openeuler-ci-bot 32761b2be5

!368 gh-107845: Fix symlink handling for tarfile.data_filter ...

From: @fuowang 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen

2024-10-30 08:17:43 +00:00

00001-rpath.patch

update version to 3.9.9

2021-12-28 19:47:29 +08:00

00111-no-static-lib.patch

update version to 3.9.9

2021-12-28 19:47:29 +08:00

00251-change-user-install-location.patch

update version to 3.9.9

2021-12-28 19:47:29 +08:00

Add-loongarch-support.patch

add loongarch64 support and disable valgrind-devel for loongarch64

2022-12-02 11:13:31 +08:00

add-the-sm3-method-for-obtaining-the-salt-value.patch

add the sm3 method for obtaining the salt value

2022-01-13 20:42:06 -05:00

avoid-usage-of-md5-in-multiprocessing.patch

python3: avoid usage of md5 in multiprocessing

2022-12-28 20:47:17 +08:00

backport-3.9-gh-99889-Fix-directory-traversal-security-flaw-i.patch

backport upstream patches

2023-09-22 16:35:15 +08:00

backport-3.9-gh-104049-do-not-expose-on-disk-location-from-Si.patch

backport upstream patches

2023-09-22 16:35:15 +08:00

backport-3.9-gh-107845-Fix-symlink-handling-for-tarfile.data_.patch

gh-107845: Fix symlink handling for tarfile.data_filter

2024-10-29 11:17:15 +08:00

backport-3.9-gh-113659-Skip-hidden-.pth-files-GH-113660-GH-11.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-Add--with-wheel-pkg-dir-configure-option.patch

update version to 3.9.9

2021-12-28 19:47:29 +08:00

backport-bpo-20369-concurrent.futures.wait-now-deduplicates-f.patch

concurent.futures.wait() now deduplicates futures given as arg.

2022-03-15 19:36:20 +08:00

backport-bpo-35823-Allow-setsid-after-vfork-on-Linux.-GH-2294.patch

sync patches

2022-09-22 16:46:56 +08:00

backport-bpo-35823-subprocess-Fix-handling-of-pthread_sigmask.patch

sync patches

2022-09-22 16:46:56 +08:00

backport-bpo-35823-subprocess-Use-vfork-instead-of-fork-on-Li.patch

sync patches

2022-09-22 16:46:56 +08:00

backport-bpo-42146-Unify-cleanup-in-subprocess_fork_exec-GH-2.patch

sync patches

2022-09-22 16:46:56 +08:00

backport-bpo-46811-Make-test-suite-support-Expat-2.4.5.patch

Make test suite support Expat >=2.4.5

2022-03-07 16:53:22 +08:00

backport-CVE-2007-4559.patch

Fix CVE-2007-4559 by adding filter parameter to tarfile.extractall

2023-08-14 19:15:20 +08:00

backport-CVE-2020-10735.patch

fix CVE-2020-10735

2022-09-08 16:00:22 +08:00

backport-CVE-2021-28861.patch

fix CVE-2021-28861

2022-08-26 14:19:55 +08:00

backport-CVE-2022-37454.patch

fix CVE-2022-37454

2022-11-29 11:44:06 +08:00

backport-CVE-2022-42919.patch

fix cve-2022-42919

2022-11-09 19:25:24 +08:00

backport-CVE-2022-45061.patch

fix CVE-2022-45061

2022-11-12 15:41:29 +08:00

backport-CVE-2023-6597-gh-91133-tempfile.TemporaryDirectory-fix-symlink.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2023-24329.patch

backport upstream patches

2023-09-22 16:35:15 +08:00

backport-CVE-2023-40217.patch

fix CVE-2023-40217

2023-09-19 19:47:14 +08:00

backport-CVE-2024-0397-gh-114572-Fix-locking-in-cert_store_stats-and-ge.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-0450-gh-109858-Protect-zipfile-from-quoted-overlap-zi.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-3219-1-gh-122133-Authenticate-socket-connection-for-soc.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-3219-2-gh-122133-Rework-pure-Python-socketpair-tests-to.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-4032-gh-113171-gh-65056-Fix-private-non-global-IP-add.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-6232-gh-121285-Remove-backtracking-when-parsing-tarfi.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-6923-gh-121650-Encode-newlines-in-headers-and-verify-.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-7592-gh-123067-Fix-quadratic-complexity-in-parsing-quoted.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-CVE-2024-8088-gh-123270-Replaced-SanitizedNames-with-a-more-surgic.patch

fix CVE-2024-6232,CVE-2024-3219,CVE-2024-0450,CVE-2023-6597,CVE-2024-4032

2024-09-24 21:12:27 +08:00

backport-fix_xml_tree_assert_error.patch

Fix locking in cert_store_stats and get_ca_certs

2024-07-17 14:39:02 +08:00

backport-Make-urllib.parse.urlparse-enforce-that-a-scheme-mus.patch

fix CVE-2023-24329

2023-04-06 15:36:54 +08:00

Make-mailcap-refuse-to-match-unsafe-filenam.patch

modify the solution of CVE-2015-20107

2022-07-01 08:03:54 +08:00

pyconfig.h

Package init

2019-09-30 11:14:35 -04:00

python3-Add-sw64-architecture.patch

Add sw64 architecture

2022-11-18 14:59:12 +08:00

python3.spec

gh-107845: Fix symlink handling for tarfile.data_filter

2024-10-29 11:17:15 +08:00

python3.yaml

update python3.yaml.

2020-07-02 16:26:06 +08:00

Python-3.9.9.tar.xz

update version to 3.9.9

2021-12-28 19:47:29 +08:00

update-openssl-version-for-test-case.patch

Fix locking in cert_store_stats and get_ca_certs

2024-07-17 14:39:02 +08:00

Description

No description provided

69 MiB

Languages

C 100%