[scl.org] Outdated package rh-python36 (2.0-1.el7)?

[Matthias Bastian]

Hi,

I am somewhat confused by the content of python36 in version 2.0-1.el7 from centos-sclo-rh.

I am experiencing a bug similar to https://bugzilla.redhat.com/show_bug.cgi?id=1497342 <https://bugzilla.redhat.com/show_bug.cgi?id=1497342>. The page says the bug was fixed in python-3.6.3-3.el7 python-3.6.3-3.el6.
This version numbering seems to relate to another repo. I found a python36 package matching this version in epel, installed it and saw everything working.

However, this is not because the bug in the patched version of hashlib (https://github.com/fedora-python/python36/blob/master/00146-hashlib-fips.patch <https://github.com/fedora-python/python36/blob/master/00146-hashlib-fips.patch>) was fixed but because an unpatched version of hashlib is installed when using the epel package.
In the linked repo's epel7 branch this patch has been removed. python36 from centos-sclo-rh still ships the buggy patch.

Is this intentional? 

Cheers,

Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/sclorg/attachments/20180321/1720d9ab/attachment.htm>