Bread and butter of RPM package maintainers
summary
Maintains Python across Fedora and RHEL, juggling Koji builds, a months‑long Copr rebuild of thousands of packages and Rawhide integration; 4,400 packages need Python to build and 5,600 need it to run, 33,361 packages entered the rebuild pipeline with ~50,000 builds and ~500 Bugzilla reports. Fedora pulls new Python alphas in days; RHEL applies backported patches, adds warnings plus /etc/env switches for urllib ampersand change, and makes the tarfile filter stricter by default to fix long‑standing CVEs.
AI-written summary · about
chapters (6)
- 0:00Start
- 4:19Responsibilities of package maintainers
- 12:05Fedora loves Python-all of them
- 17:48We cannot just update it
- 19:29The update process of the main Python
- 28:11tarfile module directory traversal (CVE-2007-4559)
related talks
50mDo our development tools need a refresh?
41mYou should switch to Python 3 (two years ago)
28mManaging Python Dependencies at scale
30mThe Evolutionary Saga of Python Packaging
23mSoftware Metrics and Ratcheted Builds in Python
40mMaking packages and packaging "just work"
26mPackager Dashboard - Life of packager made easy
24mAuto - maintain your Package