Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 45E2D84D3D for ; Wed, 7 Jun 2023 13:25:10 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id RrBtB1p3An_k for ; Wed, 7 Jun 2023 13:25:09 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 3496684D52 for ; Wed, 7 Jun 2023 13:25:09 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 31D09FA89; Wed, 7 Jun 2023 13:25:09 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1686144309286350" MIME-Version: 1.0 Date: Wed, 7 Jun 2023 13:25:09 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/lang To: pkgsrc-changes@NetBSD.org Approved: commit_and_comment Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20230607132509.31D09FA89@cvs.NetBSD.org> This is a multi-part message in MIME format. --_----------=_1686144309286350 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Wed Jun 7 13:25:09 UTC 2023 Modified Files: pkgsrc/lang/py38-html-docs: Makefile PLIST distinfo pkgsrc/lang/python38: PLIST dist.mk distinfo Log Message: python38 py38-html-docs: updated to 3.8.17 Python 3.8.17 Security gh-103142: The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u to address several CVEs. gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329. Patch by Illia Volochii. gh-101727: Updated the OpenSSL version used in Windows and macOS binary release builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the OpenSSL 2023-02-07 security advisory. gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when launching with shell=True. Patch by Eryk Sun, based on a patch by Oleg Iarygin. Library gh-103935: Use io.open_code() for files to be executed instead of raw open() gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new a filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details. gh-101997: Upgrade pip wheel bundled with ensurepip (pip 23.0.1) Build gh-102306: [3.8] Avoid GHA CI macOS test_posix failure by using the appropriate macOS SDK. Windows gh-100180: Update Windows installer to OpenSSL 1.1.1s macOS gh-103142: Update macOS installer to use OpenSSL 1.1.1u. To generate a diff of this commit: cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/py38-html-docs/Makefile cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/py38-html-docs/PLIST cvs rdiff -u -r1.19 -r1.20 pkgsrc/lang/py38-html-docs/distinfo cvs rdiff -u -r1.13 -r1.14 pkgsrc/lang/python38/PLIST cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/python38/dist.mk cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/python38/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1686144309286350 Content-Disposition: inline Content-Length: 5990 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/lang/py38-html-docs/Makefile diff -u pkgsrc/lang/py38-html-docs/Makefile:1.17 pkgsrc/lang/py38-html-docs/Makefile:1.18 --- pkgsrc/lang/py38-html-docs/Makefile:1.17 Wed Dec 7 11:52:00 2022 +++ pkgsrc/lang/py38-html-docs/Makefile Wed Jun 7 13:25:08 2023 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.17 2022/12/07 11:52:00 adam Exp $ +# $NetBSD: Makefile,v 1.18 2023/06/07 13:25:08 adam Exp $ -VERS= 3.8.16 +VERS= 3.8.17 DISTNAME= python-${VERS}-docs-html PKGNAME= py38-html-docs-${VERS} CATEGORIES= lang python Index: pkgsrc/lang/py38-html-docs/PLIST diff -u pkgsrc/lang/py38-html-docs/PLIST:1.9 pkgsrc/lang/py38-html-docs/PLIST:1.10 --- pkgsrc/lang/py38-html-docs/PLIST:1.9 Sat Mar 19 18:56:44 2022 +++ pkgsrc/lang/py38-html-docs/PLIST Wed Jun 7 13:25:08 2023 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.9 2022/03/19 18:56:44 adam Exp $ +@comment $NetBSD: PLIST,v 1.10 2023/06/07 13:25:08 adam Exp $ share/doc/python3.8/.buildinfo share/doc/python3.8/_downloads/6b45dc135219d1404be49d606589a11d/tzinfo_examples.py share/doc/python3.8/_images/hashlib-blake2-tree.png @@ -487,7 +487,6 @@ share/doc/python3.8/_sources/whatsnew/3. share/doc/python3.8/_sources/whatsnew/changelog.rst.txt share/doc/python3.8/_sources/whatsnew/index.rst.txt share/doc/python3.8/_static/basic.css -share/doc/python3.8/_static/caret-down.svg share/doc/python3.8/_static/changelog_search.js share/doc/python3.8/_static/classic.css share/doc/python3.8/_static/copybutton.js @@ -505,9 +504,11 @@ share/doc/python3.8/_static/plus.png share/doc/python3.8/_static/py.png share/doc/python3.8/_static/py.svg share/doc/python3.8/_static/pydoctheme.css +share/doc/python3.8/_static/pydoctheme_dark.css share/doc/python3.8/_static/pygments.css share/doc/python3.8/_static/searchtools.js share/doc/python3.8/_static/sidebar.js +share/doc/python3.8/_static/themetoggle.js share/doc/python3.8/_static/underscore-1.3.1.js share/doc/python3.8/_static/underscore.js share/doc/python3.8/about.html Index: pkgsrc/lang/py38-html-docs/distinfo diff -u pkgsrc/lang/py38-html-docs/distinfo:1.19 pkgsrc/lang/py38-html-docs/distinfo:1.20 --- pkgsrc/lang/py38-html-docs/distinfo:1.19 Wed Dec 7 11:52:00 2022 +++ pkgsrc/lang/py38-html-docs/distinfo Wed Jun 7 13:25:08 2023 @@ -1,5 +1,5 @@ -$NetBSD: distinfo,v 1.19 2022/12/07 11:52:00 adam Exp $ +$NetBSD: distinfo,v 1.20 2023/06/07 13:25:08 adam Exp $ -BLAKE2s (python-3.8.16-docs-html.tar.bz2) = a7de685c4bd4f7db5d549521485c9312300d899b2399f367b5cb1b383a62420c -SHA512 (python-3.8.16-docs-html.tar.bz2) = aaffc1f4d56be0ff7fbd35c7ca690d9089f9686d957669852aff1406efad2bee52b2b965ffd652780da6048ff9d89e6bbc421e92588841b89d73af43ad4970fb -Size (python-3.8.16-docs-html.tar.bz2) = 6697934 bytes +BLAKE2s (python-3.8.17-docs-html.tar.bz2) = f6463779ea317208022e6433b4cfb6e0bcc38d6ff5867a55a87d03711637d038 +SHA512 (python-3.8.17-docs-html.tar.bz2) = ab29fc066df0edcaf40dab079cf8fcaa68b895da053ce9cf3d8d776510d804ccfb17ba04e5464ed5edaeb938aaac8aa51bba67c7c3dff80f65cc67bd2d902a1a +Size (python-3.8.17-docs-html.tar.bz2) = 6737444 bytes Index: pkgsrc/lang/python38/PLIST diff -u pkgsrc/lang/python38/PLIST:1.13 pkgsrc/lang/python38/PLIST:1.14 --- pkgsrc/lang/python38/PLIST:1.13 Wed Sep 7 15:32:34 2022 +++ pkgsrc/lang/python38/PLIST Wed Jun 7 13:25:08 2023 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.13 2022/09/07 15:32:34 adam Exp $ +@comment $NetBSD: PLIST,v 1.14 2023/06/07 13:25:08 adam Exp $ bin/2to3-${PY_VER_SUFFIX} bin/pydoc${PY_VER_SUFFIX} bin/python${PY_VER_SUFFIX} @@ -1405,6 +1405,7 @@ lib/python${PY_VER_SUFFIX}/ensurepip/__m lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyc lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyo lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-22.0.4-py3-none-any.whl +lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/setuptools-56.0.0-py3-none-any.whl lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.py lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.pyc Index: pkgsrc/lang/python38/dist.mk diff -u pkgsrc/lang/python38/dist.mk:1.17 pkgsrc/lang/python38/dist.mk:1.18 --- pkgsrc/lang/python38/dist.mk:1.17 Wed Dec 7 11:52:00 2022 +++ pkgsrc/lang/python38/dist.mk Wed Jun 7 13:25:08 2023 @@ -1,8 +1,8 @@ -# $NetBSD: dist.mk,v 1.17 2022/12/07 11:52:00 adam Exp $ +# $NetBSD: dist.mk,v 1.18 2023/06/07 13:25:08 adam Exp $ -PY_DISTVERSION= 3.8.16 +PY_DISTVERSION= 3.8.17 DISTNAME= Python-${PY_DISTVERSION} EXTRACT_SUFX= .tar.xz DISTINFO_FILE= ${.CURDIR}/../../lang/python38/distinfo PATCHDIR= ${.CURDIR}/../../lang/python38/patches -MASTER_SITES= http://www.python.org/ftp/python/${PY_DISTVERSION}/ +MASTER_SITES= https://www.python.org/ftp/python/${PY_DISTVERSION}/ Index: pkgsrc/lang/python38/distinfo diff -u pkgsrc/lang/python38/distinfo:1.30 pkgsrc/lang/python38/distinfo:1.31 --- pkgsrc/lang/python38/distinfo:1.30 Wed Dec 7 11:52:00 2022 +++ pkgsrc/lang/python38/distinfo Wed Jun 7 13:25:08 2023 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.30 2022/12/07 11:52:00 adam Exp $ +$NetBSD: distinfo,v 1.31 2023/06/07 13:25:08 adam Exp $ -BLAKE2s (Python-3.8.16.tar.xz) = 81247a2d04d1f2bad19ca2a0c374237ab1bebb013aa7cdaafa83fe4d2e873c73 -SHA512 (Python-3.8.16.tar.xz) = d206e80806409410c00ef8acd8c3d90e3cc9553f996d0a57faa63802f2415e9d7591542b2e84b5e8e79245f40f6478790b5ba2acf1da98ebbc9495999183f7fd -Size (Python-3.8.16.tar.xz) = 19046724 bytes +BLAKE2s (Python-3.8.17.tar.xz) = 508faca087976f569823fecd8ca464398c26c2027b68a345d1ee122e9ddfd1c0 +SHA512 (Python-3.8.17.tar.xz) = bc7e02acfebba86e4394f02195993500fac9347a52c7b49727eb0cdda38786ae917234272872d75effaddb042810d9682ef5627b0cc199f8aa0d5d3e315ddc0e +Size (Python-3.8.17.tar.xz) = 20696584 bytes SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69 --_----------=_1686144309286350--