Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python312 for openSUSE:Factory checked in at 2023-12-15 21:50:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python312 (Old) and /work/SRC/openSUSE:Factory/.python312.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python312" Fri Dec 15 21:50:03 2023 rev:11 rq:1133398 version:3.12.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python312/python312.changes 2023-11-16 20:29:24.146229462 +0100 +++ /work/SRC/openSUSE:Factory/.python312.new.25432/python312.changes 2023-12-15 21:50:25.685088894 +0100 @@ -1,0 +2,429 @@ +Fri Dec 15 09:51:22 UTC 2023 - Daniel Garcia <daniel.gar...@suse.com> + +- Update patch fix_configure_rst.patch +- Update to 3.12.1 (CVE-2023-6507, bsc#1217939): + - Core and Builtins + - gh-112125: Fix None.__ne__(None) returning NotImplemented + instead of False + - gh-112625: Fixes a bug where a bytearray object could be + cleared while iterating over an argument in the + bytearray.join() method that could result in reading memory + after it was freed. + - gh-105967: Workaround a bug in Appleâs macOS platform zlib + library where zlib.crc32() and binascii.crc32() could produce + incorrect results on multi-gigabyte inputs. Including when + using zipfile on zips containing large data. + - gh-112356: Stopped erroneously deleting a LOAD_NULL bytecode + instruction when optimized twice. + - gh-111058: Change coro.cr_frame/gen.gi_frame to return None + after the coroutine/generator has been closed. This fixes a bug + where getcoroutinestate() and getgeneratorstate() return the + wrong state for a closed coroutine/generator. + - gh-112388: Fix an error that was causing the parser to try to + overwrite tokenizer errors. Patch by pablo Galindo + - gh-112387: Fix error positions for decoded strings with + backwards tokenize errors. Patch by Pablo Galindo + - gh-112367: Avoid undefined behaviour when using the perf + trampolines by not freeing the code arenas until shutdown. + Patch by Pablo Galindo + - gh-112243: Donât include comments in f-string debug + expressions. Patch by Pablo Galindo + - gh-112266: Change docstrings of __dict__ and __weakref__. + - gh-111654: Fix runtime crash when some error happens in opcode + LOAD_FROM_DICT_OR_DEREF. + - gh-109181: Speed up Traceback object creation by lazily compute + the line number. Patch by Pablo Galindo + - gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 + codecs read out of bounds + - gh-111366: Fix an issue in the codeop that was causing + SyntaxError exceptions raised in the presence of invalid syntax + to not contain precise error messages. Patch by Pablo Galindo + - gh-111380: Fix a bug that was causing SyntaxWarning to appear + twice when parsing if invalid syntax is encountered later. + Patch by Pablo galindo + - gh-94438: Fix a regression that prevented jumping across is + None and is not None when debugging. Patch by Savannah + Ostrowski. + - gh-110938: Fix error messages for indented blocks with + functions and classes with generic type parameters. Patch by + Pablo Galindo + - gh-109894: Fixed crash due to improperly initialized static + MemoryError in subinterpreter. + - gh-110782: Fix crash when typing.TypeVar is constructed with a + keyword argument. Patch by Jelle Zijlstra. + - gh-110696: Fix incorrect error message for invalid argument + unpacking. Patch by Pablo Galindo + - gh-110543: Fix regression in Python 3.12 where + types.CodeType.replace() would produce a broken code object if + called on a module or class code object that contains a + comprehension. Patch by Jelle Zijlstra. + - gh-110514: Add PY_THROW to sys.setprofile() events + - gh-110455: Guard assert(tstate->thread_id > 0) with #ifndef + HAVE_PTHREAD_STUBS. This allows for for pydebug builds to work + under WASI which (currently) lacks thread support. + - gh-110259: Correctly identify the format spec in f-strings + (with single or triple quotes) that have multiple lines in the + expression part and include a formatting spec. Patch by Pablo + Galindo + - gh-110237: Fix missing error checks for calls to PyList_Append + in _PyEval_MatchClass. + - gh-109889: Fix the compilerâs redundant NOP detection algorithm + to skip over NOPs with no line number when looking for the next + instructionâs lineno. + - gh-109853: sys.path[0] is now set correctly for + subinterpreters. + - gh-105716: Subinterpreters now correctly handle the case where + they have threads running in the background. Before, such + threads would interfere with cleaning up and destroying them, + as well as prevent running another script. + - gh-109793: The main thread no longer exits prematurely when a + subinterpreter is cleaned up during runtime finalization. The + bug was a problem particularly because, when triggered, the + Python process would always return with a 0 exitcode, even if + it failed. + - gh-109596: Fix some tokens in the grammar that were incorrectly + marked as soft keywords. Also fix some repeated rule names and + ensure that repeated rules are not allowed. Patch by Pablo + Galindo + - gh-109351: Fix crash when compiling an invalid AST involving a + named (walrus) expression. + - gh-109216: Fix possible memory leak in BUILD_MAP. + - gh-109207: Fix a SystemError in __repr__ of symtable entry + object. + - gh-109179: Fix bug where the C traceback display drops notes + from SyntaxError. + - gh-109052: Use the base opcode when comparing code objects to + avoid interference from instrumentation + - gh-88943: Improve syntax error for non-ASCII character that + follows a numerical literal. It now points on the invalid + non-ASCII character, not on the valid numerical literal. + - gh-106931: Statically allocated string objects are now interned + globally instead of per-interpreter. This fixes a situation + where such a string would only be interned in a single + interpreter. Normal string objects are unaffected. + + - Library + - gh-79325: Fix an infinite recursion error in + tempfile.TemporaryDirectory() cleanup on Windows. + - gh-112645: Remove deprecation error on passing onerror to + shutil.rmtree(). + - gh-112618: Fix a caching bug relating to typing.Annotated. + Annotated[str, True] is no longer identical to Annotated[str, + 1]. + - gh-112334: Fixed a performance regression in 3.12âs subprocess + on Linux where it would no longer use the fast-path vfork() + system call when it should have due to a logic bug, instead + always falling back to the safe but slower fork(). + - Also fixed a related 3.12 security regression: If a value of + extra_groups=[] was passed to subprocess.Popen or related APIs, + the underlying setgroups(0, NULL) system call to clear the + groups list would not be made in the child process prior to + exec(). This has been assigned CVE-2023-6507. + - This was identified via code inspection in the process of fixing + the first bug. + - gh-110190: Fix ctypes structs with array on Arm platform by + setting MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo. + - gh-112578: Fix a spurious RuntimeWarning when executing the + zipfile module. + - gh-112509: Fix edge cases that could cause a key to be present + in both the __required_keys__ and __optional_keys__ attributes + of a typing.TypedDict. Patch by Jelle Zijlstra. + - gh-112414: Fix regression in Python 3.12 where calling repr() on + a module that had been imported using a custom loader could fail + with AttributeError. Patch by Alex Waygood. + - gh-112358: Revert change to struct.Struct initialization that + broke some cases of subclassing. + - gh-94722: Fix bug where comparison between instances of DocTest + fails if one of them has None as its lineno. + - gh-112105: Make readline.set_completer_delims() work with + libedit + - gh-111942: Fix SystemError in the TextIOWrapper constructor with + non-encodable âerrorsâ argument in non-debug mode. + - gh-109538: Issue warning message instead of having RuntimeError + be displayed when event loop has already been closed at + StreamWriter.__del__(). + - gh-111942: Fix crashes in io.TextIOWrapper.reconfigure() when + pass invalid arguments, e.g. non-string encoding. + - gh-111460: curses: restore wide character support (including + curses.unget_wch() and get_wch()) on macOS, which was + unavailable due to a regression in Python 3.12. + - gh-103791: contextlib.suppress now supports suppressing + exceptions raised as part of a BaseExceptionGroup, in addition + to the recent support for ExceptionGroup. + - gh-111804: Remove posix.fallocate() under WASI as the underlying + posix_fallocate() is not available in WASI preview2. + - gh-111841: Fix truncating arguments on an embedded null + character in os.putenv() and os.unsetenv() on Windows. + - gh-111541: Fix doctest for SyntaxError not-builtin subclasses. + - gh-110894: Call loop exception handler for exceptions in + client_connected_cb of asyncio.start_server() so that + applications can handle it. Patch by Kumar Aditya. + - gh-111531: Fix reference leaks in bind_class() and bind_all() + methods of tkinter widgets. + - gh-111356: Added io.text_encoding(), io.DEFAULT_BUFFER_SIZE, and + io.IncrementalNewlineDecoder to io.__all__. + - gh-111342: Fixed typo in math.sumprod(). + - gh-68166: Remove mention of not supported âvsapiâ element type + in tkinter.ttk.Style.element_create(). Add tests for + element_create() and other ttk.Style methods. Add examples for + element_create() in the documentation. + - gh-75666: Fix the behavior of tkinter widgetâs unbind() method + with two arguments. Previously, widget.unbind(sequence, funcid) + destroyed the current binding for sequence, leaving sequence + unbound, and deleted the funcid command. Now it removes only + funcid from the binding for sequence, keeping other commands, + and deletes the funcid command. It leaves sequence unbound only + if funcid was the last bound command. + - gh-79033: Another attempt at fixing + asyncio.Server.wait_closed(). It now blocks until both + conditions are true: the server is closed, and there are no more + active connections. (This means that in some cases where in + 3.12.0 this function would incorrectly have returned + immediately, it will now block; in particular, when there are no + active connections but the server hasnât been closed yet.) + - gh-111295: Fix time not checking for errors when initializing. + - gh-111253: Add error checking during _socket module init. + - gh-111251: Fix _blake2 not checking for errors when + initializing. + - gh-111174: Fix crash in io.BytesIO.getbuffer() called repeatedly + for empty BytesIO. + - gh-111187: Postpone removal version for + locale.getdefaultlocale() to Python 3.15. + - gh-111159: Fix doctest output comparison for exceptions with + notes. + - gh-110910: Fix invalid state handling in asyncio.TaskGroup and + asyncio.Timeout. They now raise proper RuntimeError if they are + improperly used and are left in consistent state after this. + - gh-111092: Make turtledemo run without default root enabled. + - gh-110488: Fix a couple of issues in + pathlib.PurePath.with_name(): a single dot was incorrectly + considered a valid name, and in PureWindowsPath, a name with an + NTFS alternate data stream, like a:b, was incorrectly considered + invalid. + - gh-110392: Fix tty.setraw() and tty.setcbreak(): previously they + returned partially modified list of the original tty attributes. + tty.cfmakeraw() and tty.cfmakecbreak() now make a copy of the + list of special characters before modifying it. + - gh-110590: Fix a bug in _sre.compile() where TypeError would be + overwritten by OverflowError when the code argument was a list + of non-ints. + - gh-65052: Prevent pdb from crashing when trying to display + undisplayable objects + - gh-110519: Deprecation warning about non-integer number in + gettext now alwais refers to the line in the user code where + gettext function or method is used. Previously it could refer to + a line in gettext code. + - gh-110395: Ensure that select.kqueue() objects correctly appear + as closed in forked children, to prevent operations on an + invalid file descriptor. + - gh-110378: contextmanager() and asynccontextmanager() context + managers now close an invalid underlying generator object that + yields more then one value. + - gh-110365: Fix termios.tcsetattr() bug that was overwritting + existing errors during parsing integers from term list. + - gh-109653: Fix a Python 3.12 regression in the import time of + random. Patch by Alex Waygood. + - gh-110196: Add __reduce__ method to IPv6Address in order to keep + scope_id + - gh-110036: On Windows, multiprocessing Popen.terminate() now + catchs PermissionError and get the process exit code. If the + process is still running, raise again the PermissionError. + Otherwise, the process terminated as expected: store its exit + code. Patch by Victor Stinner. + - gh-110038: Fixed an issue that caused KqueueSelector.select() to + not return all the ready events in some cases when a file + descriptor is registered for both read and write. + - gh-109631: re functions such as re.findall(), re.split(), + re.search() and re.sub() which perform short repeated matches + can now be interrupted by user. + - gh-109747: Improve errors for unsupported look-behind patterns. + Now re.error is raised instead of OverflowError or RuntimeError + for too large width of look-behind pattern. + - gh-109818: Fix reprlib.recursive_repr() not copying + __type_params__ from decorated function. + - gh-109047: concurrent.futures: The executor manager thread now + catches exceptions when adding an item to the call queue. During + Python finalization, creating a new thread can now raise + RuntimeError. Catch the exception and call terminate_broken() in + this case. Patch by Victor Stinner. + - gh-109782: Ensure the signature of os.path.isdir() is identical + on all platforms. Patch by Amin Alaee. + - gh-109590: shutil.which() will prefer files with an extension in + PATHEXT if the given mode includes os.X_OK on win32. If no + PATHEXT match is found, a file without an extension in PATHEXT + can be returned. This change will have shutil.which() act more + similarly to previous behavior in Python 3.11. + - gh-109786: Fix possible reference leaks and crash when re-enter + the __next__() method of itertools.pairwise. + - gh-109593: Avoid deadlocking on a reentrant call to the + multiprocessing resource tracker. Such a reentrant call, though + unlikely, can happen if a GC pass invokes the finalizer for a + multiprocessing object such as SemLock. + - gh-109613: Fix os.stat() and os.DirEntry.stat(): check for + exceptions. Previously, on Python built in debug mode, these + functions could trigger a fatal Python error (and abort the + process) when a function succeeded with an exception set. Patch + by Victor Stinner. + - gh-109375: The pdb alias command now prevents registering + aliases without arguments. + - gh-107219: Fix a race condition in concurrent.futures. When a + process in the process pool was terminated abruptly (while the + future was running or pending), close the connection write end. + If the call queue is blocked on sending bytes to a worker + process, closing the connection write end interrupts the send, + so the queue can be closed. Patch by Victor Stinner. + - gh-50644: Attempts to pickle or create a shallow or deep copy of + codecs streams now raise a TypeError. Previously, copying failed + with a RecursionError, while pickling produced wrong results + that eventually caused unpickling to fail with a RecursionError. + - gh-108987: Fix _thread.start_new_thread() race condition. If a + thread is created during Python finalization, the newly spawned + thread now exits immediately instead of trying to access freed + memory and lead to a crash. Patch by Victor Stinner. + - gh-108791: Improved error handling in pdb command line + interface, making it produce more concise error messages. + - gh-105829: Fix concurrent.futures.ProcessPoolExecutor deadlock + - gh-106584: Fix exit code for unittest if all tests are skipped. + Patch by Egor Eliseev. + - gh-102956: Fix returning of empty byte strings after seek in + zipfile module + - gh-84867: unittest.TestLoader no longer loads test cases from + exact unittest.TestCase and unittest.FunctionTestCase classes. + - gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, + which now no longer dereferences symlinks when working around + file system permission errors. + - gh-73561: Omit the interface scope from an IPv6 address when + used as Host header by http.client. + - gh-86826: zipinfo now supports the full range of values in the ++++ 132 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/python312/python312.changes ++++ and /work/SRC/openSUSE:Factory/.python312.new.25432/python312.changes Old: ---- Python-3.12.0.tar.xz Python-3.12.0.tar.xz.asc New: ---- Python-3.12.1.tar.xz Python-3.12.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python312.spec ++++++ --- /var/tmp/diff_new_pack.T8GhD7/_old 2023-12-15 21:50:26.849131462 +0100 +++ /var/tmp/diff_new_pack.T8GhD7/_new 2023-12-15 21:50:26.853131608 +0100 @@ -105,7 +105,7 @@ %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so %bcond_without profileopt Name: %{python_pkg_name}%{psuffix} -Version: 3.12.0 +Version: 3.12.1 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 ++++++ Python-3.12.0.tar.xz -> Python-3.12.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/python312/Python-3.12.0.tar.xz /work/SRC/openSUSE:Factory/.python312.new.25432/Python-3.12.1.tar.xz differ: char 25, line 1 ++++++ fix_configure_rst.patch ++++++ --- /var/tmp/diff_new_pack.T8GhD7/_old 2023-12-15 21:50:26.941134827 +0100 +++ /var/tmp/diff_new_pack.T8GhD7/_new 2023-12-15 21:50:26.941134827 +0100 @@ -3,29 +3,29 @@ Misc/NEWS | 2 +- 2 files changed, 1 insertion(+), 3 deletions(-) -Index: Python-3.12.0/Doc/using/configure.rst +Index: Python-3.12.1/Doc/using/configure.rst =================================================================== ---- Python-3.12.0.orig/Doc/using/configure.rst -+++ Python-3.12.0/Doc/using/configure.rst -@@ -622,13 +622,11 @@ macOS Options +--- Python-3.12.1.orig/Doc/using/configure.rst ++++ Python-3.12.1/Doc/using/configure.rst +@@ -629,13 +629,11 @@ macOS Options See ``Mac/README.rst``. --.. cmdoption:: --enable-universalsdk - .. cmdoption:: --enable-universalsdk=SDKDIR +-.. option:: --enable-universalsdk + .. option:: --enable-universalsdk=SDKDIR Create a universal binary build. *SDKDIR* specifies which macOS SDK should be used to perform the build (default is no). --.. cmdoption:: --enable-framework - .. cmdoption:: --enable-framework=INSTALLDIR +-.. option:: --enable-framework + .. option:: --enable-framework=INSTALLDIR Create a Python.framework rather than a traditional Unix install. Optional -Index: Python-3.12.0/Misc/NEWS +Index: Python-3.12.1/Misc/NEWS =================================================================== ---- Python-3.12.0.orig/Misc/NEWS -+++ Python-3.12.0/Misc/NEWS -@@ -11953,7 +11953,7 @@ C API +--- Python-3.12.1.orig/Misc/NEWS ++++ Python-3.12.1/Misc/NEWS +@@ -12561,7 +12561,7 @@ C API - bpo-40939: Removed documentation for the removed ``PyParser_*`` C API. - bpo-43795: The list in :ref:`limited-api-list` now shows the public name