# changelog

author: jengelh@inai.de
changelog:
  - Update to release 1.21
    * Handle DWARF5 DW_OP_addrx and
      subprogram ret type with abstract_origin properly.


author: msuchanek@suse.com
changelog:
  - Handle zero sized per-cpu veriables in Linux BTF.
    + btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch


author: msuchanek@suse.com
changelog:
  - Update to version 1.21+git175.1ef87b2 (jsc#SLE-17288):
    * libbpf: bump dependency to >= 0.4.0
    * CMakeLists.txt: Enable SHARED and STATIC lib creation
    * libbpf: Allow to use packaged version
    * btfdiff: Support diffing DWARF vs detached BTF
    * pahole: Allow encoding BTF into a detached file
    * pahole: Add --kabi_prefix flag
    * btf_encoder: fix and complete filtering out zero-sized per-CPU variables
    * btf: Remove ftrace filter
    * pahole: Introduce --with_flexible_array option to show just types ending in a flexible array
    * Many updates to btf_encoder and bug fixes
  - Remove upstreamed patches
    - btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch
    - remove-ftrace-filter.patch
  - Pretend version 1.22 to make kernel happy
    + dwarves-Prep-1.22.patch


author: msuchanek@suse.com
changelog:
  - 15.4 has new elfutils, drop libebl-plugins dependency.
  - Update to version 1.21+git177.1ef87b2:
    * Fix crash with split BTF debuginfo
    * CMakeList.txt: Bump version to the upcoming 1.22 release, not out of the door yet
    - Remove upstreamed patch dwarves-Prep-1.22.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.22 (bsc#1190340).
    * Ability to encode BTF to a separate file
    * Multithreaded DWARF loading
    * Details at https://marc.info/?l=dwarves&m=162975403628056&w=2


author: mcepl@suse.com
changelog:
  - Add CVE-2020-27619-no-eval-http-content.patch fixing
    CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
    calls eval() on content retrieved via HTTP.


author: mcepl@suse.com
changelog:
  - (bsc#1179630) Update sphinx-update-removed-function.patch to
    work with all versions of Sphinx (not binding the Python
    documentation build to the latest verison of Sphinx). Updated
    version mentioned on gh#python/cpython#13236.


author: mcepl@suse.com
changelog:
  - Provide the newest setuptools wheel (bsc#1176262,
    CVE-2019-20916) in their correct form (bsc#1180686).


author: mcepl@suse.com
changelog:
  - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
    bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
    _ctypes/callproc.c, which may lead to remote code execution.


author: mcepl@suse.com
changelog:
  Update to 3.6.13, final release of 3.6 branch:
    * Security
    - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
      poisoning vulnerability by defaulting the query args
      separator to &, and allowing the user to choose a custom
      separator.
    - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
      buffers when computing the repr of ctypes.c_double and
      ctypes.c_longdouble values.
    - bpo#42103: Prevented potential DoS attack via CPU and RAM
      exhaustion when processing malformed Apple Property List
      files in binary format.
    - bpo#42051: The plistlib module no longer accepts entity
      declarations in XML plist files to avoid XML
      vulnerabilities. This should not affect users as entity
      declarations are not used in regular plist files.
    - bpo#40791: Add volatile to the accumulator variable in
      hmac.compare_digest, making constant-time-defeating
      optimizations less likely.
    * Core and Builtins
    - bpo#35560: Fix an assertion error in format() in debug
      build for floating point formatting with “n” format, zero
      padding and small width. Release build is not impacted.
      Patch by Karthikeyan Singaravelan.
    * Library
    - bpo#42103: InvalidFileException and RecursionError are now
      the only errors caused by loading malformed binary Plist
      file (previously ValueError and TypeError could be raised
      in some specific cases).
    * Tests
    - bpo#42794: Update test_nntplib to use offical group name of
      news.aioe.org for testing. Patch by Dong-hee Na.
    - bpo#41944: Tests for CJK codecs no longer call eval() on
      content received via HTTP.
  - Patches removed, because they were included in the upstream
    tarball:
    - CVE-2020-27619-no-eval-http-content.patch
    - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch


author: mcepl@suse.com
changelog:
  - Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
    getfile feature from pydoc, which is a security nightmare
    (among other things, CVE-2021-3426, allows disclosure of any
    file on the system; bsc#1183374, bpo#42988).


author: code@bnavigator.de
changelog:
  - Make sure to close the import_failed.map file after the exception
    has been raised in order to avoid ResourceWarnings when the
    failing import is part of a try...except block.


author: mcepl@cepl.eu
changelog:
  - Update to version 20190408.32abece bsc#1128323:
    * Multiline macros don't work correctly on older RPMs.


author: mcepl@cepl.eu
changelog:
  - Update to version 20190430.5260267:
    * Yet another attempt to preserve $PYTHONPATH set in the environment.
    * Document also %pytest_arch
    * Document %pytest in README.md


author: mcepl@cepl.eu
changelog:
  - Update to version 20190511.2ed22b6:
    * Add the first draft of pyproject_wheel and pyproject_install macros.


author: mcepl@cepl.eu
changelog:
  - Update to version 20190610.2ee3233:
    * Fix typo, missing opening brace.
    * Add the first draft of pyproject_wheel and pyproject_install macros.
    * Yet another attempt to preserve $PYTHONPATH set in the environment.
    * Document also %pytest_arch
    * Document %pytest in README.md
    * Multiline macros don't work correctly on older RPMs.
    * Add missing $ expansion on the pytest call
    * Rewrite pytest and pytest_arch into Lua macros with multiple arguments.
    * We should preserve existing PYTHONPATH.
    * Add --ignore to pytest calls to ignore build directories.


author: mcepl@cepl.eu
changelog:
  - Update to version 20191104.08e6493:
    * %pyproject_install macro should include --no-compile.
    * Recognise the _ for the macro arguments too


author: ngompa13@gmail.com
changelog:
  - Update to version 20200117.8e39013 bsc#1161770:
    * Add macros related to the Python dist metadata dependency generator


