CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Sep  9 15:49:35 UTC 2024

Modified Files:
        pkgsrc/lang/py310-html-docs: Makefile distinfo
        pkgsrc/lang/python310: Makefile dist.mk distinfo

Log Message:
python310 py310-html-docs: updated to 3.10.15

Python 3.10.15 final

Windows

gh-119690: Fixes data type confusion in audit events raised by _winapi.CreateFile and _winapi.CreateNamedPipe.
gh-116773: Fix instances of <_overlapped.Overlapped object at 0xXXX> still has pending operation at deallocation, the process may crash.

Tests

gh-112769: The tests now correctly compare zlib version when zlib.ZLIB_RUNTIME_VERSION contains non-integer suffixes. For example zlib-ng defines the version as 1.3.0.zlib-ng.
gh-117187: Fix XML tests for vanilla Expat <2.6.0.
gh-100454: Fix SSL tests CI for OpenSSL 3.1+

Security

gh-123678: Upgrade libexpat to 2.6.3

gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for python -i, as well as for python -m asyncio. The event in question is cpython.run_stdin.

gh-122133: Authenticate the socket connection for the socket.socketpair() fallback on platforms where AF_UNIX is not available like Windows.

Patch by Gregory P. Smith <greg%krypto.org@localhost> and Seth Larson <seth%python.org@localhost>. Reported by Ellie <el%horse64.org@localhost>

gh-121285: Remove backtracking from tarfile header parsing for hdrcharset, PAX, and GNU sparse headers.

gh-118486: os.mkdir() on Windows now accepts mode of 0o700 to restrict the new directory to the current user. This fixes CVE-2024-4030 affecting tempfile.mkdtemp() in scenarios where the base 
temporary directory is more permissive than the default.

gh-116741: Update bundled libexpat to 2.6.2

Library

gh-123693: Use platform-agnostic behavior when computing zipfile.Path.name.

gh-123270: Applied a more surgical fix for malformed payloads in zipfile.Path causing infinite loops (gh-122905) without breaking contents using legitimate characters.

gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes by http.cookies.

gh-122905: zipfile.Path objects now sanitize names from the zipfile.

gh-121650: email headers with embedded newlines are now quoted on output. The generator will now refuse to serialize (write) headers that are unsafely folded or delimited; see 
verify_generated_headers. (Contributed by Bas Bloemsaat and Petr Viktorin in gh-121650.)

gh-113171: Fixed various false positives and false negatives in

ipaddress.IPv4Address.is_private (see these docs for details)
ipaddress.IPv4Address.is_global
ipaddress.IPv6Address.is_private
ipaddress.IPv6Address.is_global
Also in the corresponding ipaddress.IPv4Network and ipaddress.IPv6Network attributes.

gh-102988: email.utils.getaddresses() and email.utils.parseaddr() now return ('', '') 2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate 
values. Add optional strict parameter to these two functions: use strict=False to get the old behavior, accept malformed inputs. getattr(email.utils, 'supports_strict_parsing', False) can be use to 
check if the strict paramater is available. Patch by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix.

gh-67693: Fix urllib.parse.urlunparse() and urllib.parse.urlunsplit() for URIs with path starting with multiple slashes and no authority. Based on patch by Ashwin Ramaswami.

Core and Builtins

gh-112275: A deadlock involving pystate.c’s HEAD_LOCK in posixmodule.c at fork is now fixed. Patch by ChuBoning based on previous Python 3.12 fix by Victor Stinner.


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/py310-html-docs/Makefile
cvs rdiff -u -r1.17 -r1.18 pkgsrc/lang/py310-html-docs/distinfo
cvs rdiff -u -r1.33 -r1.34 pkgsrc/lang/python310/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/lang/python310/dist.mk
cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/python310/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py310-html-docs/Makefile
diff -u pkgsrc/lang/py310-html-docs/Makefile:1.15 pkgsrc/lang/py310-html-docs/Makefile:1.16
--- pkgsrc/lang/py310-html-docs/Makefile:1.15   Wed Mar 20 15:42:25 2024
+++ pkgsrc/lang/py310-html-docs/Makefile        Mon Sep  9 15:49:35 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.15 2024/03/20 15:42:25 adam Exp $
+# $NetBSD: Makefile,v 1.16 2024/09/09 15:49:35 adam Exp $
 
-VERS=          3.10.14
+VERS=          3.10.15
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py310-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py310-html-docs/distinfo
diff -u pkgsrc/lang/py310-html-docs/distinfo:1.17 pkgsrc/lang/py310-html-docs/distinfo:1.18
--- pkgsrc/lang/py310-html-docs/distinfo:1.17   Wed Mar 20 15:42:26 2024
+++ pkgsrc/lang/py310-html-docs/distinfo        Mon Sep  9 15:49:35 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.17 2024/03/20 15:42:26 adam Exp $
+$NetBSD: distinfo,v 1.18 2024/09/09 15:49:35 adam Exp $
 
-BLAKE2s (python-3.10.14-docs-html.tar.bz2) = 3124fe5714ceaa252e5518c440d0ec1fea8ba04fb8d8864fa2919ab4f0459faa
-SHA512 (python-3.10.14-docs-html.tar.bz2) = 4232cca2c31a87362d3c0bde27f029eb4f475be0eab4eeeaeffa70825f2d40c91d80e88feb44408c2014ee5e012554442f0c1d394f110b9e49209e7534cce600
-Size (python-3.10.14-docs-html.tar.bz2) = 7441459 bytes
+BLAKE2s (python-3.10.15-docs-html.tar.bz2) = b8483ca85263593b7f31aaf89891cd9d3c8b2b8e90f1206ec386e4344372e2ab
+SHA512 (python-3.10.15-docs-html.tar.bz2) = 7056b2e9d3672b79aee26f994fd1e5168860452ec783f37cdc604dc25d3df297a9c43bda43add03a36aec85dbd1875d0c9b8eaec0fd75b809fd3811a977b69a0
+Size (python-3.10.15-docs-html.tar.bz2) = 7452520 bytes

Index: pkgsrc/lang/python310/Makefile
diff -u pkgsrc/lang/python310/Makefile:1.33 pkgsrc/lang/python310/Makefile:1.34
--- pkgsrc/lang/python310/Makefile:1.33 Wed May 29 16:33:16 2024
+++ pkgsrc/lang/python310/Makefile      Mon Sep  9 15:49:35 2024
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.33 2024/05/29 16:33:16 adam Exp $
+# $NetBSD: Makefile,v 1.34 2024/09/09 15:49:35 adam Exp $
 
-PKGREVISION= 1
 .include "dist.mk"
 
 PKGNAME=       python310-${PY_DISTVERSION}

Index: pkgsrc/lang/python310/dist.mk
diff -u pkgsrc/lang/python310/dist.mk:1.15 pkgsrc/lang/python310/dist.mk:1.16
--- pkgsrc/lang/python310/dist.mk:1.15  Wed Mar 20 15:42:25 2024
+++ pkgsrc/lang/python310/dist.mk       Mon Sep  9 15:49:35 2024
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.15 2024/03/20 15:42:25 adam Exp $
+# $NetBSD: dist.mk,v 1.16 2024/09/09 15:49:35 adam Exp $
 
-PY_DISTVERSION=        3.10.14
+PY_DISTVERSION=        3.10.15
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python310/distinfo

Index: pkgsrc/lang/python310/distinfo
diff -u pkgsrc/lang/python310/distinfo:1.30 pkgsrc/lang/python310/distinfo:1.31
--- pkgsrc/lang/python310/distinfo:1.30 Wed Mar 20 15:42:25 2024
+++ pkgsrc/lang/python310/distinfo      Mon Sep  9 15:49:35 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.30 2024/03/20 15:42:25 adam Exp $
+$NetBSD: distinfo,v 1.31 2024/09/09 15:49:35 adam Exp $
 
-BLAKE2s (Python-3.10.14.tar.xz) = 4c8218347a53dbad485ae6c862b4b4ccc192c46b23beba9acd8b3fe1d93d4f1a
-SHA512 (Python-3.10.14.tar.xz) = adee638aeca898743da4b8245c0fa1e9b94b516f22e716e60c99038f0bb3dcbf726317aa86656404be1719b5a7c58eb09533720ebc0badbb04bd9a534dd48fef
-Size (Python-3.10.14.tar.xz) = 19600188 bytes
+BLAKE2s (Python-3.10.15.tar.xz) = 1bd5d15078be5b0ef3a88bee1a5f04092427dd9a55641be2dffe40a54858c87d
+SHA512 (Python-3.10.15.tar.xz) = 3c0396b2dae1521315a9b5ce9ad4ab6ede385447922fceb00ea3df75bfd79cb547b9380e936d83c9c1b964e38e16d70e34aec39f4c292853a032407bb6a58063
+Size (Python-3.10.15.tar.xz) = 19596540 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 3dec1b6b7a36e46cbfa0dfcd71c5e7fac9f60764
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 8a91e8f4f86517a62408c3a10ed5eb50c4091fbf
 SHA1 (patch-Lib_lib2to3_pgen2_driver.py) = 593c4e93c5653ab400f0a98b91db92630c0a7390