---
- branch: MAIN
  date: Wed Sep  1 13:52:52 UTC 2021
  files:
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/py38-html-docs/Makefile
    pathrev: pkgsrc/lang/py38-html-docs/Makefile@1.13
    type: modified
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/py38-html-docs/distinfo
    pathrev: pkgsrc/lang/py38-html-docs/distinfo@1.13
    type: modified
  - new: '1.8'
    old: '1.7'
    path: pkgsrc/lang/py38-html-docs/PLIST
    pathrev: pkgsrc/lang/py38-html-docs/PLIST@1.8
    type: modified
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/python38/dist.mk
    pathrev: pkgsrc/lang/python38/dist.mk@1.13
    type: modified
  - new: '1.22'
    old: '1.21'
    path: pkgsrc/lang/python38/distinfo
    pathrev: pkgsrc/lang/python38/distinfo@1.22
    type: modified
  id: 20210901T135252Z.3246a76786531afe24af2cf5f6b78ebc603f215e
  log: |
    python38: updated to 3.8.12

    Python 3.8.12 final

    Security

    bpo-42278: Replaced usage of tempfile.mktemp() with TemporaryDirectory to avoid a potential race condition.
    bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 ���Billion Laughs��� vulnerability. This copy is most used on Windows and macOS.
    bpo-43124: Made the internal putcmd function in smtplib sanitize input for presence of \r and \n characters to avoid (unlikely) command injection.
    bpo-36384: ipaddress module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy function socket.inet_aton() treats leading zeros as octal notation. glibc implementation of modern inet_pton() does not accept any leading zeros. For a while the ipaddress module used to accept ambiguous leading zeros.

    Core and Builtins

    bpo-44872: Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in frameobject.c instead of the old ones (Py_TRASHCAN_SAFE_BEGIN/END).
    bpo-33930: Fix segmentation fault with deep recursion when cleaning method objects. Patch by Augusto Goulart and Pablo Galindo.
    bpo-44856: Fix reference leaks in the error paths of update_bases() and __build_class__. Patch by Pablo Galindo.

    Library

    bpo-45001: Made email date parsing more robust against malformed input, namely a whitespace-only Date: header. Patch by Wouter Bolsterlee.

    Documentation

    bpo-30511: Clarify that shutil.make_archive() is not thread-safe due to reliance on changing the current working directory.

    Windows

    bpo-45007: Update to OpenSSL 1.1.1l in Windows build

    macOS

    bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l.
    bpo-44689: ctypes.util.find_library() now works correctly on macOS 11 Big Sur even if Python is built on an older version of macOS. Previously, when built on older macOS systems, find_library was not able to find macOS system libraries when running on Big Sur due to changes in how system libraries are stored.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/lang'
  unixtime: '1630504372'
  user: adam