Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 945850 - dev-lang/python-3.12.8 and friends: stablereq
Summary: dev-lang/python-3.12.8 and friends: stablereq
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal enhancement
Assignee: Python Gentoo Team
URL:
Whiteboard:
Keywords: CC-ARCHES, SECURITY
Depends on: 945857 945858 945882 946002
Blocks: 945845
  Show dependency tree
 
Reported: 2024-12-04 10:54 UTC by Michał Górny
Modified: 2025-01-04 21:40 UTC (History)
0 users

See Also:
Package list:
=dev-lang/python-3.12.8 =dev-python/python-tests-3.12.8 =app-doc/python-docs-3.12.8
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2024-12-04 10:54:23 UTC
Please stabilize

 dev-lang/python-3.12.8: no change for 0 days, since 2024-12-04
 dev-python/python-tests-3.12.8: no change for 0 days, since 2024-12-04
 app-doc/python-docs-3.12.8: no change for 0 days, since 2024-12-04
Comment 1 Larry the Git Cow gentoo-dev 2024-12-07 11:27:03 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b8d345dfd9f4670b75e9b9bc1e4a583590c4fc8c

commit b8d345dfd9f4670b75e9b9bc1e4a583590c4fc8c
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-12-07 11:24:18 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-12-07 11:26:46 +0000

    profiles: mask =dev-lang/python-3.12.8 and =dev-lang/python-3.13.1
    
    3.12.8 and 3.13.1 break Mozilla's build system `mach` which is used in
    firefox, thunderbird, and spidermonkey. It's not clear if it's a CPython
    bug or a Mozilla bug (I've informed both sides) but the CVEs fixed in
    these security releases are rather minor indeed, especially when weighed
    against those packages being unbuildable.
    
    LLVM 19 and Rust 1.82.0 got stabled last night together with a default
    change to LLVM 19 which means more users will hit this too as they have
    to rebuild FF and friends.
    
    Done as lesser of two evils after discussion w/ mgorny.
    
    Bug: https://bugs.gentoo.org/945857
    Bug: https://bugs.gentoo.org/945882
    Bug: https://bugs.gentoo.org/946002
    Bug: https://bugs.gentoo.org/945850
    Bug: https://bugs.gentoo.org/945849
    Bug: https://bugs.gentoo.org/945845
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/package.mask | 6 ++++++
 1 file changed, 6 insertions(+)
Comment 2 NATTkA bot gentoo-dev Security 2024-12-07 11:36:12 UTC Comment hidden (obsolete)
Comment 3 Larry the Git Cow gentoo-dev 2024-12-10 07:29:35 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dc748f0c28bf1de31edeb0c62de5ce2c4662e2c1

commit dc748f0c28bf1de31edeb0c62de5ce2c4662e2c1
Author:     Joonas Niilola <juippis@gentoo.org>
AuthorDate: 2024-12-10 07:26:25 +0000
Commit:     Joonas Niilola <juippis@gentoo.org>
CommitDate: 2024-12-10 07:26:25 +0000

    profiles: unmask =dev-lang/python-3.12.8 and =dev-lang/python-3.13.1
    
     - Mozilla stack, both latest stable and unstable, is handled with an upstream
       patch for these python versions.
    
    Bug: https://bugs.gentoo.org/945857
    Bug: https://bugs.gentoo.org/945882
    Bug: https://bugs.gentoo.org/946002
    Bug: https://bugs.gentoo.org/945850
    Bug: https://bugs.gentoo.org/945849
    Bug: https://bugs.gentoo.org/945845
    Signed-off-by: Joonas Niilola <juippis@gentoo.org>

 profiles/package.mask | 10 ----------
 1 file changed, 10 deletions(-)
Comment 4 NATTkA bot gentoo-dev Security 2024-12-10 07:32:27 UTC
All sanity-check issues have been resolved
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-12-10 15:55:03 UTC
amd64 done
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-12-14 08:04:48 UTC
x86 done
Comment 7 Jakov Smolić archtester gentoo-dev 2024-12-23 23:47:38 UTC
ppc64 done
Comment 8 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 21:35:00 UTC
hppa done
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 21:36:25 UTC
arm done
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 21:36:53 UTC
arm64 done
Comment 11 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 21:39:27 UTC
ppc done
Comment 12 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-01-04 21:40:07 UTC
sparc done

all arches done