[pkgsrc/trunk]: pkgsrc/lang/python36 python36: updated to 3.6.9

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/385f15b6cb73
branches:  trunk
changeset: 335967:385f15b6cb73
user:      adam <adam%pkgsrc.org@localhost>
date:      Wed Jul 03 20:10:41 2019 +0000

description:
python36: updated to 3.6.9

Python 3.6.9 final

Library

bpo-37437: Update vendorized expat version to 2.2.7.
macOS
bpo-34602: Avoid test suite failures on macOS by no longer calling resource.setrlimit to increase the process stack size limit at runtime. The runtime change is no longer needed since the interpreter 
is being built with a larger default stack size.


Python 3.6.9 release candidate 1

Security
bpo-35907: CVE-2019-9948: Avoid file reading by disallowing local-file:// and local_file:// URL schemes in URLopener().open() and URLopener().retrieve() of urllib.request.
bpo-36742: Fixes mishandling of pre-normalization characters in urlsplit().
bpo-30458: Address CVE-2019-9740 by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection 
URLs now cause an http.client.InvalidURL exception to be raised.
bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed.
bpo-33529: Prevent fold function used in email header encoding from entering infinite loop when there are too many non-ASCII characters in a header.
bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result 
into segfault. Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet of Cisco.
bpo-35121: Don?t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. 
Patch by Karthikeyan Singaravelan.

Library
bpo-35643: Fixed a SyntaxWarning: invalid escape sequence in Modules/_sha3/cleanup.py. Patch by Micka?l Schoentgen.
bpo-35121: Don?t set cookie for a request when the request path is a prefix match of the cookie?s path attribute but doesn?t end with ?/?. Patch by Karthikeyan Singaravelan.

Documentation
bpo-35605: Fix documentation build for sphinx<1.6. Patch by Anthony Sottile.
bpo-35564: Explicitly set master_doc variable in conf.py for compliance with Sphinx 2.0

Tests
bpo-36816: Update Lib/test/selfsigned_pythontestdotnet.pem to match self-signed.pythontest.net?s new TLS certificate.
bpo-35925: Skip specific nntplib and ssl networking tests when they would otherwise fail due to a modern OS or distro with a default OpenSSL policy of rejecting connections to servers with weak 
certificates or disabling TLS below TLSv1.2.
bpo-27313: Avoid test_ttk_guionly ComboboxTest failure with macOS Cocoa Tk.
bpo-32947: test_ssl fixes for TLS 1.3 and OpenSSL 1.1.1.

macOS
bpo-34602: Avoid failures setting macOS stack resource limit with resource.setrlimit. This reverts an earlier fix for bpo-18075 which forced a non-default stack size when building the interpreter 
executable on macOS.

diffstat:

 lang/python36/Makefile |   3 +--
 lang/python36/PLIST    |   3 ++-
 lang/python36/dist.mk  |   4 ++--
 lang/python36/distinfo |  10 +++++-----
 4 files changed, 10 insertions(+), 10 deletions(-)

diffs (61 lines):

diff -r 1afff0cdb889 -r 385f15b6cb73 lang/python36/Makefile
--- a/lang/python36/Makefile    Wed Jul 03 20:09:27 2019 +0000
+++ b/lang/python36/Makefile    Wed Jul 03 20:10:41 2019 +0000
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.18 2019/04/25 15:59:54 roy Exp $
+# $NetBSD: Makefile,v 1.19 2019/07/03 20:10:41 adam Exp $
 
 .include "dist.mk"
 
 PKGNAME=       python36-${PY_DISTVERSION}
-PKGREVISION=   1
 CATEGORIES=    lang python
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
diff -r 1afff0cdb889 -r 385f15b6cb73 lang/python36/PLIST
--- a/lang/python36/PLIST       Wed Jul 03 20:09:27 2019 +0000
+++ b/lang/python36/PLIST       Wed Jul 03 20:10:41 2019 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.14 2019/04/25 15:59:54 roy Exp $
+@comment $NetBSD: PLIST,v 1.15 2019/07/03 20:10:41 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -3070,6 +3070,7 @@
 lib/python${PY_VER_SUFFIX}/test/support/testresult.py
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyc
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyo
+lib/python${PY_VER_SUFFIX}/test/talos-2019-0758.pem
 lib/python${PY_VER_SUFFIX}/test/test___all__.py
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyc
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyo
diff -r 1afff0cdb889 -r 385f15b6cb73 lang/python36/dist.mk
--- a/lang/python36/dist.mk     Wed Jul 03 20:09:27 2019 +0000
+++ b/lang/python36/dist.mk     Wed Jul 03 20:10:41 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.9 2018/12/31 10:06:45 adam Exp $
+# $NetBSD: dist.mk,v 1.10 2019/07/03 20:10:41 adam Exp $
 
-PY_DISTVERSION=        3.6.8
+PY_DISTVERSION=        3.6.9
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python36/distinfo
diff -r 1afff0cdb889 -r 385f15b6cb73 lang/python36/distinfo
--- a/lang/python36/distinfo    Wed Jul 03 20:09:27 2019 +0000
+++ b/lang/python36/distinfo    Wed Jul 03 20:10:41 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2019/04/25 17:44:21 leot Exp $
+$NetBSD: distinfo,v 1.27 2019/07/03 20:10:41 adam Exp $
 
-SHA1 (Python-3.6.8.tar.xz) = ee55acedef049268307633cbc9c7ff0610d1244f
-RMD160 (Python-3.6.8.tar.xz) = 478ffd42f188414cd6c114740f90b147363b9b10
-SHA512 (Python-3.6.8.tar.xz) = b17867e451ebe662f50df83ed112d3656c089e7d750651ea640052b01b713b58e66aac9e082f71fd16f5b5510bc9b797f5ccd30f5399581e9aa406197f02938a
-Size (Python-3.6.8.tar.xz) = 17212420 bytes
+SHA1 (Python-3.6.9.tar.xz) = 3cd8b0e814b753fcce4fdf7edc823d8fb0da9208
+RMD160 (Python-3.6.9.tar.xz) = 3ccbe94ae221ccfb03fcd97840149a89b7135bc0
+SHA512 (Python-3.6.9.tar.xz) = 05de9c6f44d96a52bfce10ede4312de892573edaf8bece65926d19973a3a800d65eed7a857af945f69efcfb25efa3788e7a54016b03d80b611eb51c3ea074819
+Size (Python-3.6.9.tar.xz) = 17212164 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 3b7aecb2879cce70c76bd4bc60f2ec577a5bed61
 SHA1 (patch-Lib_distutils_command_install.py) = 29204f34296f36ab2b21c745f915ba73caf2b71c
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf