Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python310 for openSUSE:Factory checked in at 2024-06-24 20:50:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python310 (Old) and /work/SRC/openSUSE:Factory/.python310.new.18349 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python310" Mon Jun 24 20:50:16 2024 rev:43 rq:1182484 version:3.10.14 Changes: -------- --- /work/SRC/openSUSE:Factory/python310/python310.changes 2024-03-26 19:25:33.629181333 +0100 +++ /work/SRC/openSUSE:Factory/.python310.new.18349/python310.changes 2024-06-24 20:50:50.230921455 +0200 @@ -1,0 +2,8 @@ +Fri Apr 19 08:37:04 UTC 2024 - Matej Cepl <[email protected]> + +- Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with + patched libexpat below 2.6.0 that doesn't update the version number, + just in SLE. +- Remove old-libexpat.patch, of course. + +------------------------------------------------------------------- @@ -41 +49 @@ - across multiple threads + across multiple threads (bsc#1226447, CVE-2024-0397) Old: ---- old-libexpat.patch New: ---- CVE-2023-52425-libexpat-2.6.0-backport.patch BETA DEBUG BEGIN: Old: just in SLE. - Remove old-libexpat.patch, of course. BETA DEBUG END: BETA DEBUG BEGIN: New: - Add CVE-2023-52425-libexpat-2.6.0-backport.patch to fix tests with patched libexpat below 2.6.0 that doesn't update the version number, BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python310.spec ++++++ --- /var/tmp/diff_new_pack.X62KNe/_old 2024-06-24 20:50:51.294960462 +0200 +++ /var/tmp/diff_new_pack.X62KNe/_new 2024-06-24 20:50:51.298960609 +0200 @@ -192,9 +192,9 @@ # * gh#python/cpython#104221 # * gh#python/cpython#107246 Patch21: fix-sphinx-72.patch -# PATCH-FIX-UPSTREAM old-libexpat.patch gh#python/cpython#117187 [email protected] +# PATCH-FIX-UPSTREAM CVE-2023-52425-libexpat-2.6.0-backport.patch gh#python/cpython#117187 [email protected] # Make the test suite work with libexpat < 2.6.0 -Patch22: old-libexpat.patch +Patch22: CVE-2023-52425-libexpat-2.6.0-backport.patch BuildRequires: autoconf-archive BuildRequires: automake BuildRequires: fdupes ++++++ CVE-2023-52425-libexpat-2.6.0-backport.patch ++++++ --- Lib/test/test_pyexpat.py | 4 ++++ Lib/test/test_sax.py | 3 +++ Lib/test/test_xml_etree.py | 7 +++++++ 3 files changed, 14 insertions(+) --- a/Lib/test/test_pyexpat.py +++ b/Lib/test/test_pyexpat.py @@ -766,6 +766,10 @@ class ReparseDeferralTest(unittest.TestC self.assertEqual(started, ['doc']) def test_reparse_deferral_disabled(self): + if expat.version_info < (2, 6, 0): + self.skipTest(f'Expat {expat.version_info} does not ' + 'support reparse deferral') + started = [] def start_element(name, _): --- a/Lib/test/test_sax.py +++ b/Lib/test/test_sax.py @@ -1240,6 +1240,9 @@ class ExpatReaderTest(XmlTestBase): self.assertEqual(result.getvalue(), start + b"<doc></doc>") + @unittest.skipIf(pyexpat.version_info < (2, 6, 0), + f'Expat {pyexpat.version_info} does not ' + 'support reparse deferral') def test_flush_reparse_deferral_disabled(self): result = BytesIO() xmlgen = XMLGenerator(result) --- a/Lib/test/test_xml_etree.py +++ b/Lib/test/test_xml_etree.py @@ -1420,9 +1420,13 @@ class XMLPullParserTest(unittest.TestCas self.assert_event_tags(parser, [('end', 'root')]) self.assertIsNone(parser.close()) + @unittest.skipIf(pyexpat.version_info < (2, 6, 0), + f'Fail with patched version of Expat {pyexpat.version_info}') def test_simple_xml_chunk_1(self): self.test_simple_xml(chunk_size=1, flush=True) + @unittest.skipIf(pyexpat.version_info < (2, 6, 0), + f'Fail with patched version of Expat {pyexpat.version_info}') def test_simple_xml_chunk_5(self): self.test_simple_xml(chunk_size=5, flush=True) @@ -1648,6 +1652,9 @@ class XMLPullParserTest(unittest.TestCas self.assert_event_tags(parser, [('end', 'doc')]) + @unittest.skipIf(pyexpat.version_info < (2, 6, 0), + f'Expat {pyexpat.version_info} does not ' + 'support reparse deferral') def test_flush_reparse_deferral_disabled(self): parser = ET.XMLPullParser(events=('start', 'end')) ++++++ Python-3.10.14.tar.xz.asc ++++++ --- /var/tmp/diff_new_pack.X62KNe/_old 2024-06-24 20:50:51.386963835 +0200 +++ /var/tmp/diff_new_pack.X62KNe/_new 2024-06-24 20:50:51.390963981 +0200 @@ -1,17 +1,17 @@ -----BEGIN PGP SIGNATURE----- -iQIzBAABCAAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmX6IF0ACgkQsmmV4xAl -BWj0Lw//cYVyJ6YPSr42rylEeHV3+jZNjgpNadPFlM46M9zKmx8tP95fAut+JDF4 -gwcuql/lvfbPw1eJDrX+7TiIn33yS+KZDD/J2U6v/aCbuLByOWGWt5C3BfE6U5o/ -FkCbJ2GM6e4M85dVGEIudgwoZfZByRLxA8HJ6n37UhoeXSQQTr8LHfC4w7lyXJ+D -V2JQ+Mru0NJmG2FaVA+46Rez1ynsqSQnabJsM+0Kmaqs+ziWHSpWkLMecwqrojcJ -kzEs6TBGCaPDJncSONRU2o8i4pzkeq9SsXGT03kHsfPTZqU5sJD6yIeiIJbhQfea -+hPKg5+LVNDnOeSWPzm+5Fs1WWqeVNiFi/pDG4ofVXH79ULP7hxnnDMRe/ShdWWh -gp4uchu15tqbQLwCdH7r/r/j21PjSYxJBnz+1n2Yon9hYrjT8wTPalt6TyaQ7dpL -tKG/JLC8r9hxMSFSa6QlHB/+kOu57NZccy4XoitCEQhsnqmRFX/7zCiHM3P4t1G9 -RrLWYseS9elf6OZUlvF1PbwiEuRA36pvGCHEF0NWBF4yVxShN81f05pZutZVfVFx -W2V/ACB10agGbMsR5FVJROLo0zuek/G/QJ9GSp6cB6D1xuNbL1nNFfWZ7aEzPdeu -yBZkyyY4bOqstAw2I/bOlZTfFEMwdZFG6Zg2au/mtt2qFcGIEKM= -=9/7V +iQIzBAABCAAdFiEEz9yiRbEEPPKl+Xhl/+h0BBaL2EcFAmX76AkACgkQ/+h0BBaL +2EeKvhAAuN+7X3iFv8tYwUTbKJT9x9fLsADI5wOn5j8xuDiXQCOMzsqqyB1RSdEd +tbCQXg9XJj1bVHc4DY337vUix9jvFcTqbQqlzUm/peX4buY2bKkZu2quti1iWSJf +IN26jDYO2TobPvGdvNiH2Hceqe1dc5tU7iYEfaLR5ImgO4aGgK6x4DiLdmFqo2bk +ZZWZLkXbwenrSdLVmUZLP5Gg2dsfMkbfFpydau9Zk3RVl6mVYATwzJaY9K5otC0K +7kc+nKPwkTxKAjndbznjsVrWK0Xcr4hrlMHs4Re2Nrdqa2mVd1jAAFO5xETJJtd7 +YqL6mQuJ9wQfEEq2QWz1hEi67l8g8VeEgzYQOjZ6pTxwYYt0YDfKBjRtRCWuJ11c +w6Q+pniGcgIHAMkQGjZds88CwAdIiyG7IAIT2ovW+xVxH/JqLPHeRsHMKYx4DPqL +2y23Tchw+gBUvmbwCdObXWL1eq5R3Xz3ikkdX/I6zknmEvgPTi5N59C1IQqh0W/6 +8uMrHOdELz9I5Fd+zGTJ8iyh/wrecMiIx+HOsBTYv/FYbMVnQUshUBOiD70geUb5 +uSeHyxl/P7VK/0phbxOznU4oDot2fHPmZRK3q+K67J9L16q7pEou1AJAw8E7ed5C +Ywf+y2tdxsuqChQK/OA6uuqW6rXjZPuCoG5Bn6YIEuU769LsHcY= +=1PBR -----END PGP SIGNATURE----- ++++++ python.keyring ++++++ ++++ 787 lines (skipped) ++++ between python.keyring ++++ and /work/SRC/openSUSE:Factory/.python310.new.18349/python.keyring
