Files
packages/lang/python/python3/patches/003-do-not-run-compileall.patch
T
Josef Schlehofer a149847ebe python3: update to 3.13.15
Update to the latest 3.13 bugfix release.

Bump PYTHON3_PIP_VERSION to 26.2.1 to match the pip wheel bundled in
ensurepip, which the host build checks for. This pip also fixes
CVE-2026-3219 in the host pip.

Drop 100-test_hashlib-better-handle-support-for-SHA3.patch, which is
included upstream since 3.13.10 (gh-141907).

Refresh the other patches. Only the hunk offsets changed, and the
changed patches get the git headers they have in master.

The bundled libexpat, which the target build uses, goes from 2.7.3 to
2.8.2.

Fixes CVEs:
CVE-2025-6075, CVE-2025-8291, CVE-2025-11468, CVE-2025-12084,
CVE-2025-13462, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282,
CVE-2025-15366, CVE-2026-0672, CVE-2026-0864, CVE-2026-0865,
CVE-2026-1299, CVE-2026-1502, CVE-2026-2297, CVE-2026-3276,
CVE-2026-3446, CVE-2026-3644, CVE-2026-4224, CVE-2026-4360,
CVE-2026-4519, CVE-2026-4786, CVE-2026-6019, CVE-2026-6100,
CVE-2026-6879, CVE-2026-7210, CVE-2026-7774, CVE-2026-8328,
CVE-2026-9669, CVE-2026-11940, CVE-2026-11972, CVE-2026-12003,
CVE-2026-15308, CVE-2026-18503, CVE-2026-45186

Release notes:
https://docs.python.org/release/3.13.15/whatsnew/changelog.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-09-28 14:02:36 +03:00

24 lines
1.1 KiB
Diff

From 8a4da017902d21ac6cada21a3bb23caa5b39af0b Mon Sep 17 00:00:00 2001
From: Jeffery To <jeffery.to@gmail.com>
Date: Fri, 12 May 2023 19:40:11 +0800
Subject: [PATCH] Do not run compileall
--- a/Makefile.pre.in
+++ b/Makefile.pre.in
@@ -2575,6 +2575,7 @@ libinstall: all $(srcdir)/Modules/xxmodu
echo "Applying app store compliance patch"; \
patch --force --reject-file "$(abs_builddir)/app-store-compliance.rej" --strip 2 --directory "$(DESTDIR)$(LIBDEST)" --input "$(abs_srcdir)/$(APP_STORE_COMPLIANCE_PATCH)" || true ; \
fi
+ifeq (1,)
@ # Build PYC files for the 3 optimization levels (0, 1, 2)
-PYTHONPATH=$(DESTDIR)$(LIBDEST) $(RUNSHARED) \
$(PYTHON_FOR_BUILD) -Wi $(DESTDIR)$(LIBDEST)/compileall.py \
@@ -2585,6 +2586,7 @@ libinstall: all $(srcdir)/Modules/xxmodu
$(PYTHON_FOR_BUILD) -Wi $(DESTDIR)$(LIBDEST)/compileall.py \
-o 0 -o 1 -o 2 $(COMPILEALL_OPTS) -d $(LIBDEST)/site-packages -f \
-x badsyntax $(DESTDIR)$(LIBDEST)/site-packages
+endif
# bpo-21536: Misc/python-config.sh is generated in the build directory
# from $(srcdir)Misc/python-config.sh.in.