Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python39 for openSUSE:Factory
checked in at 2023-07-27 16:49:51
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python39 (Old)
and /work/SRC/openSUSE:Factory/.python39.new.32662 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python39"
Thu Jul 27 16:49:51 2023 rev:47 rq:1100886 version:3.9.17
Changes:
--------
--- /work/SRC/openSUSE:Factory/python39/python39.changes 2023-07-01
23:18:09.838300845 +0200
+++ /work/SRC/openSUSE:Factory/.python39.new.32662/python39.changes
2023-07-27 16:50:01.733549977 +0200
@@ -1,0 +2,12 @@
+Wed Jul 19 11:15:39 UTC 2023 - Matej Cepl <mc...@suse.com>
+
+- Add gh-78214-marshal_stabilize_FLAG_REF.patch to marshal.c for
+ stabilizing FLAG_REF usage (required for reproduceability;
+ bsc#1213463).
+
+-------------------------------------------------------------------
+Fri Jul 14 10:25:54 UTC 2023 - Matej Cepl <mc...@suse.com>
+
+- Revert faulty fix for CVE-2023-27043 (gh#python/cpython#106669)
+
+-------------------------------------------------------------------
New:
----
gh-78214-marshal_stabilize_FLAG_REF.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python39.spec ++++++
--- /var/tmp/diff_new_pack.Bw9tYJ/_old 2023-07-27 16:50:02.773555853 +0200
+++ /var/tmp/diff_new_pack.Bw9tYJ/_new 2023-07-27 16:50:02.777555876 +0200
@@ -161,6 +161,9 @@
# PATCH-FIX-UPSTREAM 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
gh#python/cpython#98366 mc...@suse.com
# this patch makes things totally awesome
Patch37: 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
+# PATCH-FIX-UPSTREAM gh-78214-marshal_stabilize_FLAG_REF.patch bsc#1213463
mc...@suse.com
+# marshal: Stabilize FLAG_REF usage
+Patch39: gh-78214-marshal_stabilize_FLAG_REF.patch
# PATCH-FIX-UPSTREAM 99366-patch.dict-can-decorate-async.patch bsc#[0-9]+
mc...@suse.com
# Patch for gh#python/cpython#98086
Patch40: 99366-patch.dict-can-decorate-async.patch
@@ -425,6 +428,7 @@
%endif
%patch35 -p1
%patch37 -p1
+%patch39 -p1
%patch40 -p1
%if 0%{?sle_version} && 0%{?sle_version} <= 150500
%patch41 -p1
++++++ gh-78214-marshal_stabilize_FLAG_REF.patch ++++++
>From 6c8ea7c1dacd42f3ba00440231ec0e6b1a38300d Mon Sep 17 00:00:00 2001
From: Inada Naoki <songofaca...@gmail.com>
Date: Sat, 14 Jul 2018 00:46:11 +0900
Subject: [PATCH] Use FLAG_REF always for interned strings
---
Python/marshal.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
--- a/Python/marshal.c
+++ b/Python/marshal.c
@@ -298,9 +298,14 @@ w_ref(PyObject *v, char *flag, WFILE *p)
if (p->version < 3 || p->hashtable == NULL)
return 0; /* not writing object references */
- /* if it has only one reference, it definitely isn't shared */
- if (Py_REFCNT(v) == 1)
+ /* If it has only one reference, it definitely isn't shared.
+ * But we use TYPE_REF always for interned string, to PYC file stable
+ * as possible.
+ */
+ if (Py_REFCNT(v) == 1 &&
+ !(PyUnicode_CheckExact(v) && PyUnicode_CHECK_INTERNED(v))) {
return 0;
+ }
entry = _Py_hashtable_get_entry(p->hashtable, v);
if (entry != NULL) {
