python-2.7.18-150000.68.1 < > , gMqp9|aa1O*Ȉ4"}\Y& rY+ %^CUcb/mKjeݼށG)_WpZ &$B"(kzI9q TĹEx ¸/d߫~H+)h ltnVeͿDVo kO;Xrv*>kmkjYaUv>S3 9;C.ZbiK/we@E>uͷ )sJb > C ? d / ( @ F P
| .
/0 1 4 7 7 : :P : < ( < 8 < r 9 > r : F> r > @ B F [ G t H I < X Y Z [ 0 \ 4 ] ^ b c d e f l u v w 0 x Ô y z Ȱ C python 2.7.18 150000.68.1 Python Interpreter Python is an interpreted, object-oriented programming language, and is
often compared to Tcl, Perl, Scheme, or Java. You can find an overview
of Python in the documentation and tutorials included in the python-doc
(HTML) or python-doc-pdf (PDF) packages.
If you want to install third party modules using distutils, you need to
install python-devel package. gMqibs-power9-15 SUSE Linux Enterprise 15 SUSE LLC Python-2.0 https://www.suse.com/ Development/Languages/Python https://www.python.org/ linux ppc64le >t 0 0
P P ,C I I -& 2 2 x _ _K [ [ L ` ` =I P P F F ;& M" M" 6 6 U
c
c "R "R K# W W g
g
g - 7 7 ; - -
" " & w w D D ` * * @ @ "/ m m OD = = B B >$ ; ; > p & > H
v n
-8 < < 7 & &
< JA JA : O O ; `X `X = = 1 0 AA큤A큤AA큤A큤A큤 gMTgMTg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMNg4gMKgMKgMTg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKg4gMKgMKgMVgMVgMVgMVgMVgMVgMTg4gMLgMLg4gMLgMLg4gMLgMLgMTg4gMLgMLg4gMLgMOg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLg4gMLgMLgMUgMTgMTgMT fd6c6e5b098ade0aa1b123b2963e56728eb3619754881baff7fb10fb165becdb bde79fc3885f60f31ee656d86ee7cfef30fdf7d3018c8fd805982d9fc8120994 bde79fc3885f60f31ee656d86ee7cfef30fdf7d3018c8fd805982d9fc8120994 abd3f646419f3a33f64814342bb894047bfda3ec695286aa2b07e340700f733f 93c068a02b190c3684397f5b922dfaeefee3df3bdb1e25d963ee7fb379d13ad2 93c068a02b190c3684397f5b922dfaeefee3df3bdb1e25d963ee7fb379d13ad2 fa3f60506840cc9f608d660fcd6265dbb22b53362a4bfdd98cd9c98876927308 ae4879a4cfdf41b86bbf1443dffe9dddad2970a7d3e778b2ba6e394948344ee9 ae4879a4cfdf41b86bbf1443dffe9dddad2970a7d3e778b2ba6e394948344ee9 046a34799e33a47832a21f34ded777c64616710f52cc75e7116796442c05cd43 df4d1ab57e0e1c6d3de7fffbdec903d428d3e4df09d3da3ece8a7a72f057b9b4 df4d1ab57e0e1c6d3de7fffbdec903d428d3e4df09d3da3ece8a7a72f057b9b4 228a008dd77f0bfe90718c9577fab61ef96b7adb4e608c5492385cea0c206e2d e1518148ca189c962d5e06b805c9e774c606ab5ae8dbab4a45c07751f2bea6c4 e1518148ca189c962d5e06b805c9e774c606ab5ae8dbab4a45c07751f2bea6c4 b708a282a1e9d211cccbdcc194ec3c6f8894a7e9ae003806b933f2c0cbde5f23 a8032dba6ef0eec2603fd85ee234fac65ff8475fa71181748e5cb5a2510b4d8d 71e94b72114736c23e7a8ad609ba35578fa52dcb9a6aec547b0b83fd8e4df39d af71194b97feb43ce6583f4f2fe8f894d8df89b2565bff32daecc7c42f7b0eef 5afa7deaa3c57121f134a8289b3c4d2de63f1ce0090172e17f485482e3129cc2 5afa7deaa3c57121f134a8289b3c4d2de63f1ce0090172e17f485482e3129cc2 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 0761477d9374fcc8a319dc390b44059c55843adae48b57fb69c78acf76b72368 0761477d9374fcc8a319dc390b44059c55843adae48b57fb69c78acf76b72368 df8c414bcf1679eec7aa0bff235cdf98829730da9b75ad50baa432b7ee87d2e4 28eec8bbf9df6dad6f59d525b24ab7b265758f45130657ec0b291d521884d237 28eec8bbf9df6dad6f59d525b24ab7b265758f45130657ec0b291d521884d237 b379c1e0ea1bc3db50745e3700fbd617b58424ce07f96dae45ab79ddc56d7b30 5f7069e1cfb6a48f7cc69212784da20d686ded1a82d4fec25b7ae905554388f7 5f7069e1cfb6a48f7cc69212784da20d686ded1a82d4fec25b7ae905554388f7 7b22ab3d374af60bb0eb9693c736e502b0e530263916c416611fe5ee8790e3cc f1d6e210d4b693a2265de57f5c6c7778f5160e74769b886f9329242d81b0e2e2 f1d6e210d4b693a2265de57f5c6c7778f5160e74769b886f9329242d81b0e2e2 2b29f5758fb7a2b3e876794c563b53aaebb88529ea40c6374975be54f83237b8 b6dae72b3c7985b5b14fa578b2c1c3964f29c97e063dc853e345f0d3f95bb398 b6dae72b3c7985b5b14fa578b2c1c3964f29c97e063dc853e345f0d3f95bb398 cc530147bfd552b8ea9c2613f7956de578196a3129b01d73ff50925094af826b 101182b8c9ac0c69faee73488a5fb8375465c108df67efdf4b72502c4dead688 101182b8c9ac0c69faee73488a5fb8375465c108df67efdf4b72502c4dead688 89bbcb75081406a2dd0d728e09138a21f469634cf7aef1e5c55f2779a9a6b763 8eca934507eb524bcfe7577d5ceb55a2926125ac72a5874e5db76eb51524ee9b 8eca934507eb524bcfe7577d5ceb55a2926125ac72a5874e5db76eb51524ee9b 08cca8469491cfead102a6bef69be1afab7529e129001a4ffb31433766a4335d 2830158a5e0b6216df95339c57b153fe208603be5c7bc496a6118f0b246f85a1 2830158a5e0b6216df95339c57b153fe208603be5c7bc496a6118f0b246f85a1 3f207cd262365b5c64246a76caf4fe319255eb83493a0985976607440c2c19e5 70520692a984afe753a4644fc4d6bc8b303989acefe8358438b503137405fb38 70520692a984afe753a4644fc4d6bc8b303989acefe8358438b503137405fb38 ef974db90bc549f14427a792ccfd7c6bdade19f281a679e2197cb18f3b13a811 bda0cc6f3934774876bb8c549b190c51ad8abff0faa7d3f1a11420afe16f177c bda0cc6f3934774876bb8c549b190c51ad8abff0faa7d3f1a11420afe16f177c c6ddc76661905a142bb489e72a19bb3c4ec045b4193656518acd4430f8ecbbdc 64007a1f4b1b51543d7017fd7230572678281efc5ca6157df3447bc9bb47f9fd 64007a1f4b1b51543d7017fd7230572678281efc5ca6157df3447bc9bb47f9fd 4e721a412fd4561c75485a1c4cf11262aa5d82bc68bd5d984629b62b398221d4 93d49b803cce9af6966eb20571db7ae9ca4ee455e5fee7803b5bac6597476cd5 93d49b803cce9af6966eb20571db7ae9ca4ee455e5fee7803b5bac6597476cd5 c622e4e53e332adaeb9a9ecd06f109c319be5146eb7de4b95c8bedc72cd819fa ebec9e6282c318aaa1dd3829e368bccdb5c24fc8de7125aff637119f966a63ae ebec9e6282c318aaa1dd3829e368bccdb5c24fc8de7125aff637119f966a63ae 83f7d09faa6a85a2cfe48f30e75252019da7356c97f5ff8a50a3db246c55dcff 55ddf17057609453f350d1652a89b890c8c51829d7d136f2d550b1a6d3a60fbd 55ddf17057609453f350d1652a89b890c8c51829d7d136f2d550b1a6d3a60fbd 832dd1a240df8ab4bb34d8f2597591f614a5312faa4a867e287ad4c7bf299808 7d3fdc59c3a7a2cf83c62557a8ec4b349663b0223047b05e055ae5aa80a7da22 7d3fdc59c3a7a2cf83c62557a8ec4b349663b0223047b05e055ae5aa80a7da22 6ff2b127c2698dc1384dedb8b99c70d305bf7511cd9a51be1a98c8c97fd23d69 c645dbec397e45af7b3bc713a8623a7429ade778a5231a541b8f7a77f7ed8afa c645dbec397e45af7b3bc713a8623a7429ade778a5231a541b8f7a77f7ed8afa 1c57c2ca2176e7d7b88e983a86cc904d22f480ccf5f124a213728b51a961e943 5a449b3565fd8d098b336f53e3f47414c91e3a3b037c5ae09e4b15b959eb7a48 5a449b3565fd8d098b336f53e3f47414c91e3a3b037c5ae09e4b15b959eb7a48 20a74746b7619ff8dc09a2538bef118bfcf001908524d77d9dc8d831a19f03c9 7a4fbe54d69b727df7c01924a785556e5466092c498ac2233f2d4d374e989c67 7a4fbe54d69b727df7c01924a785556e5466092c498ac2233f2d4d374e989c67 99be4f02902c038f1558b7cb9524bc4b42a6564fa6616f070b718b905ddfe62d 50ac650a57629290e91f1cb0812f6f7d5be2cac402cf1e642de8886ae68df330 50ac650a57629290e91f1cb0812f6f7d5be2cac402cf1e642de8886ae68df330 65f3f64e35c9db4f85672bf2193f645ab2ea2d3649bb28eba5d83e6a3f804d4f fb90a33e029ad7ef39aca9d2ccfe1e777382f16830abefa25afccda31e97e58a fb90a33e029ad7ef39aca9d2ccfe1e777382f16830abefa25afccda31e97e58a 5915ab9ffdfa1e5299c7512175011a7ced2bc924970de1eee645bc3943c482a0 bf5f622df1efc52ac3c966d287da4923e32add1b7960f6cc21ecda7ef11b593b bf5f622df1efc52ac3c966d287da4923e32add1b7960f6cc21ecda7ef11b593b cb65b79ad7a67f67fc49cd170648d9e2a4dd7cd72cf4a013a032f680bc2cb738 6697b0829bd5fcd64d2f39324597aeb37dde9a47689b7536f119c61f893feada 6697b0829bd5fcd64d2f39324597aeb37dde9a47689b7536f119c61f893feada f97b0df5f745f51f764634e3c0965295f2d1643d12ad8a94ba0e1a32301d390f 575d4369b80099038b0c4b6b8414067728e4a23618ca26fda6dfb5e98779da7f 575d4369b80099038b0c4b6b8414067728e4a23618ca26fda6dfb5e98779da7f 4f05568dd9fa927ef7f6e7b0189567e3d46b8a70a6f9eedee80d2eeab7fda7ce 64a6fc7470f4a66c3be2a94d71b4c53cca16078c13229c806d71eb1caef787ab 64a6fc7470f4a66c3be2a94d71b4c53cca16078c13229c806d71eb1caef787ab e3850d1a493b6b958e2bd9f66ec8b62a0d72ebb7c3eafcb83cfddf4faf920dd2 197e53b8d8bb021415daed3ba4ffbdd98a8014900bf57d658ec94cddce28b7bc 197e53b8d8bb021415daed3ba4ffbdd98a8014900bf57d658ec94cddce28b7bc a2e726f1789c1d5b611d4243692992be77cef2aa4fdc58fa56b072f64853a4e9 20755895f742ec4038900df893cec214a8878c909b5132d1ccf86b7b739caad5 b9a01fed6c8202b48125cfc621cd3dbcc84723b4665de981596845a6a82af56c b2c09dd7693e91069a71b74d6e61d2e85bae9cb90dc05cc3923cd04f1351f631 2ecf65a18e8e1358bb9192c7fe905d61daaaa8d6803fcd52e180c6f1da50f692 a57e80b8a0d16549b7a466ef3585bc8f13c1983dcf13845b22be1a748be3a0e6 277eb163a2b064061e5f84b904e37b54fa0010970a74e083488e1ed04960e7c7 277eb163a2b064061e5f84b904e37b54fa0010970a74e083488e1ed04960e7c7 5186810c169e033eae41c2010a89c982276999b94f1d4cebc5b9267f8e97ab70 830e705e684c2612ad8dda3ee157a95b1d290baf5504f00447453ae6418b8294 830e705e684c2612ad8dda3ee157a95b1d290baf5504f00447453ae6418b8294 4268c68294b00b82adc2dba7e600310cb45c468e5780aff2455eb8103d21d282 4665da300ca433e0fb7d86b85f3ee26b887f808413dbf3a292d61d17fcc98842 4665da300ca433e0fb7d86b85f3ee26b887f808413dbf3a292d61d17fcc98842 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 724a6f2b61251b7339e7069d4214026b1eb450711e8099fbce866d9c50e58e32 724a6f2b61251b7339e7069d4214026b1eb450711e8099fbce866d9c50e58e32 47532d524864d6ad2aa109f05f7bf77b68d48772fe421efb29605e23bad8ddc0 d535ed7e007df7e1fa30db2546c304284995b6cacd11a1eebfe735dcb8ef461a 965a945c42619368b2760caa7c2f5e23ca304c4b93bca0e89b79d061f9d9b4b8 b86371d3fc23f7b32d2c4fd4728e91ad1dc0fa95f253ee27fad4ba9025cd8a9f 3a3d5ad5e3c35d50b06a3bbb1eaeb6bb356afb8b7e0dbefa942c01522cd0624f 3a3d5ad5e3c35d50b06a3bbb1eaeb6bb356afb8b7e0dbefa942c01522cd0624f 37b4cb47babf65937b399f9dbc7fca98c3bf0528f3f0de63e3774c4326bf7875 4267e4397efe2d7dcdc2776237494d57fced67aed05a69dcfcd3283a6b281438 4267e4397efe2d7dcdc2776237494d57fced67aed05a69dcfcd3283a6b281438 7d9827fec848c29932e32465e761271475a0edca1ea0b4f2961e6d4521c632f3 c95c2245bf0888a1a62015daa963ea9549ea26e1cbdb95f0f8087ff8613f4fb3 c95c2245bf0888a1a62015daa963ea9549ea26e1cbdb95f0f8087ff8613f4fb3 e10c9954f20298e5ba4d7a6628b9df60f8ae907e9a7336293330f2fbdc81e137 d83bb4a855fa80336dfc01b3e14bd7d07257c056c7ab09848c59b87504a0971a d83bb4a855fa80336dfc01b3e14bd7d07257c056c7ab09848c59b87504a0971a 00b137ea0cd5d5bced4ad9b4c0665a83efc3b3039756eb11dce285a65fd23b0f b3ee29c496531c1ca3df296d0247f7ecf83b81a1f98d239c0e047873e68bfa1a b3ee29c496531c1ca3df296d0247f7ecf83b81a1f98d239c0e047873e68bfa1a 7e90a937b6d21b59029d2b66b1276eed2451d5f5bdd115aa9b16175b581be43a 6cc1146e8fdc01fe513f79e8b5c577e4f4dc98718dad50ae4ce6c4d4217439c0 6cc1146e8fdc01fe513f79e8b5c577e4f4dc98718dad50ae4ce6c4d4217439c0 16da7063b627f6ba101642ee6a3e8814fa88b3ab1912bad182e72caf48e85d87 b4b5459add57bd63478a1a6788ce301d22292b1554c90605bc3bf62a20ff293e b4b5459add57bd63478a1a6788ce301d22292b1554c90605bc3bf62a20ff293e 1ae0959ef8161b6a63e22dd21b776af8a6c040135d4c7d3bc721dacb5c99d6c4 38f40c67d38a573da8947de5664c4327fb01ab572470a9caaad706987da40e62 38f40c67d38a573da8947de5664c4327fb01ab572470a9caaad706987da40e62 369b613a54ce6e385476ee99b3c0d7defe482a742b2ef6a97a98e76c50782230 5e187f61a2c4a07ad05f5a70c0fe7ec70ae91b9fc85e81c42be3cb435e6da7f8 5e187f61a2c4a07ad05f5a70c0fe7ec70ae91b9fc85e81c42be3cb435e6da7f8 de4d1f2d2ad5ad0cfd1657a106476b31cb5db5ef9d1ff842b237c0c81f0c8a23 9f47df778a81f7a6db680f44c1611a5b4c4c9c4ff840b09d3bcf6fea974cdf2a c1649ee90f8535de061b77e5db7a60bdd33daa50c5fbd48f54123fd1c2127854 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root python-2.7.18-150000.68.1.src.rpm python python python(ppc-64) python2 python2_split_startup @ @ @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libdb-4.8.so()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.17)(64bit) libpython2.7.so.1.0()(64bit) libreadline.so.7()(64bit) libsqlite3.so.0()(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) python(abi) python-base rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 2.7 2.7.18 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 4.14.1 g4f@fH@f?]f h@e,e @eedeee Rd˖dD@dq@du@dtdm@dxdc>@cӼc0c|ck@c pcbbb@b@b@ba@a@a(@aim@aI@a'@a#aj@a`t`8`_T^J^@^@^>^>^;^8 @^.^g@^
@]f@]@]]]d@]d@]@]z@]V]y@]9]1] \t@\\7\7\\J@\J@\C@\2[[#@[6 @[ @[
@[Za@Z@ZxG@ZtRZp^@Z
CVE-2021-3737-fix-HTTP-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
(boo#1189241, CVE-2021-3737) - Renamed patch for assigned CVE:
* bpo43075-fix-ReDoS-in-request.patch -> CVE-2021-3733-fix-ReDoS-in-request.patch
(boo#1189287, CVE-2021-3733)
- Fix python-doc build (bpo#35293):
* sphinx-update-removed-function.patch
- Update documentation formatting for Sphinx 3.0 (bpo#40204). - Add bpo43075-fix-ReDoS-in-request.patch which fixes ReDoS in
request (bpo#43075, boo#1189287).
- Add missing security announcement to
bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch. - Add bpo44022-fix-http-client-infinite-line-reading-after-a-HTTP-100-Continue.patch
which fixes http client infinite line reading (DoS) after a http
100 (bpo#44022, boo#1189241). - Modify Lib/ensurepip/__init__.py to contain the same version
numbers as are in reality the ones in the bundled wheels
(bsc#1187668). - Add CVE-2021-23336-only-amp-as-query-sep.patch which forbids
use of semicolon as a query string separator (bpo#42967,
bsc#1182379, CVE-2021-23336). - Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
_ctypes/callproc.c, which may lead to remote code execution. - (bsc#1180125) We really don't Require python-rpm-macros package.
Unnecessary dependency. - Add patch configure_PYTHON_FOR_REGEN.patch which makes
configure.ac to consider the correct version of
PYTHON_FO_REGEN (bsc#1078326). - Use python3-Sphinx on anything more recent than SLE-15 (inclusive). - Update to 2.7.18, final release of Python 2. Ever.:
- Newline characters have been escaped when performing uu
encoding to prevent them from overflowing into to content
section of the encoded file. This prevents malicious or
accidental modification of data during the decoding process.
- Fixes a ReDoS vulnerability in `http.cookiejar`. Patch by Ben
Caller.
- Fixed line numbers and column offsets for AST nodes for calls
without arguments in decorators.
- bsc#1155094 (CVE-2019-18348) Disallow control characters in
hostnames in http.client. Such potentially malicious header
injection URLs now cause a InvalidURL to be raised.
- Fix urllib.urlretrieve failing on subsequent ftp transfers
from the same host.
- Fix problems identified by GCC's -Wstringop-truncation
warning.
- AddRefActCtx() was needlessly being checked for failure in
PC/dl_nt.c.
- Prevent failure of test_relative_path in test_py_compile on
macOS Catalina.
- Fixed possible leak in `PyArg_Parse` and similar
functions for format units "es#" and "et#" when the macro
`PY_SSIZE_T_CLEAN` is not defined.
- Remove upstreamed patches:
- CVE-2019-18348-CRLF_injection_via_host_part.patch
- python-2.7.14-CVE-2017-1000158.patch
- CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch
- CVE-2018-1061-DOS-via-regexp-difflib.patch
- CVE-2019-10160-netloc-port-regression.patch
- CVE-2019-16056-email-parse-addr.patch - Add CVE-2019-9674-zip-bomb.patch to improve documentation
warning about dangers of zip-bombs and other security problems
with zipfile library. (bsc#1162825 CVE-2019-9674) - Change to Requires: libpython%{so_version} == %{version}-%{release}
to python-base to keep both packages always synchronized (add
%{so_version}) (bsc#1162224). - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug
"Python urrlib allowed an HTTP server to conduct Regular
Expression Denial of Service (ReDoS)" (bsc#1162367) - Provide python-testsuite from devel subkg to ease py2->py3
dependencies - Add python-2.7.17-switch-off-failing-SSL-tests.patch to switch
off tests coliding with the combination of modern Python and
ancient OpenSSL on SLE-12. - libnsl is required only on more recent SLEs and openSUSE, older
glibc supported NIS on its own. - Add provides in gdbm subpackage to provide dbm symbols. This
allows us to use %%{python_module dbm} as a dependency and have
it properly resolved for both python2 and python3 - Drop appstream-glib BuildRequires and no longer call
appstream-util validate-relax: eliminate a build cycle between
as-glib and python. The only thing would would gain by calling
as-uril is catching if upstream breaks the appdata.xml file in a
future release. Considering py2 is dying, chances for a new
release, let alone one breaking the xml file, are slim. - Unify packages among openSUSE:Factory and SLE versions.
(bsc#1159035) ; add missing records to this changelog.
- Add idle.desktop and idle.appdata.xml to provide IDLE in menus
(bsc#1153830) - Add python2_split_startup Provide to make it possible to
conflict older packages by shared-python-startup. - Move /etc/pythonstart script to shared-python-startup
package. - Add bpo-36576-skip_tests_for_OpenSSL-111.patch (originally from
bpo#36576) skipping tests failing with OpenSSL 1.1.1. Fixes
bsc#1149792 - Add adapted-from-F00251-change-user-install-location.patch fixing
pip/distutils to install into /usr/local. - Update to 2.7.17:
- a bug fix release in the Python 2.7.x series. It is expected
to be the penultimate release for Python 2.7.
- Removed patches included upstream:
- CVE-2018-20852-cookie-domain-check.patch
- CVE-2019-16935-xmlrpc-doc-server_title.patch
- CVE-2019-9636-netloc-no-decompose-characters.patch
- CVE-2019-9947-no-ctrl-char-http.patch
- CVE-2019-9948-avoid_local-file.patch
- python-2.7.14-CVE-2018-1000030-1.patch
- python-2.7.14-CVE-2018-1000030-2.patch
- Renamed remove-static-libpython.diff and python-bsddb6.diff to
remove-static-libpython.patch and python-bsddb6.patch to unify
filenames. - Add CVE-2019-16935-xmlrpc-doc-server_title.patch fixing
bsc#1153238 (aka CVE-2019-16935) fixing a reflected XSS in
python/Lib/DocXMLRPCServer.py - Add bpo36302-sort-module-sources.patch (boo#1041090) - Add CVE-2019-16056-email-parse-addr.patch fixing the email
module wrongly parses email addresses [bsc#1149955,
CVE-2019-16056] - boo#1141853 (CVE-2018-20852) add
CVE-2018-20852-cookie-domain-check.patch fixing
http.cookiejar.DefaultPolicy.domain_return_ok which did not
correctly validate the domain: it could be tricked into sending
cookies to the wrong server. - Skip test_urllib2_localnet that randomly fails in OBS - bsc#1138459: add CVE-2019-10160-netloc-port-regression.patch
which fixes regression introduced by the previous patch.
(CVE-2019-10160)
Upstream gh#python/cpython#13812 - Set _lto_cflags to nil as it will prevent to propage LTO
for Python modules that are built in a separate package. - bsc#1130840 (CVE-2019-9947): add CVE-2019-9947-no-ctrl-char-http.patch
Address the issue by disallowing URL paths with embedded
whitespace or control characters through into the underlying
http client request. Such potentially malicious header
injection URLs now cause a ValueError to be raised. - bsc#1130847 (CVE-2019-9948) add CVE-2019-9948-avoid_local-file.patch
removing unnecessary (and potentially harmful) URL scheme
local-file://. - bsc#1129346: add CVE-2019-9636-netloc-no-decompose-characters.patch
Characters in the netloc attribute that decompose under NFKC
normalization (as used by the IDNA encoding) into any of ``/``,
``?``, ``#``, ``@``, or ``:`` will raise a ValueError. If the
URL is decomposed before parsing, or is not a Unicode string,
no error will be raised (CVE-2019-9636).
Upstream commits e37ef41 and 507bd8c. - (bsc#1111793) Update to 2.7.16:
* bugfix-only release: complete list of changes on
https://github.com/python/cpython/blob/2.7/Misc/NEWS.d/2.7.16rc1.rst
* Removed openssl-111.patch and CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch
which are fully included in the tarball.
* Updated patches to apply cleanly:
CVE-2019-5010-null-defer-x509-cert-DOS.patch
bpo36160-init-sysconfig_vars.patch
do-not-use-non-ascii-in-test_ssl.patch
openssl-111-middlebox-compat.patch
openssl-111-ssl_options.patch
python-2.5.1-sqlite.patch
python-2.6-gettext-plurals.patch
python-2.7-dirs.patch
python-2.7.2-fix_date_time_compiler.patch
python-2.7.4-canonicalize2.patch
python-2.7.5-multilib.patch
python-2.7.9-ssl_ca_path.patch
python-bsddb6.diff
remove-static-libpython.patch
* Update python-2.7.5-multilib.patch to pass with new platlib
regime. - bsc#1109847 (CVE-2018-14647): add
CVE-2018-14647_XML_SetHashSalt-in_elementtree.patch fixing
bpo-34623. - bsc#1073748: add bpo-29347-dereferencing-undefined-pointers.patch
PyWeakref_NewProxy@Objects/weakrefobject.c creates new isntance
of PyWeakReference struct and does not intialize wr_prev and
wr_next of new isntance. These pointers can have garbage and
point to random memory locations.
Python should not crash while destroying the isntance created
in the same interpreter function. As per my understanding, both
wr_prev and wr_next of PyWeakReference instance should be
initialized to NULL to avoid segfault. - bsc#1122191: add CVE-2019-5010-null-defer-x509-cert-DOS.patch
fixing bpo-35746 (CVE-2019-5010).
An exploitable denial-of-service vulnerability exists in the
X509 certificate parser of Python.org Python 2.7.11 / 3.7.2.
A specially crafted X509 certificate can cause a NULL pointer
dereference, resulting in a denial of service. An attacker can
initiate or accept TLS connections using crafted certificates
to trigger this vulnerability. - Use upstream-recommended %{_rpmconfigdir}/macros.d directory
for the rpm macros. - Add patch openssl-111.patch to work with openssl-1.1.1
(bsc#1113755) - Apply "CVE-2018-1000802-shutil_use_subprocess_no_spawn.patch" which
converts shutil._call_external_zip to use subprocess rather than
distutils.spawn. [bsc#1109663, CVE-2018-1000802] - Apply "CVE-2018-1061-DOS-via-regexp-difflib.patch" to prevent
low-grade poplib REDOS (CVE-2018-1060) and to prevent difflib REDOS
(CVE-2018-1061). Prior to this patch mail server's timestamp was
susceptible to catastrophic backtracking on long evil response from
the server. Also, it was susceptible to catastrophic backtracking,
which was a potential DOS vector.
[bsc#1088004 and bsc#1088009, CVE-2018-1061 and CVE-2018-1060] - Apply "CVE-2017-18207.patch" to add a check to Lib/wave.py that
verifies that at least one channel is provided. Prior to this
check, attackers could cause a denial of service (divide-by-zero
error and application crash) via a crafted wav format audio file.
[bsc#1083507, CVE-2017-18207] - Apply "python-sorted_tar.patch" (bsc#1086001, boo#1081750)
sort tarfile output directory listing - update to 2.7.15
* dozens of bugfixes, see NEWS for details
- removed obsolete patches:
* python-ncurses-6.0-accessors.patch
* python-fix-shebang.patch
* gcc8-miscompilation-fix.patch
- add patch from upstream:
* do-not-use-non-ascii-in-test_ssl.patch - Add gcc8-miscompilation-fix.patch (boo#1084650). - Apply "python-2.7.14-CVE-2017-1000158.patch" to prevent integer
overflows in PyString_DecodeEscape that could have resulted in
heap-based buffer overflow attacks and possible arbitrary code
execution. [bsc#1068664, CVE-2017-1000158] - exclude test_socket & test_subprocess for PowerPC boo#1078485
(same ref as previous change) - Add python-skip_random_failing_tests.patch bypass boo#1078485
and exclude many tests for PowerPC - Add patch python-fix-shebang.patch to fix bsc#1078326 - exclude test_regrtest for s390, where it does not segfault as it should
(fixes bsc#1073269)
- fix segfault while creating weakref - bsc#1073748, bpo#29347
(this is actually fixed by the 2.7.14 update; mentioning this for purposes
of bugfix tracking) - update to 2.7.14
* dozens of bugfixes, see NEWS for details
* fixed possible integer overflow in PyString_DecodeEscape (CVE-2017-1000158, bsc#1068664)
* fixed segfaults with dict mutated during search
* fixed possible free-after-use problems with buffer objects with custom indexing
* fixed urllib.splithost to correctly parse fragments (bpo-30500)
- drop upstreamed python-2.7.13-overflow_check.patch
- drop unneeded python-2.7.12-makeopcode.patch
- drop upstreamed 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch
- Apply "python-2.7.14-CVE-2018-1000030-1.patch" and
"python-2.7.14-CVE-2018-1000030-2.patch" to remedy a bug that
would crash the Python interpreter when multiple threads used the
same I/O stream concurrently. This issue is not classified as a
security vulnerability due to the fact that an attacker must be
able to run code, however in some situations -- such as function
as a service -- this vulnerability can potentially be used by an
attacker to violate a trust boundary. [bsc#1079300,
CVE-2018-1000030] - Call python2 instead of python in macros - Fix test broken with OpenSSL 1.1 (bsc#1042670)
* add 0001-2.7-bpo-30714-ALPN-changes-for-OpenSSL-1.1.0f-3094.patch - drop SUSE_ASNEEDED=0 as it is not needed anymore - Add libnsl-devel build requires for glibc obsoleting libnsl - obsolete/provide python-argparse and provide python2-argparse,
because the argparse module is available from python 2.7 up - SLE package update (bsc#1027282)
- refresh python-2.7.5-multilib.patch
- dropped upstreamed patches:
python-fix-short-dh.patch
python-2.7.7-mhlib-linkcount.patch
python-2.7-urllib2-localnet-ssl.patch
CVE-2016-0772-smtplib-starttls.patch
CVE-2016-5699-http-header-injection.patch
CVE-2016-5636-zipimporter-overflow.patch
python-2.7-httpoxy.patch
- Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1.
(dimstar@opensuse.org) - Add reproducible.patch to allow reproducible builds of various
python packages like python-amqp
Upstream: https://github.com/python/cpython/pull/296 - update to 2.7.13
* dozens of bugfixes, see NEWS for details
* updated cipher lists for openssl wrapper, support openssl >= 1.1.0
* properly fix HTTPoxy (CVE-2016-1000110)
* profile-opt build now applies PGO to modules as well
- update python-2.7.10-overflow_check.patch
with python-2.7.13-overflow_check.patch, incorporating upstream changes
(bnc#964182)
- add "-fwrapv" to optflags explicitly because upstream code still
relies on it in many places - provide python2-* symbols, for support of new packages built as
python2-foo
- rename macros.python to macros.python2 accordingly
- require python-rpm-macros package, drop macro definitions from
macros.python2 - initial packaging of `python27` side-by-side variant (fate#321075, bsc#997436)
- renamed `python` to `python27` in package names and requires
- removed Provides and Obsoletes clauses
- dropped SLE12-only patch python-2.7.9-sles-disable-verification-by-default.patch,
companion sle_tls_checks_policy.py file and the python-strict-tls-checks subpackage
- dropped profile files
- removed /usr/bin/python and /usr/bin/python2, along with other unversioned
aliases
- rewrote macros file to enable stand-alone packages depending on py2.7
- re-included downloaded version of HTML documentation - update to 2.7.12
* dozens of bugfixes, see NEWS for details
* fixes multiple security issues:
CVE-2016-0772 TLS stripping attack on smtplib (bsc#984751)
CVE-2016-5636 zipimporter heap overflow (bsc#985177)
CVE-2016-5699 httplib header injection (bsc#985348)
(this one is actually fixed since 2.7.10)
- removed upstreamed python-2.7.7-mhlib-linkcount.patch
- refreshed multilib patch
- python-2.7.12-makeopcode.patch - run newly-built python interpreter
to make opcodes, in order not to require pre-built python
- update LD_LIBRARY_PATH to use $PWD instead of "." because the test
process escapes to its own directory
- modify shebang-fixing scriptlet to ignore makeopcodetargets.py - CVE-2016-0772-smtplib-starttls.patch:
smtplib vulnerability opens startTLS stripping attack
(CVE-2016-0772, bsc#984751)
- CVE-2016-5636-zipimporter-overflow.patch:
heap overflow when importing malformed zip files
(CVE-2016-5636, bsc#985177)
- CVE-2016-5699-http-header-injection.patch:
incorrect validation of HTTP headers allow header injection
(CVE-2016-5699, bsc#985348)
- python-2.7-httpoxy.patch:
HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY
when REQUEST_METHOD is also set
(CVE-2016-1000110, bsc#989523) - Add python-2.7.10-overflow_check.patch to fix broken overflow checks.
[bnc#964182] - copy strict-tls-checks subpackage from SLE to retain future compatibility
(not built in openSUSE)
- do this properly to fix bnc#945401
- update SLE check to exclude Leap which also has version 1315,
just to be sure - Add python-ncurses-6.0-accessors.patch: Fix build with
NCurses 6.0 and OPAQUE_WINDOW set to 1. - add missing ssl.pyc and ssl.pyo to package
- implement python-strict-tls-checks subpackage
* when present, Python will perform TLS certificate checking by default.
it is possible to remove the package to turn off the checks
for compatibility with legacy scripts.
* as discussed in fate#318300
* this is not built for openSUSE, but retained here in case we want
to build the package for a SLE system - python-fix-short-dh.patch: Bump DH parameters to 2048 bit
to fix logjam security issue. bsc#935856 - add __python2 compatibility macro (used by Fedora) (fate#318838) - update to 2.7.10
- removed obsolete python-2.7-urllib2-localnet-ssl.patch - Reenable test_posix on aarch64 - python-2.7.4-aarch64.patch: Remove obsolete patch
- python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for
aarch64 - update to 2.7.9
* contains full backport of ssl module from Python 3.4 (PEP466)
* HTTPS certificate validation enabled by default (PEP476)
* SSLv3 disabled by default (bnc#901715)
* backported ensurepip module (PEP477)
* fixes several missing CVEs from last release: CVE-2013-1752,
CVE-2013-1753
* dozens of minor bugfixes
- dropped upstreamed patches: python-2.7.6-poplib.patch,
smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch
- dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it
with ssl module from Python 3
- libffi was upgraded upstream, seems to contain our changes,
so dropping libffi-ppc64le.diff as well
- python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional
"import ssl" from test_urllib2_localnet that caused it to fail without ssl - skip test_thread in qemu_linux_user mode /sbin/ldconfig /sbin/ldconfig python-elementtree python-nothreads python-sqlite python21 ibs-power9-15 1733153649
" # # % & & ( ) ) + , , . / / 1 2 2 4 5 5 7 8 8 : ; ; = > > @ A A C D D F G G I J J L M M O P P R S S U V V X Y Y [ \ \ ^ _ _ a b b d e f g h i j k l l n o o q r r t u v v x y z { | | ~ 2.7 2.7.18-150000.68.1 2.7.18-150000.68.1 2.7.18 python2.7 bsddb __init__.py __init__.pyc __init__.pyo db.py db.pyc db.pyo dbobj.py dbobj.pyc dbobj.pyo dbrecio.py dbrecio.pyc dbrecio.pyo dbshelve.py dbshelve.pyc dbshelve.pyo dbtables.py dbtables.pyc dbtables.pyo dbutils.py dbutils.pyc dbutils.pyo test __init__.py __init__.pyc __init__.pyo test_all.py test_all.pyc test_all.pyo test_associate.py test_associate.pyc test_associate.pyo test_basics.py test_basics.pyc test_basics.pyo test_compare.py test_compare.pyc test_compare.pyo test_compat.py test_compat.pyc test_compat.pyo test_cursor_pget_bug.py test_cursor_pget_bug.pyc test_cursor_pget_bug.pyo test_db.py test_db.pyc test_db.pyo test_dbenv.py test_dbenv.pyc test_dbenv.pyo test_dbobj.py test_dbobj.pyc test_dbobj.pyo test_dbshelve.py test_dbshelve.pyc test_dbshelve.pyo test_dbtables.py test_dbtables.pyc test_dbtables.pyo test_distributed_transactions.py test_distributed_transactions.pyc test_distributed_transactions.pyo test_early_close.py test_early_close.pyc test_early_close.pyo test_fileid.py test_fileid.pyc test_fileid.pyo test_get_none.py test_get_none.pyc test_get_none.pyo test_join.py test_join.pyc test_join.pyo test_lock.py test_lock.pyc test_lock.pyo test_misc.py test_misc.pyc test_misc.pyo test_pickle.py test_pickle.pyc test_pickle.pyo test_queue.py test_queue.pyc test_queue.pyo test_recno.py test_recno.pyc test_recno.pyo test_replication.py test_replication.pyc test_replication.pyo test_sequence.py test_sequence.pyc test_sequence.pyo test_thread.py test_thread.pyc test_thread.pyo lib-dynload _bsddb.so _hashlib.so _sqlite3.so _ssl.so readline.so sqlite3 __init__.py __init__.pyc __init__.pyo dbapi2.py dbapi2.pyc dbapi2.pyo dump.py dump.pyc dump.pyo test __init__.py __init__.pyc __init__.pyo dbapi.py dbapi.pyc dbapi.pyo dump.py dump.pyc dump.pyo factory.py factory.pyc factory.pyo hooks.py hooks.pyc hooks.pyo py25tests.py py25tests.pyc py25tests.pyo regression.py regression.pyc regression.pyo transactions.py transactions.pyc transactions.pyo types.py types.pyc types.pyo userfunctions.py userfunctions.pyc userfunctions.pyo ssl.py ssl.pyc ssl.pyo python LICENSE README README.SUSE /usr/lib64/ /usr/lib64/python2.7/ /usr/lib64/python2.7/bsddb/ /usr/lib64/python2.7/bsddb/test/ /usr/lib64/python2.7/lib-dynload/ /usr/lib64/python2.7/sqlite3/ /usr/lib64/python2.7/sqlite3/test/ /usr/share/doc/packages/ /usr/share/doc/packages/python/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:36648/SUSE_SLE-15_Update/5cc773bde90c584ce45e7b98481ef41b-python.SUSE_SLE-15_Update drpm xz 5 ppc64le-suse-linux
directory Python script, ASCII text executable python 2.7 byte-compiled ASCII text empty ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c95a56ed8941cf3d122dab7f2d7e674c6fba346, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c6efa054cdf3bd37b2e777fb6553a9ef0998227, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=8bfe2a818fb7ca3bdc736b5683ac1e3e47f0725f, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=9d15da7b2ec99011ea29c8429494a8fb7dfe8b65, stripped ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=dba59d49da88b60d6998cf405ad34c4247354a69, stripped Python script, ISO-8859 text executable
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` f m s }
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R ȭ'QEz@ utf-8 e07aa29f725f71fd2376b21de4c074b9a33acc00c60b91c1bff3e4d85b67c400 ? 7zXZ
! t/
_] "k%r) Ӛ/*z+REW&N- d4 v;K>|JWWy\
,+<|T!r۴}'7!,t0.w%l 5 B1A
H= Wȅ
Dh4&6 H9Sb `;+ JoWT|Y\RUuokr!rƉ)%R_VQ;맇 S`X_JŸGS I\ s=wjz zr5`pE<
DW,K1BEC9}k0Z~vROMi" .bVGcۯ"b$·]^sec;[Gd[͂aNIJ}x
ןǵKFi9;8 PVLȪήX=*{kq兖w ^c~ m 8*D@+" bUނnۂ\_{(#L2x/|CZ4/AЩCTN'96,9hFst2-?+$,{~K)d]o( /txL+tnE30LݮqK(LQLt$Iv5JzA6d$>dxO2
.=/kTy4T v~rr9rOѠ rdZp!hf䰉{kF$hYXsg$$
BOA>Th~o3vԍn֬S/m4 ^YQwhvl#V#q^Qsmk1q
o`<<= Ql_;J,V!`K9ǃYׅԻM"*K b3瘟22h
Ƃ$48DגX nև:X#ua: @VhFbyW Cn-6
";?ϽVF^x4q$Ц0 |Am!IeyL52:r^$G6xQNoQ80:)\f#ҩؔ-x),(A=|`Rd? y&z֛]-{t5E_VxYk D2S% h&ɚڞH1BIE-zˌ| t}o5: ;L-sʆ3V/.N(]_tH=* &v DWC<Cf AX$^՟̮*[T˥Cs @729|?YRN,B"2E?@ ^;qE=(A ʺmm^!7jSZ(sMRcVRt(3BSz5Q='/vWuj0UV$. B%oddi0w `#Q\ U'\r,b~[áNf!>#ZS1~ $8.ۓ/eYnuFS#
,gf.0zO
M:`Φ랒s 삍ǾFzC:
hQ m[?2&[i?x}ܹF# }TeL$"&X*4އm*XMu:ĭF_W?`7R^r>dzL)Gp@6Ħ /njr-R ߫Q*^JSqhzV
91łI&!JL0 {x8x?D; !%35vFYܬ k{W3{& }Zm 43es 챸.8\WXBZs1k3m n$
ar6Dž2-R2@ 9&!L?s2-"2 &Z\;,H^w=_6X
MK'F($xG}撑K=?xy:
b :EF%cI3"@aGM&UN}$u mep1-k} .)Fl{4bojFFt 9 6C
YZ