Overview

Request 772510 superseded

- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367)

- Add Requires: libpython%{so_version} == %{version}-%{release}
to python3-base to keep both packages always synchronized
(bsc#1162224).

- Do not pull in bluez in base again, explain the cycle,
it needs to be solved by bluez maintainer for us by providing
just the headers separately

- Reame idle icons to idle3 in order to not conflict with python2
variant of the package
* renamed the icons
* renamed icon load in desktop file

- Add importlib_resources provide/obsolete as it is integral
part of the lang since 3.7 release

- Add -fno-semantic-interposition as it brings speed up:
https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup

- Update to 3.8.1:
- This is mainly bugfix release and no significant changes to
API are expected. The full changelog is available on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1
- Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch,
which is included in the upstream tarball.

Loading...
Request History
Matej Cepl's avatar

mcepl created request

- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367)

- Add Requires: libpython%{so_version} == %{version}-%{release}
to python3-base to keep both packages always synchronized
(bsc#1162224).

- Do not pull in bluez in base again, explain the cycle,
it needs to be solved by bluez maintainer for us by providing
just the headers separately

- Reame idle icons to idle3 in order to not conflict with python2
variant of the package
* renamed the icons
* renamed icon load in desktop file

- Add importlib_resources provide/obsolete as it is integral
part of the lang since 3.7 release

- Add -fno-semantic-interposition as it brings speed up:
https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup

- Update to 3.8.1:
- This is mainly bugfix release and no significant changes to
API are expected. The full changelog is available on
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1
- Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch,
which is included in the upstream tarball.


Factory Auto's avatar

factory-auto added opensuse-review-team as a reviewer

Please review sources


Factory Auto's avatar

factory-auto accepted review

Check script succeeded


Saul Goodman's avatar

licensedigger accepted review

ok


Dominique Leuenberger's avatar

dimstar_suse set openSUSE:Factory:Staging:A as a staging project

Being evaluated by staging project "openSUSE:Factory:Staging:A"


Dominique Leuenberger's avatar

dimstar_suse accepted review

Picked "openSUSE:Factory:Staging:A"


Dominique Leuenberger's avatar

dimstar accepted review


Matej Cepl's avatar

mcepl superseded request

- Update to 3.8.2:
- Complete list of changes is available at
https://docs.python.org/release/3.8.2/whatsnew/changelog.html#python-3-8-2-final,
but most of them are just bugfixes.
- Updated patches:
- F00102-lib64.patch
- OBS_dev-shm.patch
- SUSE-FEDORA-multilib.patch
- subprocess-raise-timeout.patch

- Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367)

- Add Requires: libpython%{so_version} == %{version}-%{release}
to python3-base to keep both packages always synchronized
(bsc#1162224).

- Do not pull in bluez in base again, explain the cycle,
it needs to be solved by bluez maintainer for us by providing
just the headers separately

- Reame idle icons to idle3 in order to not conflict with python2
variant of the package
* renamed the icons
* renamed icon load in desktop file

- Add importlib_resources provide/obsolete as it is integral
part of the lang since 3.7 release

openSUSE Build Service is sponsored by