CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Sep  9 15:50:30 UTC 2024

Modified Files:
        pkgsrc/lang/py311-html-docs: Makefile distinfo
        pkgsrc/lang/python311: Makefile dist.mk distinfo

Log Message:
python311 py311-html-docs: updated to 3.11.10

Python 3.11.10 final

Windows

gh-123418: Updated Windows build to use OpenSSL 3.0.15.
gh-119690: Fixes data type confusion in audit event raised by _winapi.CreateNamedPipe.

Security

gh-123678: Upgrade libexpat to 2.6.3

gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for python -i, as well as for python -m asyncio. The event in question is cpython.run_stdin.

gh-122133: Authenticate the socket connection for the socket.socketpair() fallback on platforms where AF_UNIX is not available like Windows.

Patch by Gregory P. Smith <greg%krypto.org@localhost> and Seth Larson <seth%python.org@localhost>. Reported by Ellie <el%horse64.org@localhost>

gh-121285: Remove backtracking from tarfile header parsing for hdrcharset, PAX, and GNU sparse headers.

gh-118486: os.mkdir() on Windows now accepts mode of 0o700 to restrict the new directory to the current user. This fixes CVE-2024-4030 affecting tempfile.mkdtemp() in scenarios where the base 
temporary directory is more permissive than the default.

gh-116741: Update bundled libexpat to 2.6.2

Library

gh-123270: Applied a more surgical fix for malformed payloads in zipfile.Path causing infinite loops (gh-122905) without breaking contents using legitimate characters.

gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes by http.cookies.

gh-122905: zipfile.Path objects now sanitize names from the zipfile.

gh-121650: email headers with embedded newlines are now quoted on output. The generator will now refuse to serialize (write) headers that are unsafely folded or delimited; see 
verify_generated_headers. (Contributed by Bas Bloemsaat and Petr Viktorin in gh-121650.)

gh-119506: Fix io.TextIOWrapper.write() method breaks internal buffer when the method is called again during flushing internal buffer.

gh-118643: Fix an AttributeError in the email module when re-fold a long address list. Also fix more cases of incorrect encoding of the address separator in the address list.

gh-113171: Fixed various false positives and false negatives in

ipaddress.IPv4Address.is_private (see these docs for details)
ipaddress.IPv4Address.is_global
ipaddress.IPv6Address.is_private
ipaddress.IPv6Address.is_global
Also in the corresponding ipaddress.IPv4Network and ipaddress.IPv6Network attributes.

gh-102988: email.utils.getaddresses() and email.utils.parseaddr() now return ('', '') 2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate 
values. Add optional strict parameter to these two functions: use strict=False to get the old behavior, accept malformed inputs. getattr(email.utils, 'supports_strict_parsing', False) can be use to 
check if the strict paramater is available. Patch by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix.

gh-67693: Fix urllib.parse.urlunparse() and urllib.parse.urlunsplit() for URIs with path starting with multiple slashes and no authority. Based on patch by Ashwin Ramaswami.

Core and Builtins

gh-112275: A deadlock involving pystate.c’s HEAD_LOCK in posixmodule.c at fork is now fixed. Patch by ChuBoning based on previous Python 3.12 fix by Victor Stinner.
gh-109120: Added handle of incorrect star expressions, e.g f(3, *). Patch by Grigoryev Semyon


To generate a diff of this commit:
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/py311-html-docs/Makefile \
    pkgsrc/lang/py311-html-docs/distinfo
cvs rdiff -u -r1.30 -r1.31 pkgsrc/lang/python311/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/lang/python311/dist.mk
cvs rdiff -u -r1.18 -r1.19 pkgsrc/lang/python311/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py311-html-docs/Makefile
diff -u pkgsrc/lang/py311-html-docs/Makefile:1.10 pkgsrc/lang/py311-html-docs/Makefile:1.11
--- pkgsrc/lang/py311-html-docs/Makefile:1.10   Mon Apr  8 12:49:33 2024
+++ pkgsrc/lang/py311-html-docs/Makefile        Mon Sep  9 15:50:30 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.10 2024/04/08 12:49:33 adam Exp $
+# $NetBSD: Makefile,v 1.11 2024/09/09 15:50:30 adam Exp $
 
-VERS=          3.11.9
+VERS=          3.11.10
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py311-html-docs-${VERS}
 CATEGORIES=    lang python
Index: pkgsrc/lang/py311-html-docs/distinfo
diff -u pkgsrc/lang/py311-html-docs/distinfo:1.10 pkgsrc/lang/py311-html-docs/distinfo:1.11
--- pkgsrc/lang/py311-html-docs/distinfo:1.10   Mon Apr  8 12:49:33 2024
+++ pkgsrc/lang/py311-html-docs/distinfo        Mon Sep  9 15:50:30 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.10 2024/04/08 12:49:33 adam Exp $
+$NetBSD: distinfo,v 1.11 2024/09/09 15:50:30 adam Exp $
 
-BLAKE2s (python-3.11.9-docs-html.tar.bz2) = 3305bb2c08c345a57c248a2466ca0eafb342da5c28a4c7b64760180fb4a34c1b
-SHA512 (python-3.11.9-docs-html.tar.bz2) = d60c8811bb1099b56737b6807552f2f503d6c4cb0fe7adb3ba584796bed1da64ec514865580c07bcafdfd906118987d6ea0433eb2fb19a2a68f30880c28f4889
-Size (python-3.11.9-docs-html.tar.bz2) = 7996912 bytes
+BLAKE2s (python-3.11.10-docs-html.tar.bz2) = 6c5ad4585fe85ca18d353a0e3a32083e569f2730cb325e14f5d76f7fd237738f
+SHA512 (python-3.11.10-docs-html.tar.bz2) = a14e18d3641d4379144ead7341536c781a94e9f15c9b53b2647a7c7c4cd15211963564fb2519e756b79db9234f555ede2442a678d6b4f27de6f7fb0b2993c266
+Size (python-3.11.10-docs-html.tar.bz2) = 7988162 bytes

Index: pkgsrc/lang/python311/Makefile
diff -u pkgsrc/lang/python311/Makefile:1.30 pkgsrc/lang/python311/Makefile:1.31
--- pkgsrc/lang/python311/Makefile:1.30 Wed May 29 16:33:16 2024
+++ pkgsrc/lang/python311/Makefile      Mon Sep  9 15:50:30 2024
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.30 2024/05/29 16:33:16 adam Exp $
+# $NetBSD: Makefile,v 1.31 2024/09/09 15:50:30 adam Exp $
 
-PKGREVISION= 1
 .include "dist.mk"
 
 PKGNAME=       python311-${PY_DISTVERSION}

Index: pkgsrc/lang/python311/dist.mk
diff -u pkgsrc/lang/python311/dist.mk:1.10 pkgsrc/lang/python311/dist.mk:1.11
--- pkgsrc/lang/python311/dist.mk:1.10  Mon Apr  8 12:49:33 2024
+++ pkgsrc/lang/python311/dist.mk       Mon Sep  9 15:50:30 2024
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.10 2024/04/08 12:49:33 adam Exp $
+# $NetBSD: dist.mk,v 1.11 2024/09/09 15:50:30 adam Exp $
 
-PY_DISTVERSION=        3.11.9
+PY_DISTVERSION=        3.11.10
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python311/distinfo

Index: pkgsrc/lang/python311/distinfo
diff -u pkgsrc/lang/python311/distinfo:1.18 pkgsrc/lang/python311/distinfo:1.19
--- pkgsrc/lang/python311/distinfo:1.18 Tue Apr 30 19:05:17 2024
+++ pkgsrc/lang/python311/distinfo      Mon Sep  9 15:50:30 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.18 2024/04/30 19:05:17 cheusov Exp $
+$NetBSD: distinfo,v 1.19 2024/09/09 15:50:30 adam Exp $
 
-BLAKE2s (Python-3.11.9.tar.xz) = 82562f4c5e5a6feb3d9ec5186c7402da21b83a65c761cbb1e4f6b840892c1b89
-SHA512 (Python-3.11.9.tar.xz) = 2b0a1d936b4ef8376f9655797aece8ffdff75031ad7bfa840f330cac2aed189aecc80c163edc12ea772851d7a011f3fc1960470a73d9d4290cf3ab8ad6ed7e6a
-Size (Python-3.11.9.tar.xz) = 20175816 bytes
+BLAKE2s (Python-3.11.10.tar.xz) = 1539954063c7182dca6fc6e4a426f18d5ee0516f1fa6263f1333b0c6faa32eae
+SHA512 (Python-3.11.10.tar.xz) = 6ce77cced1ce90bb5eea38504dfc1bc19c872149a5a63fdd8353ac8c772c54ab7a42176e141c7f6f898d31761bf93e1739b238920fbeefbedd6016ad033c1de0
+Size (Python-3.11.10.tar.xz) = 20067656 bytes
 SHA1 (patch-Include_pymacro.h) = 271a891892dca1a3aaa3bedcae626a68a36cae0b
 SHA1 (patch-Lib_ctypes_util.py) = 3dec1b6b7a36e46cbfa0dfcd71c5e7fac9f60764
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 8a91e8f4f86517a62408c3a10ed5eb50c4091fbf