<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I am somewhat confused by the content of python36 in version 2.0-1.el7 from centos-sclo-rh.</div><div class=""><br class=""></div><div class="">I am experiencing a bug similar to <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1497342" class="">https://bugzilla.redhat.com/show_bug.cgi?id=1497342</a>. The page says the bug was fixed in python-3.6.3-3.el7 python-3.6.3-3.el6.</div><div class="">This version numbering seems to relate to another repo. I found a python36 package matching this version in epel, installed it and saw everything working.</div><div class=""><br class=""></div><div class="">However, this is not because the bug in the patched version of hashlib (<a href="https://github.com/fedora-python/python36/blob/master/00146-hashlib-fips.patch" class="">https://github.com/fedora-python/python36/blob/master/00146-hashlib-fips.patch</a>) was fixed but because an unpatched version of hashlib is installed when using the epel package.</div><div class="">In the linked repo's epel7 branch this patch has been removed. python36 from centos-sclo-rh still ships the buggy patch.</div><div class=""><br class=""></div><div class="">Is this intentional? </div><div class=""><br class=""></div><div class="">Cheers,</div><div class=""><br class=""></div><div class="">Matt</div></div></body></html>