Hi, we're the Python-maint team from Red Hat, and we'd like to experiment with sharing with you what we are working on from month to month. There are some things we should not disclose (such as embargoed CVEs), but the majority of what we do is out in public. Please let us know if you find this useful and whether you'd like us to continue.
So here are the highlights of what we've been working on this April, 2020.
*Red Hat Enterprise Linux:*
* Updating python38-pip to support manylinux2014 in future RHEL8
* Fixing CVE-2020-10108 and CVE-2020-10109 in python-twisted-web on RHEL 6 and 7
* Fixing CVE-2019-20477 and CVE-2019-20477 in PyYAML on RHEL 8 and RHSCL 3.5
* Fixing CVE-2020-8492 in python3 on RHEL 7 and 8
* For RHEL9 preparations—see the Fedora section
*Red Hat Software Collections:*
* upcoming rh-python38 collection
* Implementing FIPS support
* Fixing CVE-2020-8492
* Updating python-pip to 19.3.1 in order to support manylinux2014
*Fedora:*
* Updated Python 2 to the ultimate version (2.7.18)
* Python RPM generators were reworked and submitted to rpm upstream
* https://github.com/rpm-software-management/rpm/pull/1195
* The *last* Python 3.8 FTBFS Fedora 32 package (upm) fixed
* Phoronix reported Python is a lot faster in Fedora 32 (most likely due to --no-semantic-interposition):
* https://www.phoronix.com/scan.php?page=article&item=fedora-32-benchmarks...
* Automation for the %files section in Python packages (pyproject-rpm-macros) now exists
* https://src.fedoraproject.org/rpms/pyproject-rpm-macros/pull-request/44
* Several small imporvement ideas to make Python packaging easier were shared
* %py_provide
* https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproje...
* %pytest
* https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproje...
* Proposal to rename pythonXY to pythonX.Y was shared
* https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproje...
* The rebuilds of the newly-released Python 3.9.0a6 have started in Python 3.9 copr
* https://copr.fedorainfracloud.org/coprs/g/python/python3.9/
* The beta version of pip 20.1 was tested in Fedora and preparations have started for shipping the final version
* https://src.fedoraproject.org/rpms/python-pip/pull-request/62
* Update to Sphinx 3 is ongoing and testing has started in copr, there are still packages that block this effort
* Tracking bugzilla:https://bugzilla.redhat.com/show_bug.cgi?id=1783776
* Testing of Cython 3.0 alpha has started in copr
* Proposed a draft of new Python Packaging Guidelines for Fedora
* https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproje...
*CPython:*
* CVE-2020-8492 fixed, denial of service in urllib HTTP basic authentication:
* https://bugs.python.org/issue39503
* test_gdb now automatically skips tests when it detects that Python binary has been optimized:
* https://bugs.python.org/issue40019
* "PEP: Modify the C API to hide implementation details" proposed to python-dev:
* https://mail.python.org/archives/list/python-dev@python.org/thread/HKM774XKU...
* Victor Stinner's mentee Dong-hee Na is promoted to a core developer!
* antigravity module adjusted for FIPS mode:
* https://github.com/python/cpython/pull/19520
* IDLE has a high resolution icon now, to be included in Fedora
* Progress on isolating subinterpreters: the signal handler has been fixed on Windows.
* Added a RHEL8 x86_64 FIPS buildbot to the upstream CI fleet
* Some aarch64 upstream builders provided by python-main are now officially on the stable list, meaning we can say now that upstream officially supports aarch64 on Fedora, RHEL7 and RHEL8
* https://github.com/python/buildmaster-config/pull/186
*Misc:*
* pyp2rpm development/maintenance has been successfully transferred to the community
* Delivered an open-source talk at Red Hat Czech Open House
All the best, Python-maint
python-devel@lists.fedoraproject.org
-
Tomas Orsava