Debian Patches

Status for pypy3/7.3.22+dfsg-1

Patch Description Author Forwarded Bugs Origin Last update
tests/test_fsync-eatmydata Tests: Skip fsync tests when building with eatmydata Stefano Rivera <stefanor@debian.org> not-needed 2012-02-06
tests/skip-test_multiprocessing Tests: Disable test_multiprocessing
It leaves stray processes.
Stefano Rivera <stefanor@debian.org> not-needed 2017-10-07
tests/skip-hurd-deadlock Tests: Skip test that deadlocks on GNU Hurd
Per Samuel Thibault:

> That's probably because pypy uses pthread_mutexes (which per POSIX aren't
> interrupted by signals) instead of semaphores, and I guess that's
> because sem_open isn't supported on Hurd yet.
Stefano Rivera <stefanor@debian.org> no 2018-08-26
tests/python2-binary Tests: Use the python2 binary
Debian doesn't ship a /usr/bin/python any more
Stefano Rivera <stefanor@debian.org> not-needed 2020-09-25
tests/test_fcntl Tests: Ignore lease failure in fcntl tests
Fail on tmpfs on Linux 4.19. Fixed in 5.7 possibly earlier (5.3?).
Stefano Rivera <stefanor@debian.org> not-needed 2020-09-24
stdlib/distutils-link Stdlib: Don't add standard library dirs to library_dirs and runtime_library_dirs. Matthias Klose <doko@debian.org> no Debian cpython packaging 2011-12-19
stdlib/locale-module Stdlib: Don't map 'utf8', 'utf-8' to 'utf'
'utf' is not a known encoding for glibc.
Matthias Klose <doko@debian.org> yes Debian cpython packaging 2011-12-19
debian/version-info Debian: Get version details from the Debian source package
Rather than VCS.

Return the Debian package version in sys.version.
Return null strings in sys._mercurial.
Stefano Rivera <stefanor@debian.org> not-needed 2013-02-23
debian/ensurepip-disabled Debian: Disable ensurepip in Debian for now Stefano Rivera <stefanor@debian.org> no Debian cpython packaging 2017-05-21
debian/distutils-install-layout Debian: Add a distutils option --install-layout=deb
This option:
- installs into $prefix/dist-packages instead of $prefix/site-packages.
- doesn't encode the python version into the egg name.

Based on cpython Debian packaging
Stefano Rivera <stefanor@debian.org> no 2017-05-21
debian/sysconfig-debian-schemes Debian: Add our install schemes to sysconfig
This adds two schemes:
1. deb_system: Debian's installed Python layout, with modules in
dist-packages shared across Python versions.
2. posix_local: A clone of posix_prefix that includes a built-in local
prefix for the dist-packages and binary paths. We default to this to
redict local installations into /usr/local.

Based on cpython Debian packaging
Stefano Rivera <stefanor@debian.org> no 2024-08-29
debian/langpack-gettext Debian: Support Ubuntu langpacks
Support alternative gettext tree in /usr/share/locale-langpack; if a
file is present in both trees, prefer the newer one
Michael Vogt <michael.vogt@ubuntu.com> not-needed Debian cpython packaging 2011-12-19
debian/tkinter-import Debian: Suggest installation of pypy3-tk package
On failing _tkinter import.
Stefano Rivera <stefanor@debian.org> no 2013-11-15
debian/noise Debian: Always output the mandelbrot
So that our buildds see progress
Stefano Rivera <stefanor@debian.org> not-needed 2017-10-07
debian/python3-sphinx Debian: Disable some extensions to support Python 3 Sphinx
Stop building any autodoc and configuration sections, that require
parsing the Python 2 source code.

This supports building the Sphinx docs with Python 3.
Stefano Rivera <stefanor@debian.org> no 2020-03-23
debian/setuptools-59-editable-installs Debian: Fix editable installs with setuptools < 60.0.1
Work-around a setuptools bug, where it failed to configure all necessary
substitution variables in easy_install.
Stefano Rivera <stefanor@debian.org> not-needed 2022-03-25
debian/system-expat Debian: De-Vendor Expat
Use the Debian system Expat.
This reverts upstream's commit 792b0993b0b06b6c0282da0bbfb2f7e3151c0bb6.
Stefano Rivera <stefanor@debian.org> no 2024-04-23
stdlib/sysconfigdata-name gh-81742 Omit platform from _sysconfigdata filename for multiarch
The multiarch triple encodes the platform name, so there is no need to
have both in the _sysconfigdata filename.

Debian has been carrying a (dumber) variant of this patch for a while.
Stefano Rivera <stefano@rivera.za.net> yes Debian cpython packaging 2024-08-10
upstream/gcc-14 GCC-14: Ignore -Wincompatible-pointer-types on 32-bit
Work around missing GCC-14 support for 32-builds of PyPy by suppressing
the GCC error. We hope to replace this with a real patch soon.
Stefano Rivera <stefanor@debian.org> no 2024-08-31
debian/pycparser-2.7 pycparser: Python 2.7 compatibility
Revert https://github.com/eliben/pycparser/pull/494 because it isn't
compatible with Python 2.7
Stefano Rivera <stefanor@debian.org> no 2026-03-19
security/CVE-2026-4519-1 gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146364)

(cherry picked from commit 82a24a4442312bdcfc4c799885e8b3e00990f02b)
tomcruiseqi <tom33qi@gmail.com> no cpython, https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03 2026-03-25
security/CVE-2026-4519-2 gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) (GH-148052)

(cherry picked from commit cc023511238ad93ecc8796157c6f9139a2bb2932)
(cherry picked from commit 89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4)
(cherry picked from commit 3681d47a440865aead912a054d4599087b4270dd)
"Miss Islington (bot)" no cpython, https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c 2026-04-04
security/CVE-2026-4786 gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170) (#148520)

(cherry picked from commit d22922c8a7958353689dc4763dd72da2dea03fff)
Stan Ulbrych <stan@python.org> no cpython, https://github.com/python/cpython/commit/f4654824ae0850ac87227fb270f9057477946769 2026-04-13
security/CVE-2026-2297 gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)

(cherry picked from commit a51b1b512de1d56b3714b65628a2eae2b07e535e)
"Miss Islington (bot)" no cpython, https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e 2026-03-04
security/CVE-2026-1502 gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146212) (cherry picked from commit 05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69) Seth Larson <seth@python.org> no https://github.com/python/cpython/pull/148351 2026-04-10

All known versions for source package 'pypy3'

Links