CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Apr  3 06:23:13 UTC 2021

Modified Files:
        pkgsrc/lang/py39-html-docs: Makefile distinfo
        pkgsrc/lang/python39: PLIST dist.mk distinfo
        pkgsrc/lang/python39/patches: patch-configure

Log Message:
python39: updated to 3.9.3

Python 3.9.3 final

Security
bpo-42988: CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of 
Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer.
bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 
address and port combinations on the client network.

Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it.
bpo-43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents(). Patch by Pablo Galindo.

Core and Builtins
bpo-43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo.
bpo-43555: Report the column offset for SyntaxError for invalid line continuation characters. Patch by Pablo Galindo.
bpo-43517: Fix misdetection of circular imports when using from pkg.mod import attr, which caused false positives in non-trivial multi-threaded code.
bpo-35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The Py_DecodeLocale() function now escapes byte sequences which would 
be decoded as Unicode characters outside the [U+0000; U+10ffff] range.
bpo-43406: Fix a possible race condition where PyErr_CheckSignals tries to execute a non-Python signal handler.
bpo-42500: Improve handling of exceptions near recursion limit. Converts a number of Fatal Errors in RecursionErrors.

Library
bpo-43433: xmlrpc.client.ServerProxy no longer ignores query and fragment in the URL of the server.
bpo-35930: Raising an exception raised in a “future” instance will create reference cycles.
bpo-43577: Fix deadlock when using ssl.SSLContext debug callback with ssl.SSLContext.sni_callback().
bpo-43521: ast.unparse can now render NaNs and empty sets.
bpo-43423: subprocess.communicate() no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows.
bpo-27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail.

The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN.

Also fixes bug with the test for smtpd.
bpo-43332: Improves the networking efficiency of http.client when using a proxy via set_tunnel(). Fewer small send calls are made during connection setup.
bpo-43399: Fix ElementTree.extend not working on iterators when using the Python implementation
bpo-43316: The python -m gzip command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr.
bpo-43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written.
bpo-42782: Fail fast in shutil.move() to avoid creating destination directories on failure.
bpo-37193: Fixed memory leak in socketserver.ThreadingMixIn introduced in Python 3.7.

Documentation
bpo-43199: Answer “Why is there no goto?” in the Design and History FAQ.
bpo-43407: Clarified that a result from time.monotonic(), time.perf_counter(), time.process_time(), or time.thread_time() can be compared with the result from any following call to the same function 
- not just the next immediate call.
bpo-27646: Clarify that ‘yield from <expr>’ works with any iterable, not just iterators.
bpo-36346: Update some deprecated unicode APIs which are documented as “will be removed in 4.0” to “3.12”. See PEP 623 for detail.

Tests
bpo-37945: Fix test_getsetlocale_issue1813() of test_locale: skip the test if setlocale() fails. Patch by Victor Stinner.
bpo-41561: Add workaround for Ubuntu’s custom OpenSSL security level policy.
bpo-43288: Fix test_importlib to correctly skip Unicode file tests if the fileystem does not support them.

Build
bpo-43631: Update macOS, Windows, and CI to OpenSSL 1.1.1k.
bpo-43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros.

macOS
bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j.

IDLE
bpo-42225: Document that IDLE can fail on Unix either from misconfigured IP masquerage rules or failure displaying complex colored (non-ascii) characters.
bpo-43283: Document why printing to IDLE’s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/py39-html-docs/Makefile \
    pkgsrc/lang/py39-html-docs/distinfo
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/python39/PLIST \
    pkgsrc/lang/python39/dist.mk
cvs rdiff -u -r1.6 -r1.7 pkgsrc/lang/python39/distinfo
cvs rdiff -u -r1.4 -r1.5 pkgsrc/lang/python39/patches/patch-configure

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py39-html-docs/Makefile
diff -u pkgsrc/lang/py39-html-docs/Makefile:1.3 pkgsrc/lang/py39-html-docs/Makefile:1.4
--- pkgsrc/lang/py39-html-docs/Makefile:1.3     Sat Feb 20 19:30:38 2021
+++ pkgsrc/lang/py39-html-docs/Makefile Sat Apr  3 06:23:13 2021
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.3 2021/02/20 19:30:38 adam Exp $
+# $NetBSD: Makefile,v 1.4 2021/04/03 06:23:13 adam Exp $
 
-VERS=          3.9.2
+VERS=          3.9.3
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py39-html-docs-${VERS}
 CATEGORIES=    lang python
Index: pkgsrc/lang/py39-html-docs/distinfo
diff -u pkgsrc/lang/py39-html-docs/distinfo:1.3 pkgsrc/lang/py39-html-docs/distinfo:1.4
--- pkgsrc/lang/py39-html-docs/distinfo:1.3     Sat Feb 20 19:30:38 2021
+++ pkgsrc/lang/py39-html-docs/distinfo Sat Apr  3 06:23:13 2021
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.3 2021/02/20 19:30:38 adam Exp $
+$NetBSD: distinfo,v 1.4 2021/04/03 06:23:13 adam Exp $
 
-SHA1 (python-3.9.2-docs-html.tar.bz2) = 32c5df041358e61edf9b0d929ed92ae41042a9da
-RMD160 (python-3.9.2-docs-html.tar.bz2) = 51321b4c6785ecceee11b4fd7daa992e450ebe94
-SHA512 (python-3.9.2-docs-html.tar.bz2) = bd0d3b39e57fbc897c9fd4fbeec67da7fd71e751b5fc5bb460a21b8d67e5c8d29b7ba38d5b01e9fdf3080a2015d7842022147e92a1322efe3c8ac155b41960d4
-Size (python-3.9.2-docs-html.tar.bz2) = 6818470 bytes
+SHA1 (python-3.9.3-docs-html.tar.bz2) = e9166d82a7a236c3b6cf71d0d69d2c21da7fc549
+RMD160 (python-3.9.3-docs-html.tar.bz2) = cf016b9dc3525c6da01811f4e3718fea15a69f60
+SHA512 (python-3.9.3-docs-html.tar.bz2) = 41c087596ed29a496ae5f2ab1515ee12377d0c70dbcf34ea22d34e54c42906a779e1ed0667b97bcfa03e1ca482dd84b4292529be323cc1a155f019c86b906ad6
+Size (python-3.9.3-docs-html.tar.bz2) = 6821888 bytes

Index: pkgsrc/lang/python39/PLIST
diff -u pkgsrc/lang/python39/PLIST:1.3 pkgsrc/lang/python39/PLIST:1.4
--- pkgsrc/lang/python39/PLIST:1.3      Sat Feb 20 19:30:37 2021
+++ pkgsrc/lang/python39/PLIST  Sat Apr  3 06:23:13 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2021/02/20 19:30:37 adam Exp $
+@comment $NetBSD: PLIST,v 1.4 2021/04/03 06:23:13 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -4175,6 +4175,12 @@ lib/python${PY_VER_SUFFIX}/test/test_imp
 lib/python${PY_VER_SUFFIX}/test/test_importlib/namespace_pkgs/project3/parent/child/three.pyc
 lib/python${PY_VER_SUFFIX}/test/test_importlib/namespace_pkgs/project3/parent/child/three.pyo
 lib/python${PY_VER_SUFFIX}/test/test_importlib/namespace_pkgs/top_level_portion1.zip
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/cfimport.py
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/cfimport.pyc
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/cfimport.pyo
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/pool_in_threads.py
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/pool_in_threads.pyc
+lib/python${PY_VER_SUFFIX}/test/test_importlib/partial/pool_in_threads.pyo
 lib/python${PY_VER_SUFFIX}/test/test_importlib/source/__init__.py
 lib/python${PY_VER_SUFFIX}/test/test_importlib/source/__init__.pyc
 lib/python${PY_VER_SUFFIX}/test/test_importlib/source/__init__.pyo
Index: pkgsrc/lang/python39/dist.mk
diff -u pkgsrc/lang/python39/dist.mk:1.3 pkgsrc/lang/python39/dist.mk:1.4
--- pkgsrc/lang/python39/dist.mk:1.3    Sat Feb 20 19:30:37 2021
+++ pkgsrc/lang/python39/dist.mk        Sat Apr  3 06:23:13 2021
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.3 2021/02/20 19:30:37 adam Exp $
+# $NetBSD: dist.mk,v 1.4 2021/04/03 06:23:13 adam Exp $
 
-PY_DISTVERSION=        3.9.2
+PY_DISTVERSION=        3.9.3
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python39/distinfo

Index: pkgsrc/lang/python39/distinfo
diff -u pkgsrc/lang/python39/distinfo:1.6 pkgsrc/lang/python39/distinfo:1.7
--- pkgsrc/lang/python39/distinfo:1.6   Sat Feb 20 19:30:37 2021
+++ pkgsrc/lang/python39/distinfo       Sat Apr  3 06:23:13 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.6 2021/02/20 19:30:37 adam Exp $
+$NetBSD: distinfo,v 1.7 2021/04/03 06:23:13 adam Exp $
 
-SHA1 (Python-3.9.2.tar.xz) = 110ca5bca7989f9558a54ee6762e6774a4b9644a
-RMD160 (Python-3.9.2.tar.xz) = fc9045875edfa50ec5238872296fa894d4f09129
-SHA512 (Python-3.9.2.tar.xz) = b204d865e4c974951830008c381678876987da267c37bce3b4e488c07aa744658e57b8dc5d248051d0391f3b580e69877f7772abc0a0de5288349d448ccf0789
-Size (Python-3.9.2.tar.xz) = 18889164 bytes
+SHA1 (Python-3.9.3.tar.xz) = 2838ab8d986c8d24b5aeecbe0370bff599bfd54b
+RMD160 (Python-3.9.3.tar.xz) = 0e6d9e681a335182f0d861e797c56e82653340d0
+SHA512 (Python-3.9.3.tar.xz) = 420b07c272b8da4b97f6edc21c3b51ef8ee1fffd291eebb032991ec2da4fc40ace3e9b608d7cea0c43ad3716792640c508e84a807c29cfa5a40f89d294f7b0ab
+Size (Python-3.9.3.tar.xz) = 18899676 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_command_install.py) = 6fc6f5d918b7581fc62cd0fe55857ee932c3a341
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
@@ -16,6 +16,6 @@ SHA1 (patch-Modules_nismodule.c) = 1bafe
 SHA1 (patch-Modules_socketmodule.c) = 02c447f980a08e2185df78d2f13373574f414304
 SHA1 (patch-Modules_socketmodule.h) = 61fe96a79d4ccf3e7768eb79dd7e29a50a85328b
 SHA1 (patch-Python_thread__pthread.h) = fb81eaa604b4ed7c1b64c3f4731d58a8aee257be
-SHA1 (patch-configure) = 07f0f92ec28e36b4afa4b2ae60f6809af34244c2
+SHA1 (patch-configure) = e4e29932f2cc8e1cec1a657220562e6d43e4f55c
 SHA1 (patch-pyconfig.h.in) = 2f06af7358690b46eaff404226b898962b049a0e
 SHA1 (patch-setup.py) = 0ea2e4183f7c11ff893ca302aafe8bb9bea80d6c

Index: pkgsrc/lang/python39/patches/patch-configure
diff -u pkgsrc/lang/python39/patches/patch-configure:1.4 pkgsrc/lang/python39/patches/patch-configure:1.5
--- pkgsrc/lang/python39/patches/patch-configure:1.4    Sat Feb 20 19:30:37 2021
+++ pkgsrc/lang/python39/patches/patch-configure        Sat Apr  3 06:23:13 2021
@@ -1,11 +1,11 @@
-$NetBSD: patch-configure,v 1.4 2021/02/20 19:30:37 adam Exp $
+$NetBSD: patch-configure,v 1.5 2021/04/03 06:23:13 adam Exp $
 
 Use gnu99 instead of c99 to avoid "alloca() undefined" problems.
 Fix linking on Darwin; don't use -stack_size.
 Changes for consistency across pkgsrc platforms.
 Simplify _sysconfigdata to include only platform name.
 
---- configure.orig     2021-02-19 12:31:44.000000000 +0000
+--- configure.orig     2021-04-02 09:51:53.000000000 +0000
 +++ configure
 @@ -6961,7 +6961,7 @@ UNIVERSAL_ARCH_FLAGS=
  # tweak BASECFLAGS based on compiler and platform
@@ -28,25 +28,25 @@ Simplify _sysconfigdata to include only 
  if ac_fn_c_try_compile "$LINENO"; then :
  
  
--if $GREP noonsees conftest.$ac_objext >/dev/null ; then
+-if grep noonsees conftest.$ac_objext >/dev/null ; then
 +if strings -a conftest.$ac_objext | grep noonsees >/dev/null ; then
    ax_cv_c_float_words_bigendian=yes
  fi
--if $GREP seesnoon conftest.$ac_objext >/dev/null ; then
+-if grep seesnoon conftest.$ac_objext >/dev/null ; then
 +if strings -a conftest.$ac_objext | grep seesnoon >/dev/null ; then
    if test "$ax_cv_c_float_words_bigendian" = unknown; then
      ax_cv_c_float_words_bigendian=no
    else
-@@ -15382,7 +15381,7 @@ _ACEOF
- 
+@@ -15383,7 +15382,7 @@ _ACEOF
  fi
  
+ 
 -EXT_SUFFIX=.${SOABI}${SHLIB_SUFFIX}
 +EXT_SUFFIX=${SHLIB_SUFFIX}
  
  { $as_echo "$as_me:${as_lineno-$LINENO}: checking LDVERSION" >&5
  $as_echo_n "checking LDVERSION... " >&6; }
-@@ -15435,11 +15434,7 @@ fi
+@@ -15436,11 +15435,7 @@ fi