Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1710949142184810"
MIME-Version: 1.0
Date: Wed, 20 Mar 2024 15:39:02 +0000
From: "Adam Ciarcinski" <adam@netbsd.org>
Subject: CVS commit: pkgsrc/lang
To: pkgsrc-changes@NetBSD.org
Reply-To: adam@netbsd.org
Message-Id: <20240320153902.8826EFA2C@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_1710949142184810
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"

Module Name:	pkgsrc
Committed By:	adam
Date:		Wed Mar 20 15:39:02 UTC 2024

Modified Files:
	pkgsrc/lang/py38-html-docs: Makefile PLIST distinfo
	pkgsrc/lang/python38: Makefile PLIST dist.mk distinfo

Log Message:
python38 py38-html-docs: updated to 3.8.19

Python 3.8.19

Security

gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods:

xml.etree.ElementTree.XMLParser.flush()
xml.etree.ElementTree.XMLPullParser.flush()
xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
xml.sax.expatreader.ExpatParser.flush()
gh-115399: Update bundled libexpat to 2.6.0
gh-113659: Skip .pth files with names starting with a dot or hidden file attribute.

Core and Builtins

gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds

Library

gh-115197: urllib.request no longer resolves the hostname before checking it against the system’s proxy bypass list on macOS and Windows.
gh-115133: Fix tests for XMLPullParser with Expat 2.6.0.
gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows platforms.
gh-109858: Protect zipfile from “quoted-overlap” zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory.
gh-107077: Seems that in some conditions, OpenSSL will return SSL_ERROR_SYSCALL instead of SSL_ERROR_SSL when a certification verification has failed, but the error parameters will still contain ERR_LIB_SSL and SSL_R_CERTIFICATE_VERIFY_FAILED. We are now detecting this situation and raising the appropiate ssl.SSLCertVerificationError. Patch by Pablo Galindo
gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, which now no longer dereferences symlinks when working around file system permission errors.

Documentation

gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under “XML vulnerabilities”.

Tests

gh-108310: SSL tests for pre-handshake close were previously not enabled on Python 3.8 due to an incorrect backport. This is now fixed. Patch by Lumír Balhar.

Windows

gh-111239: Update Windows builds to use zlib v1.3.1.
gh-109991: Windows builds now use OpenSSL 1.1.1w. Note that OpenSSL 1.1 has reached its end of life and no future fixes will be made, and this version of Python is no longer receiving maintenance fixes and will not be updated to OpenSSL 3.0.


To generate a diff of this commit:
cvs rdiff -u -r1.19 -r1.20 pkgsrc/lang/py38-html-docs/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/py38-html-docs/PLIST
cvs rdiff -u -r1.21 -r1.22 pkgsrc/lang/py38-html-docs/distinfo
cvs rdiff -u -r1.38 -r1.39 pkgsrc/lang/python38/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/python38/PLIST
cvs rdiff -u -r1.19 -r1.20 pkgsrc/lang/python38/dist.mk
cvs rdiff -u -r1.33 -r1.34 pkgsrc/lang/python38/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_1710949142184810
Content-Disposition: inline
Content-Length: 6316
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/lang/py38-html-docs/Makefile
diff -u pkgsrc/lang/py38-html-docs/Makefile:1.19 pkgsrc/lang/py38-html-docs/Makefile:1.20
--- pkgsrc/lang/py38-html-docs/Makefile:1.19	Fri Aug 25 08:25:28 2023
+++ pkgsrc/lang/py38-html-docs/Makefile	Wed Mar 20 15:39:02 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.19 2023/08/25 08:25:28 adam Exp $
+# $NetBSD: Makefile,v 1.20 2024/03/20 15:39:02 adam Exp $
 
-VERS=		3.8.18
+VERS=		3.8.19
 DISTNAME=	python-${VERS}-docs-html
 PKGNAME=	py38-html-docs-${VERS}
 CATEGORIES=	lang python

Index: pkgsrc/lang/py38-html-docs/PLIST
diff -u pkgsrc/lang/py38-html-docs/PLIST:1.10 pkgsrc/lang/py38-html-docs/PLIST:1.11
--- pkgsrc/lang/py38-html-docs/PLIST:1.10	Wed Jun  7 13:25:08 2023
+++ pkgsrc/lang/py38-html-docs/PLIST	Wed Mar 20 15:39:02 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.10 2023/06/07 13:25:08 adam Exp $
+@comment $NetBSD: PLIST,v 1.11 2024/03/20 15:39:02 adam Exp $
 share/doc/python3.8/.buildinfo
 share/doc/python3.8/_downloads/6b45dc135219d1404be49d606589a11d/tzinfo_examples.py
 share/doc/python3.8/_images/hashlib-blake2-tree.png
@@ -487,6 +487,7 @@ share/doc/python3.8/_sources/whatsnew/3.
 share/doc/python3.8/_sources/whatsnew/changelog.rst.txt
 share/doc/python3.8/_sources/whatsnew/index.rst.txt
 share/doc/python3.8/_static/basic.css
+share/doc/python3.8/_static/caret-down.svg
 share/doc/python3.8/_static/changelog_search.js
 share/doc/python3.8/_static/classic.css
 share/doc/python3.8/_static/copybutton.js
@@ -504,11 +505,9 @@ share/doc/python3.8/_static/plus.png
 share/doc/python3.8/_static/py.png
 share/doc/python3.8/_static/py.svg
 share/doc/python3.8/_static/pydoctheme.css
-share/doc/python3.8/_static/pydoctheme_dark.css
 share/doc/python3.8/_static/pygments.css
 share/doc/python3.8/_static/searchtools.js
 share/doc/python3.8/_static/sidebar.js
-share/doc/python3.8/_static/themetoggle.js
 share/doc/python3.8/_static/underscore-1.3.1.js
 share/doc/python3.8/_static/underscore.js
 share/doc/python3.8/about.html

Index: pkgsrc/lang/py38-html-docs/distinfo
diff -u pkgsrc/lang/py38-html-docs/distinfo:1.21 pkgsrc/lang/py38-html-docs/distinfo:1.22
--- pkgsrc/lang/py38-html-docs/distinfo:1.21	Fri Aug 25 08:25:28 2023
+++ pkgsrc/lang/py38-html-docs/distinfo	Wed Mar 20 15:39:02 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.21 2023/08/25 08:25:28 adam Exp $
+$NetBSD: distinfo,v 1.22 2024/03/20 15:39:02 adam Exp $
 
-BLAKE2s (python-3.8.18-docs-html.tar.bz2) = 6ea23400ef08185c43fdaf4f2317ed25475424d49905832b718bfdc7063f945c
-SHA512 (python-3.8.18-docs-html.tar.bz2) = 80bdbec04355644f4b114e74da3334b4980d783a52ac8c999ede72f39b6137d94f1aaca248a386cfa02d778a10bdd7919ad82932f0aa000b16c102c8cee67e52
-Size (python-3.8.18-docs-html.tar.bz2) = 6729312 bytes
+BLAKE2s (python-3.8.19-docs-html.tar.bz2) = 7ad5dde3db30ba1a968d9274a214928f679f507dafce28c290a3196dd2501fc8
+SHA512 (python-3.8.19-docs-html.tar.bz2) = 188e41b681c0ec823de89ad0d408473bd7baff80c8ab4d691e2c8b1308a89af63c1973b8a3dac676b8b3880786e741355f653e67150e8170c27798b43a3462df
+Size (python-3.8.19-docs-html.tar.bz2) = 6717842 bytes

Index: pkgsrc/lang/python38/Makefile
diff -u pkgsrc/lang/python38/Makefile:1.38 pkgsrc/lang/python38/Makefile:1.39
--- pkgsrc/lang/python38/Makefile:1.38	Fri Nov 10 16:55:32 2023
+++ pkgsrc/lang/python38/Makefile	Wed Mar 20 15:39:02 2024
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.38 2023/11/10 16:55:32 nia Exp $
+# $NetBSD: Makefile,v 1.39 2024/03/20 15:39:02 adam Exp $
 
 .include "dist.mk"
 
 PKGNAME=	python38-${PY_DISTVERSION}
-PKGREVISION=	4
 CATEGORIES=	lang python
 
 MAINTAINER=	pkgsrc-users@NetBSD.org

Index: pkgsrc/lang/python38/PLIST
diff -u pkgsrc/lang/python38/PLIST:1.15 pkgsrc/lang/python38/PLIST:1.16
--- pkgsrc/lang/python38/PLIST:1.15	Mon Oct 23 06:36:01 2023
+++ pkgsrc/lang/python38/PLIST	Wed Mar 20 15:39:02 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.15 2023/10/23 06:36:01 wiz Exp $
+@comment $NetBSD: PLIST,v 1.16 2024/03/20 15:39:02 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -1404,7 +1404,6 @@ lib/python${PY_VER_SUFFIX}/ensurepip/__i
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.py
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyc
 lib/python${PY_VER_SUFFIX}/ensurepip/__main__.pyo
-lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-22.0.4-py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/pip-23.0.1-py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_bundled/setuptools-56.0.0-py3-none-any.whl
 lib/python${PY_VER_SUFFIX}/ensurepip/_uninstall.py

Index: pkgsrc/lang/python38/dist.mk
diff -u pkgsrc/lang/python38/dist.mk:1.19 pkgsrc/lang/python38/dist.mk:1.20
--- pkgsrc/lang/python38/dist.mk:1.19	Fri Aug 25 08:25:28 2023
+++ pkgsrc/lang/python38/dist.mk	Wed Mar 20 15:39:02 2024
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.19 2023/08/25 08:25:28 adam Exp $
+# $NetBSD: dist.mk,v 1.20 2024/03/20 15:39:02 adam Exp $
 
-PY_DISTVERSION=	3.8.18
+PY_DISTVERSION=	3.8.19
 DISTNAME=	Python-${PY_DISTVERSION}
 EXTRACT_SUFX=	.tar.xz
 DISTINFO_FILE=	${.CURDIR}/../../lang/python38/distinfo

Index: pkgsrc/lang/python38/distinfo
diff -u pkgsrc/lang/python38/distinfo:1.33 pkgsrc/lang/python38/distinfo:1.34
--- pkgsrc/lang/python38/distinfo:1.33	Mon Oct 23 06:36:01 2023
+++ pkgsrc/lang/python38/distinfo	Wed Mar 20 15:39:02 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.33 2023/10/23 06:36:01 wiz Exp $
+$NetBSD: distinfo,v 1.34 2024/03/20 15:39:02 adam Exp $
 
-BLAKE2s (Python-3.8.18.tar.xz) = 50d4cf46bbe1837031e576173873b90ca0b329c6ebb73fbcaea97f3cd0e4b406
-SHA512 (Python-3.8.18.tar.xz) = 0be1d85cafade25e99b8277ba51d7b9b3a3d2dbbcc52fd0d1c633c47982e5dd87fd7a0ca180a78d7801d79a8ecafa79bd9d501d544cd7b6da53ea409daa70adf
-Size (Python-3.8.18.tar.xz) = 20696952 bytes
+BLAKE2s (Python-3.8.19.tar.xz) = 67b9eb01f7bb2023cd301e85884db238165bf8433d5b22c5f8ee523d24112da9
+SHA512 (Python-3.8.19.tar.xz) = 1d2a57fa15ccdaec8cdca508ba2ffb01e1ae053a3446ac709bc334480f8e913070899f01ed680cce6dc7ddfddcb27ef402fe206562249fa4c4e87be21ece0625
+Size (Python-3.8.19.tar.xz) = 18975156 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69


--_----------=_1710949142184810--