Hi,
we're the Python-maint team from Red Hat, and we'd like to
experiment with sharing with you what we are working on from
month to month. There are some things we should not disclose
(such as embargoed CVEs), but the majority of what we do is out
in public. Please let us know if you find this useful and
whether you'd like us to continue.
So here are the highlights of what we've been working on this
April, 2020.
Red Hat Enterprise Linux:
- Updating
python38-pip to support manylinux2014 in future RHEL8
- Fixing
CVE-2020-10108 and CVE-2020-10109 in python-twisted-web on
RHEL 6 and 7
- Fixing
CVE-2019-20477 and CVE-2019-20477 in PyYAML on RHEL 8 and
RHSCL 3.5
- Fixing
CVE-2020-8492 in python3 on RHEL 7 and 8
- For
RHEL9 preparations—see the Fedora section
Red Hat Software Collections:
- upcoming
rh-python38 collection
- Implementing
FIPS support
- Updating
python-pip to 19.3.1 in order to support manylinux2014
Fedora:
- Updated
Python 2 to the ultimate version (2.7.18)
- Python
RPM generators were reworked and submitted to rpm upstream
- The
*last* Python 3.8 FTBFS Fedora 32 package (upm) fixed
- Phoronix
reported Python is a lot faster in Fedora 32 (most likely
due to --no-semantic-interposition):
- Automation
for the %files section in Python packages
(pyproject-rpm-macros) now exists
- Several
small imporvement ideas to make Python packaging easier were
shared
- Proposal
to rename pythonXY to pythonX.Y was shared
- The
rebuilds of the newly-released Python 3.9.0a6 have started
in Python 3.9 copr
- The
beta version of pip 20.1 was tested in Fedora and
preparations have started for shipping the final version
- Update
to Sphinx 3 is ongoing and testing has started in copr,
there are still packages that block this effort
- Testing
of Cython 3.0 alpha has started in copr
- Proposed
a draft of new Python Packaging Guidelines for Fedora
CPython:
- CVE-2020-8492
fixed, denial of service in urllib HTTP basic
authentication:
- test_gdb
now automatically skips tests when it detects that Python
binary has been optimized:
- "PEP:
Modify the C API to hide implementation details" proposed to
python-dev:
- Victor
Stinner's mentee Dong-hee Na is promoted to a core
developer!
- antigravity
module adjusted for FIPS mode:
- IDLE
has a high resolution icon now, to be included in Fedora
- Progress
on isolating subinterpreters: the signal handler has been
fixed on Windows.
- Added
a RHEL8 x86_64 FIPS buildbot to the upstream CI fleet
- Some
aarch64 upstream builders provided by python-main are now
officially on the stable list, meaning we can say now that
upstream officially supports aarch64 on Fedora, RHEL7 and
RHEL8
Misc:
- pyp2rpm
development/maintenance has been successfully transferred to
the community
- Delivered
an open-source talk at Red Hat Czech Open House
All the best,
Python-maint