Commit Graph

65 Commits

Author SHA1 Message Date
Tomáš Hrnčiar
a5b026e783 Rebuilding previous fixes for different build target
Related: RHEL-143117, RHEL-143174, RHEL-144897
2026-03-10 15:30:05 +01:00
Tomáš Hrnčiar
6a22d96b0b Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143117
Resolves: RHEL-143174
Resolves: RHEL-144897
2026-02-26 15:08:41 +01:00
Lumir Balhar
98145171c1 Security fix for CVE-2025-12084
Resolves: RHEL-135897
2026-01-15 14:52:52 +01:00
Tomas Orsava
b2efb2bae7 Move _sysconfigdata_d_linux*.py to the debug subpackage
(cherry picked from python3.10 commit 55d25b67d6153038b462d312e40c083d965ed5dc)

Related: RHEL-128538
2025-11-21 15:46:49 +01:00
Karolina Surma
3b17b4d407 Update to Python 3.9.25
Resolves: RHEL-128538
2025-11-21 15:46:49 +01:00
Karolina Surma
a45e3b72ea Update to Python 3.9.24
Related: RHEL-128538
2025-11-21 15:46:49 +01:00
Lumir Balhar
2ffb5a9419 Security fix for CVE-2025-8194
Resolves: RHEL-106374
2025-08-20 11:59:47 +02:00
Tomáš Hrnčiar
7b3e4a8723 Update to 3.9.23
Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218
2025-06-27 14:42:05 +02:00
Tobias Urdin
5b6d026518 Add systemtap-sdt-devel build dependency
The package does not build unless the
sys/sdt.h header is available which
is from the systemtap-sdt-devel package.

Resolves: RHEL-99500
2025-06-27 14:28:07 +02:00
Charalampos Stratakis
15edd5d841 Security fix for CVE-2025-0938
Resolves: RHEL-77263
2025-02-11 01:10:36 +01:00
Tomáš Hrnčiar
3c51cd412a Update to 3.9.21
Security fix for CVE-2024-11168 and CVE-2024-9287

Resolves: RHEL-64889
Resolves: RHEL-69942
2024-12-09 19:50:20 +00:00
Tomáš Hrnčiar
5b0665817a Update to 3.9.20
Resolves: RHEL-57422
2024-09-19 02:28:08 +02:00
Charalampos Stratakis
2d3ca5350a Security fix for CVE-2024-8088
Resolves: RHEL-55967
2024-08-26 14:49:16 +02:00
Lumir Balhar
a7c521a404 Security fix for CVE-2024-6923
Resolves: RHEL-53045
2024-08-15 13:15:40 +02:00
Miro Hrončok
c96896b851 Ensure 3rd party extension modules for the debug build use the -O0 flag
Resolves: RHEL-49637
2024-08-01 14:47:25 +02:00
Charalampos Stratakis
634a18b5b4 Properly propagate the optimization flags to C extensions
Resolves: RHEL-49637
2024-07-30 22:00:09 +02:00
Miro Hrončok
3e34ec7279 Build Python with -O3
https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3

Resolves: RHEL-49637
2024-07-18 18:43:27 +02:00
Charalampos Stratakis
5fef6cf728 Security fix for CVE-2024-4032
Resolves: RHEL-44107
2024-07-18 18:38:07 +02:00
Charalampos Stratakis
ec11486bdb Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40750
2024-06-11 23:07:26 +02:00
Charalampos Stratakis
9abceef125 Update to 3.9.19
Security fixes for CVE-2023-6597 and CVE-2024-0450

Resolves: RHEL-33679, RHEL-33691
2024-05-10 01:05:58 +02:00
Lumir Balhar
9946831cb4 Fix tests on s390x with hw acceleration
Resolves: RHEL-13043
2024-01-24 18:16:17 +01:00
Lumir Balhar
db33a5d3e7 Security fix for CVE-2023-27043
Resolves: RHEL-20613
2024-01-05 10:32:41 +01:00
Charalampos Stratakis
724b2ab564 Update to 3.9.18
Security fix for CVE-2023-40217

Resolves: RHEL-3043
2023-09-15 02:22:20 +02:00
Petr Viktorin
5c7e81a8f7 Fix symlink handling in the fix for CVE-2023-24329
Resolves: rhbz#263261
2023-08-10 13:21:23 +02:00
Charalampos Stratakis
f03b852dec Update to 3.9.17
Security fix for CVE-2023-24329

Rebased patches: 189, 397

Resolves: rhbz#2173917
2023-06-26 22:27:49 +02:00
pviktori
a1023e197c CVE-2007-4559, PEP-706: Add filters for tarfile extraction 2023-05-31 12:30:23 +00:00
Charalampos Stratakis
e5389fd0f4 Update to 3.9.16
Security fixes for CVE-2022-42919 and CVE-2022-45061

Removed upstream patch 382

Resolves: rhbz#2138705, rhbz#2144072
2022-12-08 01:05:19 +01:00
Charalampos Stratakis
c7e52cdf75 Update to 3.9.14
Security fixes for CVE-2020-10735 and CVE-2021-28861

Removed upstreamed part of the FIPS patch

Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249
2022-09-21 22:50:08 +02:00
Lumir Balhar
2ccf414f48 Fix test_get_ciphers in test_ssl.py for FIPS mode 2022-07-27 14:41:44 +02:00
Charalampos Stratakis
b19edcc49a Security fix for CVE-2015-20107
Resolves: rhbz#2075390
2022-06-10 04:31:50 +02:00
Charalampos Stratakis
36fc6d070d Update to 3.9.13
Resolves: rhbz#2054702, rhbz#2059951
2022-06-01 16:09:46 +02:00
Charalampos Stratakis
c076ac88b9 Fix undefined behavior in Modules/_hashopenssl.c
Backport of 59e004af63

Resolves: rhbz#1942527
2022-02-10 22:08:55 +01:00
Charalampos Stratakis
c20330386e Update to 3.9.10
Support OpenSSL FIPS mode

Resolves: rhbz#1942527, rhbz#1835169
2022-01-25 18:01:44 +01:00
Miro Hrončok
f879788604 Sync patch 251 with Python 3.10+ on Fedora < 36
Instruct pip to use distutils
-----------------------------

The current version of pip uses distutils on Python < 3.10,
so this should change nothing,
but future versions of pip may theoretically change that.

Instruct pypa/distutils to add /local/ addition to prefix
---------------------------------------------------------

Needed for setuptools 60+ installed/upgraded by pip or when we update it in rawhide.
Setuptools 60+ uses bundled pypa/distutils instead of the standard library distutils.

Resolves: rhbz#2040656
2022-01-14 12:42:43 +01:00
Miro Hrončok
e5bcc23d18 Temporary workaround for missing %apply_patch in RPM 4.17
This is needed to make the spec file %prep on a Fedora 35+ machine.

See https://bugzilla.redhat.com/show_bug.cgi?id=1954999

This is not really related to the following bugzilla, but it allowed me to work on it:
Related: rhbz#2040656
2022-01-14 12:42:43 +01:00
Tomas Orsava
37fb8f4b58 Read pre-packaged Python wheels from a newly versioned directory
/usr/share/python3-wheels

Resolves: rhbz#1982668
2021-11-22 22:10:34 +01:00
Tomáš Hrnčiar
8e7bac3593 Update to 3.9.9
Resolves: rhbz#2024322
2021-11-18 18:08:02 +01:00
Tomáš Hrnčiar
2cbbc5ce2e Update to 3.9.8
Resolves: rhbz#2003759
2021-11-08 13:58:30 +01:00
Miro Hrončok
286d519de3 Update to 3.9.7
Resolves: rhbz#1995162
2021-09-09 16:19:24 +02:00
Charalampos Stratakis
7e5d89a573 Add preliminary FIPS mode patch
Related: rhbz#1942527
2021-09-03 17:38:37 +02:00
DJ Delorie
d7c19675f3 Rebuilt for libffi 3.4.2 SONAME transition.
Related: #1891914
2021-08-18 20:58:22 -04:00
Mohan Boddu
056e3b6fbc Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:07:20 +00:00
Florian Weimer
0c1eb7b379 Rebuild to pick up new build flags from redhat-rpm-config (#1984652)
Related: #1984652
2021-08-06 13:41:40 +02:00
Tomas Orsava
b947d34fb0 Obsolete platform-python-setuptools/pip
Related: rhbz#1891487
2021-08-04 18:16:19 +02:00
Charalampos Stratakis
e95f72f20c Build only blake2 from the internal hash implementations
Use md5, sha1, sha256, sha512 and sha3 from OpenSSL

Related: rhbz#1935437, rhbz#1942527
2021-07-29 14:42:21 +02:00
Florian Weimer
ffd08305c7 Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)
Related: #1984097
2021-07-28 11:30:41 +02:00
Tomas Hrnciar
e3a3547725 Update to 3.9.6
Related: rhbz#1950291
2021-06-29 16:24:40 +02:00
Miro Hrončok
37f8d77967 Set $LD_LIBRARY_PATH when asserting libmpdec version
Without $LD_LIBRARY_PATH, the test uses installed libpython,
which might be older Python version when updating
or missing entirely when building --with bootstrap.

Related: rhbz#1950291
2021-06-29 16:23:48 +02:00
Mohan Boddu
1f8bc7f232 Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065

Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-06-15 16:41:55 -04:00
Charalampos Stratakis
b9849c5d12 Add virtual provides for the bundled libmpdec
Related: rhbz#1950291
2021-06-09 14:06:58 +02:00