/using/configure.rst ++++ b/Doc/using/configure.rst @@ -599,13 +599,11 @@ macOS Options See ``Mac/README.rst``. @@ -21,14 +19,12 @@ .. cmdoption:: --enable-framework=INSTALLDIR Create a Python.framework rather than a traditional Unix install. Optional -Index: Python-3.12.0b1/Misc/NEWS -=================================================================== ---- Python-3.12.0b1.orig/Misc/NEWS -+++ Python-3.12.0b1/Misc/NEWS -@@ -10780,7 +10780,7 @@ C API +--- a/Misc/NEWS ++++ b/Misc/NEWS +@@ -11173,7 +11173,7 @@ C API - bpo-40939: Removed documentation for the removed ``PyParser_*`` C API. - - bpo-43795: The list in :ref:`stable-abi-list` now shows the public name + - bpo-43795: The list in :ref:`limited-api-list` now shows the public name - :c:struct:`PyFrameObject` rather than ``_frame``. The non-existing entry + :c:type:`PyFrameObject` rather than ``_frame``. The non-existing entry ``_node`` no longer appears in the list. ++++++ no-skipif-doctests.patch ++++++ ++++ 693 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/python312/no-skipif-doctests.patch ++++ and /work/SRC/openSUSE:Factory/.python312.new.13546/no-skipif-doctests.patch ++++++ subprocess-raise-timeout.patch ++++++ --- /var/tmp/diff_new_pack.qXc2cp/_old 2023-06-30 20:00:23.602186315 +0200 +++ /var/tmp/diff_new_pack.qXc2cp/_new 2023-06-30 20:00:23.606186338 +0200 @@ -2,11 +2,9 @@ Lib/test/test_subprocess.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) -Index: Python-3.12.0b1/Lib/test/test_subprocess.py -=================================================================== ---- Python-3.12.0b1.orig/Lib/test/test_subprocess.py -+++ Python-3.12.0b1/Lib/test/test_subprocess.py -@@ -279,7 +279,8 @@ class ProcessTestCase(BaseTestCase): +--- a/Lib/test/test_subprocess.py ++++ b/Lib/test/test_subprocess.py +@@ -280,7 +280,8 @@ class ProcessTestCase(BaseTestCase): "time.sleep(3600)"], # Some heavily loaded buildbots (sparc Debian 3.x) require # this much time to start and print.