Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 844148

Summary: dev-lang/python: needs backport to fix hashlib deprecated algorithm behaviour with >=dev-libs/openssl-3
Product: Gentoo Linux Reporter: Sam James <sam>
Component: Current packagesAssignee: Python Gentoo Team <python>
Status: RESOLVED FIXED    
Severity: normal CC: mgorny
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://foss.heptapod.net/pypy/pypy/-/issues/3741
https://bugs.gentoo.org/show_bug.cgi?id=846389
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 797325    

Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-05-14 06:51:26 UTC
Noticed when running Gemato's test suite.

This is just a reminder for us to ensure the commit gets backported.

https://github.com/python/cpython/commit/48e2010d92076b472922fa632fffc98ee150004f

It's not in Python 3.8.13 or Python 3.10.4.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-05-16 08:49:11 UTC
3.9 & 3.11 are good.

Backport to 3.10 done.

I'm working on 3.8 right now, along with some other OpenSSL-3 fixes.

I'm not doing 3.7 since the patches don't apply cleanly and we don't really support it anyway.

I'm going to test PyPy's upstream bugfix afterwards.
Comment 2 Larry the Git Cow gentoo-dev 2022-05-16 09:00:25 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=42a3d8f92aab1cc896d7c3b0d24c12458f707fd1

commit 42a3d8f92aab1cc896d7c3b0d24c12458f707fd1
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2022-05-16 08:54:44 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2022-05-16 09:00:21 +0000

    dev-lang/python: Backport OpenSSL 3 fixes to 3.8.13_p1
    
    Bug: https://bugs.gentoo.org/844148
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 dev-lang/python/Manifest                |   1 +
 dev-lang/python/python-3.8.13_p1.ebuild | 361 ++++++++++++++++++++++++++++++++
 2 files changed, 362 insertions(+)
Comment 3 Larry the Git Cow gentoo-dev 2022-05-17 07:49:20 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=972df7506fdf616e2b923ad4ce44f86a607efb5c

commit 972df7506fdf616e2b923ad4ce44f86a607efb5c
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2022-05-17 07:47:53 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2022-05-17 07:49:17 +0000

    dev-python/pypy3: Backport OpenSSL 3 fixes as 7.3.9_p1
    
    Closes: https://bugs.gentoo.org/844148
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 dev-python/pypy3/Manifest              |   1 +
 dev-python/pypy3/pypy3-7.3.9_p1.ebuild | 200 +++++++++++++++++++++++++++++++++
 2 files changed, 201 insertions(+)