CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Sep  7 15:32:34 UTC 2022

Modified Files:
        pkgsrc/lang/py38-html-docs: Makefile distinfo
        pkgsrc/lang/python38: PLIST dist.mk distinfo

Log Message:
python38 py38-html-docs: updated to 3.8.14

Python 3.8.14

Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form 
is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735.

This new limit can be configured or disabled by environment variable, command line flag, or sys APIs. See the integer string conversion length limitation documentation. The default limit is 4300 
digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.
gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //. Vulnerability discovered, and initial fix proposed, by Hamza Avvan.

Core and Builtins
gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees.

The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details.

Library
bpo-46197: Fix ensurepip environment isolation for subprocess running pip.
bpo-36073: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters. Patch by Sergey Fedoseev.

Documentation
gh-91888: Add a new gh role to the documentation to link to GitHub issues.
bpo-47138: Pin Jinja to a version compatible with Sphinx version 2.4.4.

Tests
gh-94208: test_ssl is now checking for supported TLS version and protocols in more tests.
bpo-47016: Create a GitHub Actions workflow for verifying bundled pip and setuptools. Patch by Illia Volochii and Adam Turner.
bpo-46114: Fix test case for OpenSSL 3.0.1 version. OpenSSL 3.0 uses 0xMNN00PP0L.

Windows
bpo-47194: Update zlib to v1.2.12 to resolve CVE-2018-25032.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/py38-html-docs/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/py38-html-docs/distinfo
cvs rdiff -u -r1.12 -r1.13 pkgsrc/lang/python38/PLIST
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/python38/dist.mk
cvs rdiff -u -r1.27 -r1.28 pkgsrc/lang/python38/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py38-html-docs/Makefile
diff -u pkgsrc/lang/py38-html-docs/Makefile:1.14 pkgsrc/lang/py38-html-docs/Makefile:1.15
--- pkgsrc/lang/py38-html-docs/Makefile:1.14    Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/py38-html-docs/Makefile Wed Sep  7 15:32:34 2022
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.14 2022/03/19 18:56:44 adam Exp $
+# $NetBSD: Makefile,v 1.15 2022/09/07 15:32:34 adam Exp $
 
-VERS=          3.8.13
+VERS=          3.8.14
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py38-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py38-html-docs/distinfo
diff -u pkgsrc/lang/py38-html-docs/distinfo:1.16 pkgsrc/lang/py38-html-docs/distinfo:1.17
--- pkgsrc/lang/py38-html-docs/distinfo:1.16    Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/py38-html-docs/distinfo Wed Sep  7 15:32:34 2022
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.16 2022/03/19 18:56:44 adam Exp $
+$NetBSD: distinfo,v 1.17 2022/09/07 15:32:34 adam Exp $
 
-BLAKE2s (python-3.8.13-docs-html.tar.bz2) = cc79adb4052226fd1208029917645adf5e7cfa1a5cc988577374edc277fb94c4
-SHA512 (python-3.8.13-docs-html.tar.bz2) = 244a9236762523f9c9784d00892254c0a8ae824536a649d858a68babac664b6f840bddf3ea41cb55a4f2c00f38180a72060cf5811f01a91f342ef5c41ccbc6b3
-Size (python-3.8.13-docs-html.tar.bz2) = 6698035 bytes
+BLAKE2s (python-3.8.14-docs-html.tar.bz2) = 1bee04b6f800f2789140af498fadd40f35c5879616262d0196089224ff572e58
+SHA512 (python-3.8.14-docs-html.tar.bz2) = a294dc94aea8776f183db1d2420bbe50cf1d1ae22f776015ad8e7fb1eac0f7d152fec5e5ea883a1607041e2798d99b512c820235c0f124bd5d2c2c25a92008f9
+Size (python-3.8.14-docs-html.tar.bz2) = 6693920 bytes

Index: pkgsrc/lang/python38/PLIST
diff -u pkgsrc/lang/python38/PLIST:1.12 pkgsrc/lang/python38/PLIST:1.13
--- pkgsrc/lang/python38/PLIST:1.12     Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/python38/PLIST  Wed Sep  7 15:32:34 2022
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.12 2022/03/19 18:56:44 adam Exp $
+@comment $NetBSD: PLIST,v 1.13 2022/09/07 15:32:34 adam Exp $
 bin/2to3-${PY_VER_SUFFIX}
 bin/pydoc${PY_VER_SUFFIX}
 bin/python${PY_VER_SUFFIX}
@@ -65,6 +65,7 @@ include/python${PY_VER_SUFFIX}/internal/
 include/python${PY_VER_SUFFIX}/internal/pycore_gil.h
 include/python${PY_VER_SUFFIX}/internal/pycore_hamt.h
 include/python${PY_VER_SUFFIX}/internal/pycore_initconfig.h
+include/python${PY_VER_SUFFIX}/internal/pycore_long.h
 include/python${PY_VER_SUFFIX}/internal/pycore_object.h
 include/python${PY_VER_SUFFIX}/internal/pycore_pathconfig.h
 include/python${PY_VER_SUFFIX}/internal/pycore_pyerrors.h

Index: pkgsrc/lang/python38/dist.mk
diff -u pkgsrc/lang/python38/dist.mk:1.14 pkgsrc/lang/python38/dist.mk:1.15
--- pkgsrc/lang/python38/dist.mk:1.14   Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/python38/dist.mk        Wed Sep  7 15:32:34 2022
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.14 2022/03/19 18:56:44 adam Exp $
+# $NetBSD: dist.mk,v 1.15 2022/09/07 15:32:34 adam Exp $
 
-PY_DISTVERSION=        3.8.13
+PY_DISTVERSION=        3.8.14
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python38/distinfo

Index: pkgsrc/lang/python38/distinfo
diff -u pkgsrc/lang/python38/distinfo:1.27 pkgsrc/lang/python38/distinfo:1.28
--- pkgsrc/lang/python38/distinfo:1.27  Sat Mar 19 18:56:44 2022
+++ pkgsrc/lang/python38/distinfo       Wed Sep  7 15:32:34 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.27 2022/03/19 18:56:44 adam Exp $
+$NetBSD: distinfo,v 1.28 2022/09/07 15:32:34 adam Exp $
 
-BLAKE2s (Python-3.8.13.tar.xz) = f1eebb7bc0538f69cb4e2b004495a647b83bb598ea266cb019135eb4ac138743
-SHA512 (Python-3.8.13.tar.xz) = 5c732b5d21b189b99a0e9ccd3ae59466bed60a930d5d3f437a262d38f0797b776cecbf12a1852eaebcfb638a6f2e28e471cc2ebf94237cc728144be21842cb81
-Size (Python-3.8.13.tar.xz) = 19023016 bytes
+BLAKE2s (Python-3.8.14.tar.xz) = b3180da1c10ce9271334baf8e859ce7333c46f584ec693777290da148f8b6571
+SHA512 (Python-3.8.14.tar.xz) = 380de19b461e71e268943ef555b78ba68814f4ff77a7576fbcd45d6690db750590213171e1905326b8bcb217070adf66228a00792350293ec6575c20b27a6cc3
+Size (Python-3.8.14.tar.xz) = 19031932 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69