Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package python312 for openSUSE:Factory 
checked in at 2023-12-15 21:50:03
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python312 (Old)
 and      /work/SRC/openSUSE:Factory/.python312.new.25432 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python312"

Fri Dec 15 21:50:03 2023 rev:11 rq:1133398 version:3.12.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/python312/python312.changes      2023-11-16 
20:29:24.146229462 +0100
+++ /work/SRC/openSUSE:Factory/.python312.new.25432/python312.changes   
2023-12-15 21:50:25.685088894 +0100
@@ -1,0 +2,429 @@
+Fri Dec 15 09:51:22 UTC 2023 - Daniel Garcia <daniel.gar...@suse.com>
+
+- Update patch fix_configure_rst.patch
+- Update to 3.12.1 (CVE-2023-6507, bsc#1217939):
+  - Core and Builtins
+    - gh-112125: Fix None.__ne__(None) returning NotImplemented
+      instead of False
+    - gh-112625: Fixes a bug where a bytearray object could be
+      cleared while iterating over an argument in the
+      bytearray.join() method that could result in reading memory
+      after it was freed.
+    - gh-105967: Workaround a bug in Apple’s macOS platform zlib
+      library where zlib.crc32() and binascii.crc32() could produce
+      incorrect results on multi-gigabyte inputs. Including when
+      using zipfile on zips containing large data.
+    - gh-112356: Stopped erroneously deleting a LOAD_NULL bytecode
+      instruction when optimized twice.
+    - gh-111058: Change coro.cr_frame/gen.gi_frame to return None
+      after the coroutine/generator has been closed. This fixes a bug
+      where getcoroutinestate() and getgeneratorstate() return the
+      wrong state for a closed coroutine/generator.
+    - gh-112388: Fix an error that was causing the parser to try to
+      overwrite tokenizer errors. Patch by pablo Galindo
+    - gh-112387: Fix error positions for decoded strings with
+      backwards tokenize errors. Patch by Pablo Galindo
+    - gh-112367: Avoid undefined behaviour when using the perf
+      trampolines by not freeing the code arenas until shutdown.
+      Patch by Pablo Galindo
+    - gh-112243: Don’t include comments in f-string debug
+      expressions. Patch by Pablo Galindo
+    - gh-112266: Change docstrings of __dict__ and __weakref__.
+    - gh-111654: Fix runtime crash when some error happens in opcode
+      LOAD_FROM_DICT_OR_DEREF.
+    - gh-109181: Speed up Traceback object creation by lazily compute
+      the line number. Patch by Pablo Galindo
+    - gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004
+      codecs read out of bounds
+    - gh-111366: Fix an issue in the codeop that was causing
+      SyntaxError exceptions raised in the presence of invalid syntax
+      to not contain precise error messages. Patch by Pablo Galindo
+    - gh-111380: Fix a bug that was causing SyntaxWarning to appear
+      twice when parsing if invalid syntax is encountered later.
+      Patch by Pablo galindo
+    - gh-94438: Fix a regression that prevented jumping across is
+      None and is not None when debugging. Patch by Savannah
+      Ostrowski.
+    - gh-110938: Fix error messages for indented blocks with
+      functions and classes with generic type parameters. Patch by
+      Pablo Galindo
+    - gh-109894: Fixed crash due to improperly initialized static
+      MemoryError in subinterpreter.
+    - gh-110782: Fix crash when typing.TypeVar is constructed with a
+      keyword argument. Patch by Jelle Zijlstra.
+    - gh-110696: Fix incorrect error message for invalid argument
+      unpacking. Patch by Pablo Galindo
+    - gh-110543: Fix regression in Python 3.12 where
+      types.CodeType.replace() would produce a broken code object if
+      called on a module or class code object that contains a
+      comprehension. Patch by Jelle Zijlstra.
+    - gh-110514: Add PY_THROW to sys.setprofile() events
+    - gh-110455: Guard assert(tstate->thread_id > 0) with #ifndef
+      HAVE_PTHREAD_STUBS. This allows for for pydebug builds to work
+      under WASI which (currently) lacks thread support.
+    - gh-110259: Correctly identify the format spec in f-strings
+      (with single or triple quotes) that have multiple lines in the
+      expression part and include a formatting spec. Patch by Pablo
+      Galindo
+    - gh-110237: Fix missing error checks for calls to PyList_Append
+      in _PyEval_MatchClass.
+    - gh-109889: Fix the compiler’s redundant NOP detection algorithm
+      to skip over NOPs with no line number when looking for the next
+      instruction’s lineno.
+    - gh-109853: sys.path[0] is now set correctly for
+      subinterpreters.
+    - gh-105716: Subinterpreters now correctly handle the case where
+      they have threads running in the background. Before, such
+      threads would interfere with cleaning up and destroying them,
+      as well as prevent running another script.
+    - gh-109793: The main thread no longer exits prematurely when a
+      subinterpreter is cleaned up during runtime finalization. The
+      bug was a problem particularly because, when triggered, the
+      Python process would always return with a 0 exitcode, even if
+      it failed.
+    - gh-109596: Fix some tokens in the grammar that were incorrectly
+      marked as soft keywords. Also fix some repeated rule names and
+      ensure that repeated rules are not allowed. Patch by Pablo
+      Galindo
+    - gh-109351: Fix crash when compiling an invalid AST involving a
+      named (walrus) expression.
+    - gh-109216: Fix possible memory leak in BUILD_MAP.
+    - gh-109207: Fix a SystemError in __repr__ of symtable entry
+      object.
+    - gh-109179: Fix bug where the C traceback display drops notes
+      from SyntaxError.
+    - gh-109052: Use the base opcode when comparing code objects to
+      avoid interference from instrumentation
+    - gh-88943: Improve syntax error for non-ASCII character that
+      follows a numerical literal. It now points on the invalid
+      non-ASCII character, not on the valid numerical literal.
+    - gh-106931: Statically allocated string objects are now interned
+      globally instead of per-interpreter. This fixes a situation
+      where such a string would only be interned in a single
+      interpreter. Normal string objects are unaffected.
+
+  - Library
+    - gh-79325: Fix an infinite recursion error in
+      tempfile.TemporaryDirectory() cleanup on Windows.
+    - gh-112645: Remove deprecation error on passing onerror to
+      shutil.rmtree().
+    - gh-112618: Fix a caching bug relating to typing.Annotated.
+      Annotated[str, True] is no longer identical to Annotated[str,
+      1].
+    - gh-112334: Fixed a performance regression in 3.12’s subprocess
+      on Linux where it would no longer use the fast-path vfork()
+      system call when it should have due to a logic bug, instead
+      always falling back to the safe but slower fork().
+    - Also fixed a related 3.12 security regression: If a value of
+      extra_groups=[] was passed to subprocess.Popen or related APIs,
+      the underlying setgroups(0, NULL) system call to clear the
+      groups list would not be made in the child process prior to
+      exec(). This has been assigned CVE-2023-6507.
+    - This was identified via code inspection in the process of fixing
+      the first bug.
+    - gh-110190: Fix ctypes structs with array on Arm platform by
+      setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo.
+    - gh-112578: Fix a spurious RuntimeWarning when executing the
+      zipfile module.
+    - gh-112509: Fix edge cases that could cause a key to be present
+      in both the __required_keys__ and __optional_keys__ attributes
+      of a typing.TypedDict. Patch by Jelle Zijlstra.
+    - gh-112414: Fix regression in Python 3.12 where calling repr() on
+      a module that had been imported using a custom loader could fail
+      with AttributeError. Patch by Alex Waygood.
+    - gh-112358: Revert change to struct.Struct initialization that
+      broke some cases of subclassing.
+    - gh-94722: Fix bug where comparison between instances of DocTest
+      fails if one of them has None as its lineno.
+    - gh-112105: Make readline.set_completer_delims() work with
+      libedit
+    - gh-111942: Fix SystemError in the TextIOWrapper constructor with
+      non-encodable “errors” argument in non-debug mode.
+    - gh-109538: Issue warning message instead of having RuntimeError
+      be displayed when event loop has already been closed at
+      StreamWriter.__del__().
+    - gh-111942: Fix crashes in io.TextIOWrapper.reconfigure() when
+      pass invalid arguments, e.g. non-string encoding.
+    - gh-111460: curses: restore wide character support (including
+      curses.unget_wch() and get_wch()) on macOS, which was
+      unavailable due to a regression in Python 3.12.
+    - gh-103791: contextlib.suppress now supports suppressing
+      exceptions raised as part of a BaseExceptionGroup, in addition
+      to the recent support for ExceptionGroup.
+    - gh-111804: Remove posix.fallocate() under WASI as the underlying
+      posix_fallocate() is not available in WASI preview2.
+    - gh-111841: Fix truncating arguments on an embedded null
+      character in os.putenv() and os.unsetenv() on Windows.
+    - gh-111541: Fix doctest for SyntaxError not-builtin subclasses.
+    - gh-110894: Call loop exception handler for exceptions in
+      client_connected_cb of asyncio.start_server() so that
+      applications can handle it. Patch by Kumar Aditya.
+    - gh-111531: Fix reference leaks in bind_class() and bind_all()
+      methods of tkinter widgets.
+    - gh-111356: Added io.text_encoding(), io.DEFAULT_BUFFER_SIZE, and
+      io.IncrementalNewlineDecoder to io.__all__.
+    - gh-111342: Fixed typo in math.sumprod().
+    - gh-68166: Remove mention of not supported “vsapi” element type
+      in tkinter.ttk.Style.element_create(). Add tests for
+      element_create() and other ttk.Style methods. Add examples for
+      element_create() in the documentation.
+    - gh-75666: Fix the behavior of tkinter widget’s unbind() method
+      with two arguments. Previously, widget.unbind(sequence, funcid)
+      destroyed the current binding for sequence, leaving sequence
+      unbound, and deleted the funcid command. Now it removes only
+      funcid from the binding for sequence, keeping other commands,
+      and deletes the funcid command. It leaves sequence unbound only
+      if funcid was the last bound command.
+    - gh-79033: Another attempt at fixing
+      asyncio.Server.wait_closed(). It now blocks until both
+      conditions are true: the server is closed, and there are no more
+      active connections. (This means that in some cases where in
+      3.12.0 this function would incorrectly have returned
+      immediately, it will now block; in particular, when there are no
+      active connections but the server hasn’t been closed yet.)
+    - gh-111295: Fix time not checking for errors when initializing.
+    - gh-111253: Add error checking during _socket module init.
+    - gh-111251: Fix _blake2 not checking for errors when
+      initializing.
+    - gh-111174: Fix crash in io.BytesIO.getbuffer() called repeatedly
+      for empty BytesIO.
+    - gh-111187: Postpone removal version for
+      locale.getdefaultlocale() to Python 3.15.
+    - gh-111159: Fix doctest output comparison for exceptions with
+      notes.
+    - gh-110910: Fix invalid state handling in asyncio.TaskGroup and
+      asyncio.Timeout. They now raise proper RuntimeError if they are
+      improperly used and are left in consistent state after this.
+    - gh-111092: Make turtledemo run without default root enabled.
+    - gh-110488: Fix a couple of issues in
+      pathlib.PurePath.with_name(): a single dot was incorrectly
+      considered a valid name, and in PureWindowsPath, a name with an
+      NTFS alternate data stream, like a:b, was incorrectly considered
+      invalid.
+    - gh-110392: Fix tty.setraw() and tty.setcbreak(): previously they
+      returned partially modified list of the original tty attributes.
+      tty.cfmakeraw() and tty.cfmakecbreak() now make a copy of the
+      list of special characters before modifying it.
+    - gh-110590: Fix a bug in _sre.compile() where TypeError would be
+      overwritten by OverflowError when the code argument was a list
+      of non-ints.
+    - gh-65052: Prevent pdb from crashing when trying to display
+      undisplayable objects
+    - gh-110519: Deprecation warning about non-integer number in
+      gettext now alwais refers to the line in the user code where
+      gettext function or method is used. Previously it could refer to
+      a line in gettext code.
+    - gh-110395: Ensure that select.kqueue() objects correctly appear
+      as closed in forked children, to prevent operations on an
+      invalid file descriptor.
+    - gh-110378: contextmanager() and asynccontextmanager() context
+      managers now close an invalid underlying generator object that
+      yields more then one value.
+    - gh-110365: Fix termios.tcsetattr() bug that was overwritting
+      existing errors during parsing integers from term list.
+    - gh-109653: Fix a Python 3.12 regression in the import time of
+      random. Patch by Alex Waygood.
+    - gh-110196: Add __reduce__ method to IPv6Address in order to keep
+      scope_id
+    - gh-110036: On Windows, multiprocessing Popen.terminate() now
+      catchs PermissionError and get the process exit code. If the
+      process is still running, raise again the PermissionError.
+      Otherwise, the process terminated as expected: store its exit
+      code. Patch by Victor Stinner.
+    - gh-110038: Fixed an issue that caused KqueueSelector.select() to
+      not return all the ready events in some cases when a file
+      descriptor is registered for both read and write.
+    - gh-109631: re functions such as re.findall(), re.split(),
+      re.search() and re.sub() which perform short repeated matches
+      can now be interrupted by user.
+    - gh-109747: Improve errors for unsupported look-behind patterns.
+      Now re.error is raised instead of OverflowError or RuntimeError
+      for too large width of look-behind pattern.
+    - gh-109818: Fix reprlib.recursive_repr() not copying
+      __type_params__ from decorated function.
+    - gh-109047: concurrent.futures: The executor manager thread now
+      catches exceptions when adding an item to the call queue. During
+      Python finalization, creating a new thread can now raise
+      RuntimeError. Catch the exception and call terminate_broken() in
+      this case. Patch by Victor Stinner.
+    - gh-109782: Ensure the signature of os.path.isdir() is identical
+      on all platforms. Patch by Amin Alaee.
+    - gh-109590: shutil.which() will prefer files with an extension in
+      PATHEXT if the given mode includes os.X_OK on win32. If no
+      PATHEXT match is found, a file without an extension in PATHEXT
+      can be returned. This change will have shutil.which() act more
+      similarly to previous behavior in Python 3.11.
+    - gh-109786: Fix possible reference leaks and crash when re-enter
+      the __next__() method of itertools.pairwise.
+    - gh-109593: Avoid deadlocking on a reentrant call to the
+      multiprocessing resource tracker. Such a reentrant call, though
+      unlikely, can happen if a GC pass invokes the finalizer for a
+      multiprocessing object such as SemLock.
+    - gh-109613: Fix os.stat() and os.DirEntry.stat(): check for
+      exceptions. Previously, on Python built in debug mode, these
+      functions could trigger a fatal Python error (and abort the
+      process) when a function succeeded with an exception set. Patch
+      by Victor Stinner.
+    - gh-109375: The pdb alias command now prevents registering
+      aliases without arguments.
+    - gh-107219: Fix a race condition in concurrent.futures. When a
+      process in the process pool was terminated abruptly (while the
+      future was running or pending), close the connection write end.
+      If the call queue is blocked on sending bytes to a worker
+      process, closing the connection write end interrupts the send,
+      so the queue can be closed. Patch by Victor Stinner.
+    - gh-50644: Attempts to pickle or create a shallow or deep copy of
+      codecs streams now raise a TypeError. Previously, copying failed
+      with a RecursionError, while pickling produced wrong results
+      that eventually caused unpickling to fail with a RecursionError.
+    - gh-108987: Fix _thread.start_new_thread() race condition. If a
+      thread is created during Python finalization, the newly spawned
+      thread now exits immediately instead of trying to access freed
+      memory and lead to a crash. Patch by Victor Stinner.
+    - gh-108791: Improved error handling in pdb command line
+      interface, making it produce more concise error messages.
+    - gh-105829: Fix concurrent.futures.ProcessPoolExecutor deadlock
+    - gh-106584: Fix exit code for unittest if all tests are skipped.
+      Patch by Egor Eliseev.
+    - gh-102956: Fix returning of empty byte strings after seek in
+      zipfile module
+    - gh-84867: unittest.TestLoader no longer loads test cases from
+      exact unittest.TestCase and unittest.FunctionTestCase classes.
+    - gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup,
+      which now no longer dereferences symlinks when working around
+      file system permission errors.
+    - gh-73561: Omit the interface scope from an IPv6 address when
+      used as Host header by http.client.
+    - gh-86826: zipinfo now supports the full range of values in the
++++ 132 more lines (skipped)
++++ between /work/SRC/openSUSE:Factory/python312/python312.changes
++++ and /work/SRC/openSUSE:Factory/.python312.new.25432/python312.changes

Old:
----
  Python-3.12.0.tar.xz
  Python-3.12.0.tar.xz.asc

New:
----
  Python-3.12.1.tar.xz
  Python-3.12.1.tar.xz.asc

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python312.spec ++++++
--- /var/tmp/diff_new_pack.T8GhD7/_old  2023-12-15 21:50:26.849131462 +0100
+++ /var/tmp/diff_new_pack.T8GhD7/_new  2023-12-15 21:50:26.853131608 +0100
@@ -105,7 +105,7 @@
 %define dynlib() 
%{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
 %bcond_without profileopt
 Name:           %{python_pkg_name}%{psuffix}
-Version:        3.12.0
+Version:        3.12.1
 Release:        0
 Summary:        Python 3 Interpreter
 License:        Python-2.0

++++++ Python-3.12.0.tar.xz -> Python-3.12.1.tar.xz ++++++
/work/SRC/openSUSE:Factory/python312/Python-3.12.0.tar.xz 
/work/SRC/openSUSE:Factory/.python312.new.25432/Python-3.12.1.tar.xz differ: 
char 25, line 1

++++++ fix_configure_rst.patch ++++++
--- /var/tmp/diff_new_pack.T8GhD7/_old  2023-12-15 21:50:26.941134827 +0100
+++ /var/tmp/diff_new_pack.T8GhD7/_new  2023-12-15 21:50:26.941134827 +0100
@@ -3,29 +3,29 @@
  Misc/NEWS               |    2 +-
  2 files changed, 1 insertion(+), 3 deletions(-)
 
-Index: Python-3.12.0/Doc/using/configure.rst
+Index: Python-3.12.1/Doc/using/configure.rst
 ===================================================================
---- Python-3.12.0.orig/Doc/using/configure.rst
-+++ Python-3.12.0/Doc/using/configure.rst
-@@ -622,13 +622,11 @@ macOS Options
+--- Python-3.12.1.orig/Doc/using/configure.rst
++++ Python-3.12.1/Doc/using/configure.rst
+@@ -629,13 +629,11 @@ macOS Options
  
  See ``Mac/README.rst``.
  
--.. cmdoption:: --enable-universalsdk
- .. cmdoption:: --enable-universalsdk=SDKDIR
+-.. option:: --enable-universalsdk
+ .. option:: --enable-universalsdk=SDKDIR
  
     Create a universal binary build. *SDKDIR* specifies which macOS SDK should
     be used to perform the build (default is no).
  
--.. cmdoption:: --enable-framework
- .. cmdoption:: --enable-framework=INSTALLDIR
+-.. option:: --enable-framework
+ .. option:: --enable-framework=INSTALLDIR
  
     Create a Python.framework rather than a traditional Unix install. Optional
-Index: Python-3.12.0/Misc/NEWS
+Index: Python-3.12.1/Misc/NEWS
 ===================================================================
---- Python-3.12.0.orig/Misc/NEWS
-+++ Python-3.12.0/Misc/NEWS
-@@ -11953,7 +11953,7 @@ C API
+--- Python-3.12.1.orig/Misc/NEWS
++++ Python-3.12.1/Misc/NEWS
+@@ -12561,7 +12561,7 @@ C API
  - bpo-40939: Removed documentation for the removed ``PyParser_*`` C API.
  
  - bpo-43795: The list in :ref:`limited-api-list` now shows the public name

Reply via email to