CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jun  4 14:12:53 UTC 2025

Modified Files:
        pkgsrc/lang/py39-html-docs: Makefile distinfo
        pkgsrc/lang/python39: Makefile dist.mk distinfo

Log Message:
python39 py39-html-docs: updated to 3.9.23

Python 3.9.23 final

Security

gh-135034: Fixes multiple issues that allowed tarfile extraction filters (filter="data" and filter="tar") to be bypassed using crafted symlinks and hard links.

Addresses CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, and CVE 2025-4517.
gh-133767: Fix use-after-free in the “unicode-escape” decoder with a non-“strict” error handler.
gh-128840: Short-circuit the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption and a minor denial-of-service.
gh-80222: Fix bug in the folding of quoted strings when flattening an email message using a modern email policy. Previously when a quoted string was folded so that it spanned more than one line, the 
surrounding quotes and internal escapes would be omitted. This could theoretically be used to spoof header lines using a carefully constructed quoted string if the resulting rendered email was 
transmitted or re-parsed.

Library

gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address.
gh-134062: ipaddress: fix collisions in __hash__() for IPv4Network and IPv6Network objects.
gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output according to RFC 3596, §2.5. Patch by Bénédikt Tran.
bpo-43633: Improve the textual representation of IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2) in ipaddress. Patch by Oleksandr Pavliuk.
bpo-25264: os.path.realpath() now accepts a strict keyword-only argument. When set to True, OSError is raised if a path doesn’t exist or a symlink loop is encountered.


To generate a diff of this commit:
cvs rdiff -u -r1.23 -r1.24 pkgsrc/lang/py39-html-docs/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/lang/py39-html-docs/distinfo
cvs rdiff -u -r1.45 -r1.46 pkgsrc/lang/python39/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/lang/python39/dist.mk
cvs rdiff -u -r1.43 -r1.44 pkgsrc/lang/python39/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py39-html-docs/Makefile
diff -u pkgsrc/lang/py39-html-docs/Makefile:1.23 pkgsrc/lang/py39-html-docs/Makefile:1.24
--- pkgsrc/lang/py39-html-docs/Makefile:1.23    Wed Apr  9 14:46:06 2025
+++ pkgsrc/lang/py39-html-docs/Makefile Wed Jun  4 14:12:53 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.23 2025/04/09 14:46:06 adam Exp $
+# $NetBSD: Makefile,v 1.24 2025/06/04 14:12:53 adam Exp $
 
-VERS=          3.9.22
+VERS=          3.9.23
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py39-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py39-html-docs/distinfo
diff -u pkgsrc/lang/py39-html-docs/distinfo:1.25 pkgsrc/lang/py39-html-docs/distinfo:1.26
--- pkgsrc/lang/py39-html-docs/distinfo:1.25    Wed Apr  9 14:46:06 2025
+++ pkgsrc/lang/py39-html-docs/distinfo Wed Jun  4 14:12:53 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.25 2025/04/09 14:46:06 adam Exp $
+$NetBSD: distinfo,v 1.26 2025/06/04 14:12:53 adam Exp $
 
-BLAKE2s (python-3.9.22-docs-html.tar.bz2) = eeaf295686ddd071d2568d8b648097b4d9f5a1ad477fde7ef36c34adf7cfac41
-SHA512 (python-3.9.22-docs-html.tar.bz2) = 052a146073ac94aed8910b07586583fcc07a1c083da6d99609e10805a003b6839ca72adaa27199b221de237c3ecd827c18a2eea571933b623744feeb5b8a764d
-Size (python-3.9.22-docs-html.tar.bz2) = 7008222 bytes
+BLAKE2s (python-3.9.23-docs-html.tar.bz2) = bc90175d4350001abe1161dcecaeba438539e8df66930809c9c7726a60dd88e9
+SHA512 (python-3.9.23-docs-html.tar.bz2) = 396dd9f7212873f37c45d227cb53d334ec10b3b84c21f32ebb8652b457ab107eaeefc760d7cea2873b581341d94e628bd4c8eebdbdfffe9e2496267031eb779b
+Size (python-3.9.23-docs-html.tar.bz2) = 7012126 bytes

Index: pkgsrc/lang/python39/Makefile
diff -u pkgsrc/lang/python39/Makefile:1.45 pkgsrc/lang/python39/Makefile:1.46
--- pkgsrc/lang/python39/Makefile:1.45  Thu Apr 17 21:51:23 2025
+++ pkgsrc/lang/python39/Makefile       Wed Jun  4 14:12:53 2025
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.45 2025/04/17 21:51:23 wiz Exp $
+# $NetBSD: Makefile,v 1.46 2025/06/04 14:12:53 adam Exp $
 
-PKGREVISION= 1
 .include "dist.mk"
 
 PKGNAME=       python39-${PY_DISTVERSION}

Index: pkgsrc/lang/python39/dist.mk
diff -u pkgsrc/lang/python39/dist.mk:1.23 pkgsrc/lang/python39/dist.mk:1.24
--- pkgsrc/lang/python39/dist.mk:1.23   Wed Apr  9 14:46:06 2025
+++ pkgsrc/lang/python39/dist.mk        Wed Jun  4 14:12:53 2025
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.23 2025/04/09 14:46:06 adam Exp $
+# $NetBSD: dist.mk,v 1.24 2025/06/04 14:12:53 adam Exp $
 
-PY_DISTVERSION=        3.9.22
+PY_DISTVERSION=        3.9.23
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python39/distinfo

Index: pkgsrc/lang/python39/distinfo
diff -u pkgsrc/lang/python39/distinfo:1.43 pkgsrc/lang/python39/distinfo:1.44
--- pkgsrc/lang/python39/distinfo:1.43  Wed Apr  9 14:46:06 2025
+++ pkgsrc/lang/python39/distinfo       Wed Jun  4 14:12:53 2025
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.43 2025/04/09 14:46:06 adam Exp $
+$NetBSD: distinfo,v 1.44 2025/06/04 14:12:53 adam Exp $
 
-BLAKE2s (Python-3.9.22.tar.xz) = 374fb456edaaee779ac6b0e3d66ee39f092d074aefa04214517f2073a586dabd
-SHA512 (Python-3.9.22.tar.xz) = c5a76c579455626bf40bb41ee99cab6e444aa5d5085dab7cf622c70ded750e31710c2c30f032917f0d4069350c01a889ed9831d77fcc2d52fcec54055dd07496
-Size (Python-3.9.22.tar.xz) = 19652572 bytes
+BLAKE2s (Python-3.9.23.tar.xz) = 2fdde6b9f0e84a867fbd47275f8f3e1798b36ccaa4ea41d71c197c640d80994c
+SHA512 (Python-3.9.23.tar.xz) = ad2eb2eebff286a16ad631339bc0890b0686cf5e669d28905a98f96e9b1af6673d255f36bf19e146aa4de8d012587dc6b3193e903718f9cdba4b97041318f418
+Size (Python-3.9.23.tar.xz) = 19659284 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69