Commit Graph

72 Commits

Author SHA1 Message Date
Tomas Orsava
b2efb2bae7 Move _sysconfigdata_d_linux*.py to the debug subpackage
(cherry picked from python3.10 commit 55d25b67d6153038b462d312e40c083d965ed5dc)

Related: RHEL-128538
2025-11-21 15:46:49 +01:00
Karolina Surma
3b17b4d407 Update to Python 3.9.25
Resolves: RHEL-128538
2025-11-21 15:46:49 +01:00
Karolina Surma
a45e3b72ea Update to Python 3.9.24
Related: RHEL-128538
2025-11-21 15:46:49 +01:00
Lumir Balhar
2ffb5a9419 Security fix for CVE-2025-8194
Resolves: RHEL-106374
2025-08-20 11:59:47 +02:00
Tomáš Hrnčiar
7b3e4a8723 Update to 3.9.23
Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218
2025-06-27 14:42:05 +02:00
Tobias Urdin
5b6d026518 Add systemtap-sdt-devel build dependency
The package does not build unless the
sys/sdt.h header is available which
is from the systemtap-sdt-devel package.

Resolves: RHEL-99500
2025-06-27 14:28:07 +02:00
Charalampos Stratakis
15edd5d841 Security fix for CVE-2025-0938
Resolves: RHEL-77263
2025-02-11 01:10:36 +01:00
Tomáš Hrnčiar
3c51cd412a Update to 3.9.21
Security fix for CVE-2024-11168 and CVE-2024-9287

Resolves: RHEL-64889
Resolves: RHEL-69942
2024-12-09 19:50:20 +00:00
Lukáš Zachar
c4e7695d25 Change the test source location
Change the test source location to support evolving downstream testing
requirements. This is needed both for downstream certification
activities and changes to test development for internal infrastructure
differences.
2024-11-29 14:58:47 +01:00
Tomáš Hrnčiar
5b0665817a Update to 3.9.20
Resolves: RHEL-57422
2024-09-19 02:28:08 +02:00
Charalampos Stratakis
2d3ca5350a Security fix for CVE-2024-8088
Resolves: RHEL-55967
2024-08-26 14:49:16 +02:00
Lumir Balhar
a7c521a404 Security fix for CVE-2024-6923
Resolves: RHEL-53045
2024-08-15 13:15:40 +02:00
Miro Hrončok
097f1f3dde CI: Assert -O2 and -O3 flags are applied to proper sysconfig keys
Resolves: RHEL-49637
2024-08-01 15:03:21 +02:00
Miro Hrončok
c96896b851 Ensure 3rd party extension modules for the debug build use the -O0 flag
Resolves: RHEL-49637
2024-08-01 14:47:25 +02:00
Charalampos Stratakis
634a18b5b4 Properly propagate the optimization flags to C extensions
Resolves: RHEL-49637
2024-07-30 22:00:09 +02:00
Charalampos Stratakis
7805833c1f Fix optimized flags test
Resolves: RHEL-49637
2024-07-22 16:05:30 +02:00
Miro Hrončok
3e34ec7279 Build Python with -O3
https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3

Resolves: RHEL-49637
2024-07-18 18:43:27 +02:00
Charalampos Stratakis
5fef6cf728 Security fix for CVE-2024-4032
Resolves: RHEL-44107
2024-07-18 18:38:07 +02:00
Charalampos Stratakis
ec11486bdb Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40750
2024-06-11 23:07:26 +02:00
Charalampos Stratakis
9abceef125 Update to 3.9.19
Security fixes for CVE-2023-6597 and CVE-2024-0450

Resolves: RHEL-33679, RHEL-33691
2024-05-10 01:05:58 +02:00
Lumir Balhar
9946831cb4 Fix tests on s390x with hw acceleration
Resolves: RHEL-13043
2024-01-24 18:16:17 +01:00
Lumir Balhar
db33a5d3e7 Security fix for CVE-2023-27043
Resolves: RHEL-20613
2024-01-05 10:32:41 +01:00
Charalampos Stratakis
724b2ab564 Update to 3.9.18
Security fix for CVE-2023-40217

Resolves: RHEL-3043
2023-09-15 02:22:20 +02:00
Petr Viktorin
5c7e81a8f7 Fix symlink handling in the fix for CVE-2023-24329
Resolves: rhbz#263261
2023-08-10 13:21:23 +02:00
Charalampos Stratakis
62dbf34013 rpminspect: Ignore the debuginfo check for libpython
libpython3.so doesn't contain any compiled code hence
no debugging symbols are stripped from it.
2023-07-11 17:41:17 +02:00
Miro Hrončok
990b7de395 CI: Run the tests via EPEL 2023-07-11 15:41:36 +02:00
Charalampos Stratakis
f03b852dec Update to 3.9.17
Security fix for CVE-2023-24329

Rebased patches: 189, 397

Resolves: rhbz#2173917
2023-06-26 22:27:49 +02:00
pviktori
a1023e197c CVE-2007-4559, PEP-706: Add filters for tarfile extraction 2023-05-31 12:30:23 +00:00
Charalampos Stratakis
e5389fd0f4 Update to 3.9.16
Security fixes for CVE-2022-42919 and CVE-2022-45061

Removed upstream patch 382

Resolves: rhbz#2138705, rhbz#2144072
2022-12-08 01:05:19 +01:00
Charalampos Stratakis
c7e52cdf75 Update to 3.9.14
Security fixes for CVE-2020-10735 and CVE-2021-28861

Removed upstreamed part of the FIPS patch

Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249
2022-09-21 22:50:08 +02:00
Lumir Balhar
2ccf414f48 Fix test_get_ciphers in test_ssl.py for FIPS mode 2022-07-27 14:41:44 +02:00
Charalampos Stratakis
b19edcc49a Security fix for CVE-2015-20107
Resolves: rhbz#2075390
2022-06-10 04:31:50 +02:00
Charalampos Stratakis
36fc6d070d Update to 3.9.13
Resolves: rhbz#2054702, rhbz#2059951
2022-06-01 16:09:46 +02:00
Charalampos Stratakis
c076ac88b9 Fix undefined behavior in Modules/_hashopenssl.c
Backport of 59e004af63

Resolves: rhbz#1942527
2022-02-10 22:08:55 +01:00
Charalampos Stratakis
c20330386e Update to 3.9.10
Support OpenSSL FIPS mode

Resolves: rhbz#1942527, rhbz#1835169
2022-01-25 18:01:44 +01:00
Charalampos Stratakis
6bbe9aed00 Add rpminspect file 2022-01-18 23:58:19 +00:00
Miro Hrončok
f879788604 Sync patch 251 with Python 3.10+ on Fedora < 36
Instruct pip to use distutils
-----------------------------

The current version of pip uses distutils on Python < 3.10,
so this should change nothing,
but future versions of pip may theoretically change that.

Instruct pypa/distutils to add /local/ addition to prefix
---------------------------------------------------------

Needed for setuptools 60+ installed/upgraded by pip or when we update it in rawhide.
Setuptools 60+ uses bundled pypa/distutils instead of the standard library distutils.

Resolves: rhbz#2040656
2022-01-14 12:42:43 +01:00
Miro Hrončok
e5bcc23d18 Temporary workaround for missing %apply_patch in RPM 4.17
This is needed to make the spec file %prep on a Fedora 35+ machine.

See https://bugzilla.redhat.com/show_bug.cgi?id=1954999

This is not really related to the following bugzilla, but it allowed me to work on it:
Related: rhbz#2040656
2022-01-14 12:42:43 +01:00
Tomas Orsava
37fb8f4b58 Read pre-packaged Python wheels from a newly versioned directory
/usr/share/python3-wheels

Resolves: rhbz#1982668
2021-11-22 22:10:34 +01:00
Tomáš Hrnčiar
8e7bac3593 Update to 3.9.9
Resolves: rhbz#2024322
2021-11-18 18:08:02 +01:00
Tomáš Hrnčiar
2cbbc5ce2e Update to 3.9.8
Resolves: rhbz#2003759
2021-11-08 13:58:30 +01:00
Miro Hrončok
286d519de3 Update to 3.9.7
Resolves: rhbz#1995162
2021-09-09 16:19:24 +02:00
Charalampos Stratakis
7e5d89a573 Add preliminary FIPS mode patch
Related: rhbz#1942527
2021-09-03 17:38:37 +02:00
DJ Delorie
d7c19675f3 Rebuilt for libffi 3.4.2 SONAME transition.
Related: #1891914
2021-08-18 20:58:22 -04:00
Mohan Boddu
056e3b6fbc Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:07:20 +00:00
Florian Weimer
0c1eb7b379 Rebuild to pick up new build flags from redhat-rpm-config (#1984652)
Related: #1984652
2021-08-06 13:41:40 +02:00
Tomas Orsava
b947d34fb0 Obsolete platform-python-setuptools/pip
Related: rhbz#1891487
2021-08-04 18:16:19 +02:00
Charalampos Stratakis
e95f72f20c Build only blake2 from the internal hash implementations
Use md5, sha1, sha256, sha512 and sha3 from OpenSSL

Related: rhbz#1935437, rhbz#1942527
2021-07-29 14:42:21 +02:00
Florian Weimer
ffd08305c7 Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)
Related: #1984097
2021-07-28 11:30:41 +02:00
Lukas Zachar
f6c36e121d Gate on STI tests 2021-07-15 14:41:00 +00:00