Commit Graph

863 Commits

Author SHA1 Message Date
Charalampos Stratakis
7b176c1385 Update to 3.12.9
Security fix for CVE-2025-0938

Resolves: RHEL-77264
2025-02-04 23:08:53 +01:00
Charalampos Stratakis
1d8a03b678 Security fix for CVE-2024-12254
Resolves: RHEL-70450
2024-12-10 16:38:29 +01:00
Charalampos Stratakis
9b4125da93 Update to 3.12.8
Security fix for CVE-2024-9287

Resolves: RHEL-64877
2024-12-10 16:36:09 +01:00
Lukáš Zachar
5a89f0e626 Change the test source location
Change the test source location to support evolving downstream testing
requirements. This is needed both for downstream certification
activities and changes to test development for internal infrastructure
differences.
2024-12-02 09:18:13 +01:00
Troy Dawson
faa69d51c8 Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 09:05:12 -07:00
Tomáš Hrnčiar
7791e1d981 Update to 3.12.6
Resolves: RHEL-57397
2024-09-18 22:28:32 +02:00
Charalampos Stratakis
af99d24518 Security fix for CVE-2024-8088
Resolves: RHEL-55923
2024-08-26 14:01:47 +02:00
Tomáš Hrnčiar
a3bab2af21 Update to 3.12.5
Security fix for CVE-2024-6923

Removed patch 323 due to being upstreamed

Resolves: RHEL-53036
2024-08-08 17:16:32 +02:00
Miro Hrončok
8e96f03e3d Build Python with -O3
https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3

Resolves: RHEL-45315
2024-07-17 14:39:52 +02:00
Charalampos Stratakis
c0743142b2 Fix issues uncovered by static analysis
Resolves: RHEL-45021
2024-07-11 17:22:12 +02:00
Tomáš Hrnčiar
65ab1b123f Require expat >= 2.6 to prevent errors when creating venvs with older expat
The code in CPython uses XML_SetReparseDeferralEnabled when expat is >= 2.6 during the build.
However, when users upgrade Python independently on the expat package,
they may have expat 2.5 installed and see errors like:

    $ python3.1X -m venv venv
    Error: Command '['venv/bin/python3.1X', '-m', 'ensurepip', '--upgrade', '--default-pip']' returned non-zero exit status 1.

    $ venv/bin/python3.1X -m ensurepip --upgrade --default-pip
    Traceback (most recent call last):
      ...
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/commands/install.py", line 15, in <module>
        from pip._internal.cli.req_command import (
        ...<3 lines>...
        )
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/cli/req_command.py", line 21, in <module>
        from pip._internal.index.package_finder import PackageFinder
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/index/package_finder.py", line 30, in <module>
        from pip._internal.req import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/__init__.py", line 8, in <module>
        from .req_install import InstallRequirement
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/req/req_install.py", line 40, in <module>
        from pip._internal.operations.install.wheel import install_wheel
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_internal/operations/install/wheel.py", line 39, in <module>
        from pip._vendor.distlib.scripts import ScriptMaker
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/scripts.py", line 16, in <module>
        from .compat import sysconfig, detect_encoding, ZipFile
      File "/tmp/.../pip-24.0-py3-none-any.whl/pip/_vendor/distlib/compat.py", line 81, in <module>
        import xmlrpc.client as xmlrpclib
      File "/usr/lib64/python3.1X/xmlrpc/client.py", line 138, in <module>
        from xml.parsers import expat
      File "/usr/lib64/python3.1X/xml/parsers/expat.py", line 4, in <module>
        from pyexpat import *
    ImportError: /usr/lib64/python3.1X/lib-dynload/pyexpat.cpython-31X-x86_64-linux-gnu.so: undefined symbol: XML_SetReparseDeferralEnabled
    Traceback (most recent call last):
      ...
    subprocess.CalledProcessError: Command '['venv/bin/python3.1X', '-W', 'ignore::DeprecationWarning', '-c', '\nimport runpy\nimport sys\nsys.path = [\'/tmp/.../pip-24.0-py3-none-any.whl\'] + sys.path\nsys.argv[1:] = [\'install\', \'--no-cache-dir\', \'--no-index\', \'--find-links\', \'/tmp/...\', \'--upgrade\', \'pip\']\nrunpy.run_module("pip", run_name="__main__", alter_sys=True)\n']' returned non-zero exit status 1.

Thanks to Markus Falb for discovering this problem.

https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/7XHGWHBQDNFKNGSZTP44SSD6PQKZPG6C/
2024-07-04 14:52:19 +02:00
Tomáš Hrnčiar
c2001b938e Update to 3.12.4
Resolves: RHEL-44054
2024-07-04 10:48:19 +02:00
Tomáš Hrnčiar
db9a20acee Update to 3.12.3 2024-07-03 21:06:43 +02:00
Troy Dawson
d2df86f2be Bump release for June 2024 mass rebuild 2024-06-24 09:16:39 -07:00
Charalampos Stratakis
af16c99e30 Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40769
2024-06-11 21:43:32 +02:00
Charalampos Stratakis
6302d4b3b0 Support OpenSSL FIPS mode
Disable the builtin hashlib hashes except blake2

Resolves: RHEL-3906
2024-05-28 21:22:36 +02:00
Charalampos Stratakis
5e6c857143 Add Red Hat configuration for CVE-2007-4559
Resolves: RHEL-33847
2024-05-09 15:13:17 +02:00
Miro Hrončok
7cfc38bcfc Add RHEL gating configuration 2024-05-07 17:15:35 +02:00
Miro Hrončok
b919f67d5c CI: Remove tox+virtualenv tests until they are available in EPEL 10 2024-05-07 17:14:22 +02:00
Miro Hrončok
9f5de9df82 Remove the nis module, drop the dependency on libnsl2 2024-04-23 18:08:50 +02:00
Miro Hrončok
0ca4fb92bf Merge fedora/rawhide into c10s 2024-03-26 11:45:41 +01:00
Miro Hrončok
9c9178a72b Move all test modules to the test subpackage
- __phello__
  - _xxsubinterpreters
  - xxlimited
  - xxlimited_35
  - xxsubtype

Source: https://github.com/python/cpython/blob/v3.12.2/Tools/build/generate_stdlib_module_names.py#L23
2024-03-21 12:29:18 +01:00
Lumir Balhar
5d12698d82 Add provides and symbolic links for compatibility with platform-python
Resolves: RHEL-27855
2024-03-04 15:23:09 +01:00
Miro Hrončok
c0ffafcda5 Fix tests for XMLPullParser with Expat 2.6.0
See also: https://bugzilla.redhat.com/2264859
2024-02-21 11:58:17 +01:00
Tomáš Hrnčiar
d3e4f80070 Update to 3.12.2 2024-02-08 16:33:19 +01:00
Fedora Release Engineering
ff956d27be Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-26 13:32:50 +00:00
Fedora Release Engineering
c604248608 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 09:22:06 +00:00
Tomáš Hrnčiar
90929e6c2e Require python3-rpm-generators even when bootstrapping non-main Pythons 2024-01-05 11:51:54 +01:00
Lumir Balhar
7a094a0571 Security fix for CVE-2023-27043 (rhbz#2196190) 2023-12-18 13:17:51 +01:00
Miro Hrončok
3c67985ace Own stray directories in /usr/lib64/python3.12
Fixes https://bugzilla.redhat.com/2252143
2023-12-08 20:15:03 +01:00
Tomáš Hrnčiar
cc458c9fb3 Update to 3.12.1 2023-12-08 14:38:32 +01:00
Miro Hrončok
c41c6b28ff CI: Run smoke test with cython 2023-10-18 11:23:30 +02:00
Yaakov Selkowitz
261b6e48d6 Use bundled libb2 in RHEL builds
Standalone libb2 is unwanted in RHEL.
2023-10-04 23:18:39 -04:00
Miro Hrončok
187d5c28b8 Update to 3.12.0 final 2023-10-02 18:40:13 +02:00
Miro Hrončok
fb0049bb7a Update to 3.12.0rc3 2023-09-19 23:20:46 +02:00
Tomáš Hrnčiar
614cafc400 Update to 3.12.0rc2 2023-09-06 14:15:23 +02:00
Tomáš Hrnčiar
67ba754f51 Temporarily skip test_check_probes in CI tests
See: https://github.com/python/cpython/issues/104280#issuecomment-1669249980
2023-08-29 16:20:07 +02:00
Tomáš Hrnčiar
0483fca31a Update to 3.12.0rc1 2023-08-08 16:16:05 +02:00
Charalampos Stratakis
1f830e372b Remove extra distro-applied CFLAGS passed to user-built C extensions
Only -fexceptions and -fcf-protection are preserved for binary
compatibility with user-built python C extension.

https://fedoraproject.org/wiki/Changes/Python_Extension_Flags_Reduction
2023-08-04 16:06:57 +02:00
Fedora Release Engineering
88668cf1f4 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-21 15:42:31 +00:00
Miro Hrončok
bc99d88db7 Update to 3.12.0b4
Patch 402 is part of this release.
2023-07-12 07:01:20 +02:00
Tomáš Hrnčiar
2d8f888430 Backport upstream patch to add PyType_GetDict() function 2023-06-21 10:04:34 +02:00
Tomáš Hrnčiar
8522651180 Update to 3.12.0b3 2023-06-20 18:45:12 +02:00
Python Maint
5b9ff3722c Rebuilt for Python 3.12 2023-06-13 17:23:48 +02:00
Python Maint
8b139823bd Bootstrap for Python 3.12 2023-06-13 15:03:26 +02:00
Tomáš Hrnčiar
036d63f211 Update to 3.12.0b2 2023-06-08 11:29:08 +02:00
Miro Hrončok
6073e4f006 --without rpmwheels: Declare bundled() provides and a complex License tag 2023-05-30 19:26:33 +02:00
Miro Hrončok
0c82a4ac9f Use wheels from RPMs, at least on Fedora 39+ 2023-05-29 16:00:31 +02:00
Tomáš Hrnčiar
8bed4bf373 Update to 3.12.0b1
This update enables budled pip, because in Fedora we don't have the
latest version yet.
See: https://src.fedoraproject.org/rpms/python-pip/pull-request/123#comment-142984
2023-05-25 14:53:49 +02:00
Miro Hrončok
dd482b1c20 Remove ExcludeArch for arm, Fedora 36 went EOL 2023-05-22 11:10:13 +02:00