* Update to the 3.12 branch 2023-08-29.

    - Add loongarch support. Addresses: #1049963.
    - Address CVE-2023-41105, CVE-2023-40217.
  * libpython3.12-stdlib: Depend on tzdata. Closes: #1050529.
  * Add proposed patch to avoid tzdata-legacy, and drop again the
    dependency on it. See  python/cpython#108533.

debian/changelog

@@ -1,9 +1,20 @@
+python3.12 (3.12.0~rc1-2) unstable; urgency=medium
+
+  * Update to the 3.12 branch 2023-08-29.
+    - Add loongarch support. Addresses: #1049963.
+    - Address CVE-2023-41105, CVE-2023-40217.
+  * libpython3.12-stdlib: Depend on tzdata. Closes: #1050529.
+  * Add proposed patch to avoid tzdata-legacy, and drop again the
+    dependency on it. See  https://github.com/python/cpython/pull/108533.
+
+ -- Matthias Klose <doko@debian.org>  Tue, 29 Aug 2023 17:33:03 +0200
+
 python3.12 (3.12.0~rc1-1) unstable; urgency=medium
 
   * Python 3.12.0 release candidate 1.
   * Update symbols files.
 
- -- Matthias Klose <doko@debian.org>  Wed, 09 Aug 2023 16:24:31 +0200
+ -- Matthias Klose <doko@debian.org>  Thu, 10 Aug 2023 06:02:50 +0200
 
 python3.12 (3.12.0~b4-1) unstable; urgency=medium
 

debian/control

@@ -15,7 +15,7 @@ Build-Depends: debhelper (>= 11), dpkg-dev (>= 1.17.11),
   libsqlite3-dev, libffi-dev (>= 3.0.5) [!or1k !avr32],
   libgpm2 [linux-any],
   media-types | mime-support, netbase, bzip2, time, python3:any, python3.12:any <cross>,
-  net-tools, xvfb <!nocheck>, xauth <!nocheck>,
+  net-tools, xvfb <!nocheck>, xauth <!nocheck>, tzdata <!nocheck>,
   systemtap-sdt-dev,
   valgrind-if-available,
 Build-Depends-Indep: python3-sphinx, python3-docs-theme, texinfo
@@ -30,7 +30,7 @@ Multi-Arch: allowed
 Priority: optional
 Depends: python3.12-minimal (= ${binary:Version}),
  libpython3.12-stdlib (= ${binary:Version}),
- media-types | mime-support,
+ media-types | mime-support, tzdata,
  ${shlibs:Depends}, ${misc:Depends}
 Recommends: ca-certificates
 Suggests: python3.12-venv, python3.12-doc, binutils

debian/control.in

@@ -15,7 +15,7 @@ Build-Depends: debhelper (>= 11), @bd_dpkgdev@
   libsqlite3-dev, libffi-dev (>= 3.0.5) [!or1k !avr32],
   libgpm2 [linux-any],
   media-types | mime-support, netbase, bzip2, time, python3@bd_qual@, @PVER@@bd_qual@ <cross>,
-  net-tools, xvfb <!nocheck>, xauth <!nocheck>,
+  net-tools, xvfb <!nocheck>, xauth <!nocheck>, tzdata <!nocheck>,
   systemtap-sdt-dev,
   valgrind-if-available,
 Build-Depends-Indep: python3-sphinx, python3-docs-theme, texinfo
@@ -30,7 +30,7 @@ Multi-Arch: allowed
 Priority: @PRIO@
 Depends: @PVER@-minimal (= ${binary:Version}),
  lib@PVER@-stdlib (= ${binary:Version}),
- media-types | mime-support,
+ media-types | mime-support, tzdata,
  ${shlibs:Depends}, ${misc:Depends}
 Recommends: ca-certificates
 Suggests: @PVER@-venv, @PVER@-doc, binutils

debian/patches/108533.diff

@@ -0,0 +1,13 @@
+# DP: https://github.com/python/cpython/pull/108533
+
+--- a/Lib/test/test_email/test_utils.py
++++ b/Lib/test/test_email/test_utils.py
+@@ -148,7 +148,7 @@ def test_localtime_epoch_notz_daylight_false(self):
+     @unittest.skipUnless(os.path.exists('/usr/share/zoneinfo') or
+                          os.path.exists('/usr/lib/zoneinfo'),
+                          "Can't find the Olson's TZ database")
+-    @test.support.run_with_tz('Europe/Kiev')
++    @test.support.run_with_tz('Europe/Kyiv')
+     def test_variable_tzname(self):
+         t0 = datetime.datetime(1984, 1, 1, tzinfo=datetime.timezone.utc)
+         t1 = utils.localtime(t0)