openSUSE Build Service

Dominique Leuenberger (dimstar_suse) accepted request 309857 from

Jan Matejek (matejcik) almost 9 years ago (revision 115)

- update to 2.7.10

Dominique Leuenberger (dimstar_suse) accepted request 308249 from

Jan Matejek (matejcik) almost 9 years ago (revision 114)

- Reenable test_posix on aarch64
- for SLE 12 SP1, disable SSL verification-by-default for backwards
  compatibility (python-2.7.9-sles-disable-verification-by-default.patch)

Dominique Leuenberger (dimstar_suse) accepted request 289256 from

Factory Maintainer (factory-maintainer) about 9 years ago (revision 113)

Automatic submission by obs-autosubmit

Dominique Leuenberger (dimstar_suse) accepted request 266173 from

Jan Matejek (matejcik) over 9 years ago (revision 112)

Stephan Kulow (coolo) accepted request 265739 from

Jan Matejek (matejcik) over 9 years ago (revision 111)

- update to 2.7.9
  * contains full backport of ssl module from Python 3.4 (PEP466)
  * HTTPS certificate validation enabled by default (PEP476)
  * SSLv3 disabled by default (bnc#901715)
  * backported ensurepip module (PEP477)
  * fixes several missing CVEs from last release: CVE-2013-1752,
    CVE-2013-1753
  * dozens of minor bugfixes
- dropped upstreamed patches: python-2.7.6-poplib.patch,
  smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch
- dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it
  with ssl module from Python 3
- libffi was upgraded upstream, seems to contain our changes,
  so dropping libffi-ppc64le.diff as well
- python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional
  "import ssl" from test_urllib2_localnet that caused it to fail without ssl
- drop HTML doc tarball, build HTML documentation from source
- set fixed doc build date, lower sphinx requirement (for older openSUSE)

Stephan Kulow (coolo) accepted request 258807 from

Factory Maintainer (factory-maintainer) over 9 years ago (revision 110)

Automatic submission by obs-autosubmit

Stephan Kulow (coolo) accepted request 253635 from

Jan Matejek (matejcik) over 9 years ago (revision 109)

- update to 2.7.8
  * bugfix-only release, dozens of bugs fixed
  * fixes CVE-2014-4650 directory traversal in CGIHTTPServer
  * fixes CVE-2014-7185 (bnc#898572) potential buffer overflow in buffer()
- dropped upstreamed CVE-2014-4650-CGIHTTPserver-traversal.patch

Adrian Schröter (adrianSuSE) committed over 9 years ago (revision 108)

Split 13.2 from Factory

Stephan Kulow (coolo) accepted request 242381 from

Jan Matejek (matejcik) almost 10 years ago (revision 107)

- CVE-2014-4650-CGIHTTPServer-traversal.patch: CGIHTTPServer file
  disclosure and directory traversal through URL-encoded characters
  (CVE-2014-4650, bnc#885882)
- python-2.7.7-mhlib-linkcount.patch: remove link count optimizations
  that are incorrect on btrfs (and possibly other filesystems)

Stephan Kulow (coolo) accepted request 238381 from

Jan Matejek (matejcik) almost 10 years ago (revision 106)

- update to 2.7.7
  * bugfix-only release, over a hundred bugs fixed
  * backported hmac.compare_digest from python3, first step of PEP 466
- drop upstreamed patches:
  * CVE-2014-1912-recvfrom_into.patch
  * python-2.7.4-no-REUSEPORT.patch
  * python-2.7.6-bdist-rpm.patch
  * python-2.7.6-imaplib.patch
  * python-2.7.6-sqlite-3.8.4-tests.patch
- refresh patches:
  * python-2.7.3-ssl_ca_path.patch
  * python-2.7.4-canonicalize2.patch
  * xmlrpc_gzip_27.patch
- added python keyring and signature for the main tarball

Stephan Kulow (coolo) accepted request 226492 from

Jan Matejek (matejcik) about 10 years ago (revision 105)

- Use profile-opt only when profiling is enabled
- python-2.7.2-disable-tests-in-test_io.patch: removed, no longer needed
- update testsuite exclusion list:
  * test_signal and test_posix fail due to qemu bugs (forwarded request 226488 from Andreas_Schwab)

Stephan Kulow (coolo) accepted request 222235 from

Jan Matejek (matejcik) about 10 years ago (revision 104)

- added patches for CVE-2013-1752 (bnc#856836) issues that are
  missing in 2.7.6:
  python-2.7.6-imaplib.patch
  python-2.7.6-poplib.patch
  smtplib_maxline-2.7.patch
- CVE-2013-1753 (bnc#856835) gzip decompression bomb in xmlrpc client:
  xmlrpc_gzip_27.patch
- python-2.7.6-bdist-rpm.patch: fix broken "setup.py bdist_rpm" command
  (bnc#857470, issue18045)
- multilib patch: add "~/.local/lib64" paths to search path
  (bnc#637176)
- CVE-2014-1912-recvfrom_into.patch: fix potential buffer overflow
  in socket.recvfrom_into (CVE-2014-1912, bnc#863741)

Stephan Kulow (coolo) accepted request 213846 from

Sascha Peilicke (saschpe) over 10 years ago (revision 103)

- Add Obsoletes/Provides for python-ctypes. (forwarded request 213741 from k0da)

Tomáš Chvátal (scarabeus_factory) accepted request 212641 from

Jan Matejek (matejcik) over 10 years ago (revision 102)

Please submit to factory.
- Ignore uuid testcase in the testsuite, it relies on unreliable
  ifconfig output. (forwarded request 209702 from matz2)

Stephan Kulow (coolo) accepted request 209596 from

Sascha Peilicke (saschpe) over 10 years ago (revision 101)

Fix python for ppc64le, please forward to factory asap (forwarded request 209414 from adrianSuSE)

Stephan Kulow (coolo) accepted request 208559 from

Jan Matejek (matejcik) over 10 years ago (revision 100)

- update to 2.7.6
  * bugfix-only release
  * SSL-related fixes
  * upstream fix for CVE-2013-4238
  * upstream fixes for CVE-2013-1752
- removed upstreamed patch CVE-2013-4238_py27.patch
- reintroduce audioop.so as the problems with it seem to be fixed
  (bnc#831442)
- docs are now versioned with patchlevel too

Tomáš Chvátal (scarabeus_factory) accepted request 202941 from

Sascha Peilicke (saschpe) over 10 years ago (revision 99)

- exclude test_mmap under qemu_linux_user - emulation fails here
  as the tests mmap address conflicts with qemu (forwarded request 202906 from dirkmueller)

Stephan Kulow (coolo) accepted request 200554 from

Sascha Peilicke (saschpe) over 10 years ago (revision 98)

- build with -DOPENSSL_LOAD_CONF so python honours 
 the system's openSSL configuration if any, allowing it to
 benefit from openssl ENGINE functionality. (forwarded request 199755 from elvigia)

Adrian Schröter (adrianSuSE) committed over 10 years ago (revision 97)

Split 13.1 from Factory

Stephan Kulow (coolo) accepted request 196449 from

Jan Matejek (matejcik) over 10 years ago (revision 96)

- update python-2.7.3-ssl_ca_path.patch patch to load default verify locations
  if no ca_certs file is specified (bnc#827982, bnc#836739)

*** this SR also renames the patch and .changes entry for previous request
because wrong CVE number was used

Places

Revisions of python

Places