Received: by mail.netbsd.org (Postfix, from userid 605) id 0333B84EE2; Wed, 7 Sep 2022 15:33:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 3E3A384EDC for ; Wed, 7 Sep 2022 15:33:21 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id 6DD95IuJ2B-p for ; Wed, 7 Sep 2022 15:33:20 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 556E184D0C for ; Wed, 7 Sep 2022 15:33:20 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 52B61FA90; Wed, 7 Sep 2022 15:33:20 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1662564800121350" MIME-Version: 1.0 Date: Wed, 7 Sep 2022 15:33:20 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/lang To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20220907153320.52B61FA90@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1662564800121350 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="UTF-8" Module Name: pkgsrc Committed By: adam Date: Wed Sep 7 15:33:20 UTC 2022 Modified Files: pkgsrc/lang/py39-html-docs: Makefile distinfo pkgsrc/lang/python39: Makefile PLIST dist.mk distinfo Log Message: python39 py39-html-docs: updated to 3.9.14 Python 3.9.14 Security gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735. This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form. Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson. gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan. Core and Builtins gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees. The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details. Library gh-94821: Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of “0”. gh-91810: Suppress writing an XML declaration in open files in ElementTree.write() with encoding='unicode' and xml_declaration=None. bpo-45393: Fix the formatting for await x and not x in the operator precedence table when using the help() system. bpo-46197: Fix ensurepip environment isolation for subprocess running pip. Tests gh-95280: Fix problem with test_ssl test_get_ciphers on systems that require perfect forward secrecy (PFS) ciphers. gh-94208: test_ssl is now checking for supported TLS version and protocols in more tests. bpo-47016: Create a GitHub Actions workflow for verifying bundled pip and setuptools. Patch by Illia Volochii and Adam Turner. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/py39-html-docs/Makefile cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/py39-html-docs/distinfo cvs rdiff -u -r1.21 -r1.22 pkgsrc/lang/python39/Makefile cvs rdiff -u -r1.11 -r1.12 pkgsrc/lang/python39/PLIST cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/python39/dist.mk cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/python39/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1662564800121350 Content-Disposition: inline Content-Length: 4755 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/py39-html-docs/Makefile diff -u pkgsrc/lang/py39-html-docs/Makefile:1.14 pkgsrc/lang/py39-html-docs/Makefile:1.15 --- pkgsrc/lang/py39-html-docs/Makefile:1.14 Wed May 18 08:07:32 2022 +++ pkgsrc/lang/py39-html-docs/Makefile Wed Sep 7 15:33:20 2022 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.14 2022/05/18 08:07:32 adam Exp $ +# $NetBSD: Makefile,v 1.15 2022/09/07 15:33:20 adam Exp $ -VERS= 3.9.13 +VERS= 3.9.14 DISTNAME= python-${VERS}-docs-html PKGNAME= py39-html-docs-${VERS} CATEGORIES= lang python Index: pkgsrc/lang/py39-html-docs/distinfo diff -u pkgsrc/lang/py39-html-docs/distinfo:1.16 pkgsrc/lang/py39-html-docs/distinfo:1.17 --- pkgsrc/lang/py39-html-docs/distinfo:1.16 Wed May 18 08:07:32 2022 +++ pkgsrc/lang/py39-html-docs/distinfo Wed Sep 7 15:33:20 2022 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.16 2022/05/18 08:07:32 adam Exp $ +$NetBSD: distinfo,v 1.17 2022/09/07 15:33:20 adam Exp $ -BLAKE2s (python-3.9.13-docs-html.tar.bz2) = 95540b7210690eac44e65b062b657c1b88228742bfd2c7ca6075cf24b4c7cf74 -SHA512 (python-3.9.13-docs-html.tar.bz2) = 0454124bbec13c547e1b212e9f7c1a4b61055ad7c3095c0003731cd52c0f181c616d26e2972f52a15b0d25c5108de52d0a54564c5c806badda00828f47b4c39b -Size (python-3.9.13-docs-html.tar.bz2) = 6979296 bytes +BLAKE2s (python-3.9.14-docs-html.tar.bz2) = a1f23b4352cc75ff8ce6385a1f39cea5ce166b3975ae6c3bc6cd551d9e2ca23c +SHA512 (python-3.9.14-docs-html.tar.bz2) = 481e16efc420b3da9ceb33b6757484ac6c03347ff159666c747cab953c084c8fe8035f754fc3bbcf32800e6188ac65d5683a9e8074dac1d06750222e12a1c0d3 +Size (python-3.9.14-docs-html.tar.bz2) = 6991666 bytes Index: pkgsrc/lang/python39/Makefile diff -u pkgsrc/lang/python39/Makefile:1.21 pkgsrc/lang/python39/Makefile:1.22 --- pkgsrc/lang/python39/Makefile:1.21 Thu Jun 30 11:18:34 2022 +++ pkgsrc/lang/python39/Makefile Wed Sep 7 15:33:19 2022 @@ -1,6 +1,5 @@ -# $NetBSD: Makefile,v 1.21 2022/06/30 11:18:34 nia Exp $ +# $NetBSD: Makefile,v 1.22 2022/09/07 15:33:19 adam Exp $ -PKGREVISION= 1 .include "dist.mk" PKGNAME= python39-${PY_DISTVERSION} Index: pkgsrc/lang/python39/PLIST diff -u pkgsrc/lang/python39/PLIST:1.11 pkgsrc/lang/python39/PLIST:1.12 --- pkgsrc/lang/python39/PLIST:1.11 Fri Mar 25 17:54:37 2022 +++ pkgsrc/lang/python39/PLIST Wed Sep 7 15:33:19 2022 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.11 2022/03/25 17:54:37 adam Exp $ +@comment $NetBSD: PLIST,v 1.12 2022/09/07 15:33:19 adam Exp $ bin/2to3-${PY_VER_SUFFIX} bin/pydoc${PY_VER_SUFFIX} bin/python${PY_VER_SUFFIX} @@ -84,6 +84,7 @@ include/python${PY_VER_SUFFIX}/internal/ include/python${PY_VER_SUFFIX}/internal/pycore_import.h include/python${PY_VER_SUFFIX}/internal/pycore_initconfig.h include/python${PY_VER_SUFFIX}/internal/pycore_interp.h +include/python${PY_VER_SUFFIX}/internal/pycore_long.h include/python${PY_VER_SUFFIX}/internal/pycore_object.h include/python${PY_VER_SUFFIX}/internal/pycore_pathconfig.h include/python${PY_VER_SUFFIX}/internal/pycore_pyerrors.h Index: pkgsrc/lang/python39/dist.mk diff -u pkgsrc/lang/python39/dist.mk:1.14 pkgsrc/lang/python39/dist.mk:1.15 --- pkgsrc/lang/python39/dist.mk:1.14 Wed May 18 08:07:32 2022 +++ pkgsrc/lang/python39/dist.mk Wed Sep 7 15:33:19 2022 @@ -1,6 +1,6 @@ -# $NetBSD: dist.mk,v 1.14 2022/05/18 08:07:32 adam Exp $ +# $NetBSD: dist.mk,v 1.15 2022/09/07 15:33:19 adam Exp $ -PY_DISTVERSION= 3.9.13 +PY_DISTVERSION= 3.9.14 DISTNAME= Python-${PY_DISTVERSION} EXTRACT_SUFX= .tar.xz DISTINFO_FILE= ${.CURDIR}/../../lang/python39/distinfo Index: pkgsrc/lang/python39/distinfo diff -u pkgsrc/lang/python39/distinfo:1.30 pkgsrc/lang/python39/distinfo:1.31 --- pkgsrc/lang/python39/distinfo:1.30 Thu Jul 7 15:26:43 2022 +++ pkgsrc/lang/python39/distinfo Wed Sep 7 15:33:19 2022 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.30 2022/07/07 15:26:43 khorben Exp $ +$NetBSD: distinfo,v 1.31 2022/09/07 15:33:19 adam Exp $ -BLAKE2s (Python-3.9.13.tar.xz) = e7774bfb171b74d6ba80e11c3c49a166832ff2fe466b37e885a250cd2a62ecf4 -SHA512 (Python-3.9.13.tar.xz) = e9664e7f908092df11236b22465d217531d6f0378e88d889108d19fe77f28f46ffb629b8733f84b41409e255367321893a2b1bd64518930d9d8cae5d1b774d23 -Size (Python-3.9.13.tar.xz) = 19754368 bytes +BLAKE2s (Python-3.9.14.tar.xz) = 0b1323a2098ec0e04f66da341af28d29d44fad1d8465a4b91b2a0db5c406b146 +SHA512 (Python-3.9.14.tar.xz) = 691a7814cf6c7bee96d8dbb7c5c85cb11f2e999101e20491b99435cdec07c3bbd5ce43ad3d9c64f695383b79197884caa1965c4346e4525e23b09c686271e4ab +Size (Python-3.9.14.tar.xz) = 19750176 bytes SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69 --_----------=_1662564800121350--