---
- branch: MAIN
  date: Wed Jun  7 13:26:54 UTC 2023
  files:
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/py310-html-docs/Makefile
    pathrev: pkgsrc/lang/py310-html-docs/Makefile@1.13
    type: modified
  - new: '1.3'
    old: '1.2'
    path: pkgsrc/lang/py310-html-docs/PLIST
    pathrev: pkgsrc/lang/py310-html-docs/PLIST@1.3
    type: modified
  - new: '1.15'
    old: '1.14'
    path: pkgsrc/lang/py310-html-docs/distinfo
    pathrev: pkgsrc/lang/py310-html-docs/distinfo@1.15
    type: modified
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/python310/dist.mk
    pathrev: pkgsrc/lang/python310/dist.mk@1.13
    type: modified
  - new: '1.24'
    old: '1.23'
    path: pkgsrc/lang/python310/distinfo
    pathrev: pkgsrc/lang/python310/distinfo@1.24
    type: modified
  id: 20230607T132654Z.5afce2b6002f90ed55e40961c18f9d98bcf5e7cd
  log: |
    python310 py310-html-docs: updated to 3.10.12

    Python 3.10.12

    Security
    gh-103142: The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u to address several CVEs.
    gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified.
    gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler.
    gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329. Patch by Illia Volochii.

    Library
    gh-103935: Use io.open_code() for files to be executed instead of raw open()
    gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new a filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details.

    Documentation
    gh-89412: Add missing documentation for the end_lineno and end_offset attributes of the traceback.TracebackException class.

    Build
    gh-103262: Fixes Windows installer build to work with latest compilers.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/lang'
  unixtime: '1686144414'
  user: adam