CVS commit: pkgsrc/lang/python36

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jul  3 20:10:41 UTC 2019

Modified Files:
        pkgsrc/lang/python36: Makefile PLIST dist.mk distinfo

Log Message:
python36: updated to 3.6.9

Python 3.6.9 final

Library

bpo-37437: Update vendorized expat version to 2.2.7.
macOS
bpo-34602: Avoid test suite failures on macOS by no longer calling resource.setrlimit to increase the process stack size limit at runtime. The runtime change is no longer needed since the interpreter 
is being built with a larger default stack size.

Python 3.6.9 release candidate 1

Security
bpo-35907: CVE-2019-9948: Avoid file reading by disallowing local-file:// and local_file:// URL schemes in URLopener().open() and URLopener().retrieve() of urllib.request.
bpo-36742: Fixes mishandling of pre-normalization characters in urlsplit().
bpo-30458: Address CVE-2019-9740 by disallowing URL paths with embedded whitespace or control characters through into the underlying http client request. Such potentially malicious header injection 
URLs now cause an http.client.InvalidURL exception to be raised.
bpo-36216: Changes urlsplit() to raise ValueError when the URL contains characters that decompose under IDNA encoding (NFKC-normalization) into characters that affect how the URL is parsed.
bpo-33529: Prevent fold function used in email header encoding from entering infinite loop when there are too many non-ASCII characters in a header.
bpo-35746: [CVE-2019-5010] Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL distribution points with empty DP or URI correctly. A malicious or buggy certificate can result 
into segfault. Vulnerability (TALOS-2018-0758) reported by Colin Read and Nicolas Edet of Cisco.
bpo-35121: Don’t send cookies of domain A without Domain attribute to domain B when domain A is a suffix match of domain B while using a cookiejar with http.cookiejar.DefaultCookiePolicy policy. 
Patch by Karthikeyan Singaravelan.

Library
bpo-35643: Fixed a SyntaxWarning: invalid escape sequence in Modules/_sha3/cleanup.py. Patch by Mickaël Schoentgen.
bpo-35121: Don’t set cookie for a request when the request path is a prefix match of the cookie’s path attribute but doesn’t end with “/”. Patch by Karthikeyan Singaravelan.

Documentation
bpo-35605: Fix documentation build for sphinx<1.6. Patch by Anthony Sottile.
bpo-35564: Explicitly set master_doc variable in conf.py for compliance with Sphinx 2.0

Tests
bpo-36816: Update Lib/test/selfsigned_pythontestdotnet.pem to match self-signed.pythontest.net’s new TLS certificate.
bpo-35925: Skip specific nntplib and ssl networking tests when they would otherwise fail due to a modern OS or distro with a default OpenSSL policy of rejecting connections to servers with weak 
certificates or disabling TLS below TLSv1.2.
bpo-27313: Avoid test_ttk_guionly ComboboxTest failure with macOS Cocoa Tk.
bpo-32947: test_ssl fixes for TLS 1.3 and OpenSSL 1.1.1.

macOS
bpo-34602: Avoid failures setting macOS stack resource limit with resource.setrlimit. This reverts an earlier fix for bpo-18075 which forced a non-default stack size when building the interpreter 
executable on macOS.


To generate a diff of this commit:
cvs rdiff -u -r1.18 -r1.19 pkgsrc/lang/python36/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/python36/PLIST
cvs rdiff -u -r1.9 -r1.10 pkgsrc/lang/python36/dist.mk
cvs rdiff -u -r1.26 -r1.27 pkgsrc/lang/python36/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/python36/Makefile
diff -u pkgsrc/lang/python36/Makefile:1.18 pkgsrc/lang/python36/Makefile:1.19
--- pkgsrc/lang/python36/Makefile:1.18  Thu Apr 25 15:59:54 2019
+++ pkgsrc/lang/python36/Makefile       Wed Jul  3 20:10:41 2019
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.18 2019/04/25 15:59:54 roy Exp $
+# $NetBSD: Makefile,v 1.19 2019/07/03 20:10:41 adam Exp $
 
 .include "dist.mk"
 
 PKGNAME=       python36-${PY_DISTVERSION}
-PKGREVISION=   1
 CATEGORIES=    lang python
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/lang/python36/PLIST
diff -u pkgsrc/lang/python36/PLIST:1.14 pkgsrc/lang/python36/PLIST:1.15
--- pkgsrc/lang/python36/PLIST:1.14     Thu Apr 25 15:59:54 2019
+++ pkgsrc/lang/python36/PLIST  Wed Jul  3 20:10:41 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.14 2019/04/25 15:59:54 roy Exp $
+@comment $NetBSD: PLIST,v 1.15 2019/07/03 20:10:41 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -3070,6 +3070,7 @@ lib/python${PY_VER_SUFFIX}/test/support/
 lib/python${PY_VER_SUFFIX}/test/support/testresult.py
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyc
 lib/python${PY_VER_SUFFIX}/test/support/testresult.pyo
+lib/python${PY_VER_SUFFIX}/test/talos-2019-0758.pem
 lib/python${PY_VER_SUFFIX}/test/test___all__.py
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyc
 lib/python${PY_VER_SUFFIX}/test/test___all__.pyo

Index: pkgsrc/lang/python36/dist.mk
diff -u pkgsrc/lang/python36/dist.mk:1.9 pkgsrc/lang/python36/dist.mk:1.10
--- pkgsrc/lang/python36/dist.mk:1.9    Mon Dec 31 10:06:45 2018
+++ pkgsrc/lang/python36/dist.mk        Wed Jul  3 20:10:41 2019
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.9 2018/12/31 10:06:45 adam Exp $
+# $NetBSD: dist.mk,v 1.10 2019/07/03 20:10:41 adam Exp $
 
-PY_DISTVERSION=        3.6.8
+PY_DISTVERSION=        3.6.9
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python36/distinfo

Index: pkgsrc/lang/python36/distinfo
diff -u pkgsrc/lang/python36/distinfo:1.26 pkgsrc/lang/python36/distinfo:1.27
--- pkgsrc/lang/python36/distinfo:1.26  Thu Apr 25 17:44:21 2019
+++ pkgsrc/lang/python36/distinfo       Wed Jul  3 20:10:41 2019
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.26 2019/04/25 17:44:21 leot Exp $
+$NetBSD: distinfo,v 1.27 2019/07/03 20:10:41 adam Exp $
 
-SHA1 (Python-3.6.8.tar.xz) = ee55acedef049268307633cbc9c7ff0610d1244f
-RMD160 (Python-3.6.8.tar.xz) = 478ffd42f188414cd6c114740f90b147363b9b10
-SHA512 (Python-3.6.8.tar.xz) = b17867e451ebe662f50df83ed112d3656c089e7d750651ea640052b01b713b58e66aac9e082f71fd16f5b5510bc9b797f5ccd30f5399581e9aa406197f02938a
-Size (Python-3.6.8.tar.xz) = 17212420 bytes
+SHA1 (Python-3.6.9.tar.xz) = 3cd8b0e814b753fcce4fdf7edc823d8fb0da9208
+RMD160 (Python-3.6.9.tar.xz) = 3ccbe94ae221ccfb03fcd97840149a89b7135bc0
+SHA512 (Python-3.6.9.tar.xz) = 05de9c6f44d96a52bfce10ede4312de892573edaf8bece65926d19973a3a800d65eed7a857af945f69efcfb25efa3788e7a54016b03d80b611eb51c3ea074819
+Size (Python-3.6.9.tar.xz) = 17212164 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 3b7aecb2879cce70c76bd4bc60f2ec577a5bed61
 SHA1 (patch-Lib_distutils_command_install.py) = 29204f34296f36ab2b21c745f915ba73caf2b71c
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf