[pkgsrc/trunk]: pkgsrc/lang python38: updated to 3.8.9

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e3fe1e571922
branches:  trunk
changeset: 449651:e3fe1e571922
user:      adam <adam%pkgsrc.org@localhost>
date:      Sat Apr 03 06:22:06 2021 +0000

description:
python38: updated to 3.8.9

Python 3.8.9 final

Security

bpo-42988: CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of 
Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer.
bpo-43285: ftplib no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 
address and port combinations on the client network.

Code that requires the former vulnerable behavior may set a trust_server_pasv_ipv4_address attribute on their ftplib.FTP instances to True to re-enable it.
bpo-43439: Add audit hooks for gc.get_objects(), gc.get_referrers() and gc.get_referents(). Patch by Pablo Galindo.

Core and Builtins
bpo-43660: Fix crash that happens when replacing sys.stderr with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo.
bpo-35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The Py_DecodeLocale() function now escapes byte sequences which would 
be decoded as Unicode characters outside the [U+0000; U+10ffff] range.
bpo-43406: Fix a possible race condition where PyErr_CheckSignals tries to execute a non-Python signal handler.

Library
bpo-35930: Raising an exception raised in a “future” instance will create reference cycles.
bpo-43577: Fix deadlock when using ssl.SSLContext debug callback with ssl.SSLContext.sni_callback().
bpo-43423: subprocess.communicate() no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows.
bpo-27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail.

The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN.

Also fixes bug with the test for smtpd.
bpo-43399: Fix ElementTree.extend not working on iterators when using the Python implementation
bpo-43316: The python -m gzip command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr.
bpo-43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written.
bpo-42782: Fail fast in shutil.move() to avoid creating destination directories on failure.
bpo-37193: Fixed memory leak in socketserver.ThreadingMixIn introduced in Python 3.7.

Documentation
bpo-43199: Answer “Why is there no goto?” in the Design and History FAQ.
bpo-43407: Clarified that a result from time.monotonic(), time.perf_counter(), time.process_time(), or time.thread_time() can be compared with the result from any following call to the same function 
- not just the next immediate call.
bpo-27646: Clarify that ‘yield from <expr>’ works with any iterable, not just iterators.
bpo-36346: Update some deprecated unicode APIs which are documented as “will be removed in 4.0” to “3.12”. See PEP 623 for detail.

Tests
bpo-37945: Fix test_getsetlocale_issue1813() of test_locale: skip the test if setlocale() fails. Patch by Victor Stinner.
bpo-41561: Add workaround for Ubuntu’s custom OpenSSL security level policy.

Build
bpo-43631: Update macOS, Windows, and CI to OpenSSL 1.1.1k.
bpo-43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros.

macOS
bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j.

IDLE
bpo-42225: Document that IDLE can fail on Unix either from misconfigured IP masquerage rules or failure displaying complex colored (non-ascii) characters.
bpo-43283: Document why printing to IDLE’s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing.

diffstat:

 lang/py38-html-docs/Makefile          |   4 ++--
 lang/py38-html-docs/distinfo          |  10 +++++-----
 lang/python38/dist.mk                 |   4 ++--
 lang/python38/distinfo                |  12 ++++++------
 lang/python38/patches/patch-configure |  30 +++++++++++++++---------------
 5 files changed, 30 insertions(+), 30 deletions(-)

diffs (176 lines):

diff -r 6b695de2b44b -r e3fe1e571922 lang/py38-html-docs/Makefile
--- a/lang/py38-html-docs/Makefile      Sat Apr 03 05:33:18 2021 +0000
+++ b/lang/py38-html-docs/Makefile      Sat Apr 03 06:22:06 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.9 2021/02/20 19:29:06 adam Exp $
+# $NetBSD: Makefile,v 1.10 2021/04/03 06:22:06 adam Exp $
 
-VERS=          3.8.8
+VERS=          3.8.9
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py38-html-docs-${VERS}
 CATEGORIES=    lang python
diff -r 6b695de2b44b -r e3fe1e571922 lang/py38-html-docs/distinfo
--- a/lang/py38-html-docs/distinfo      Sat Apr 03 05:33:18 2021 +0000
+++ b/lang/py38-html-docs/distinfo      Sat Apr 03 06:22:06 2021 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.9 2021/02/20 19:29:06 adam Exp $
+$NetBSD: distinfo,v 1.10 2021/04/03 06:22:06 adam Exp $
 
-SHA1 (python-3.8.8-docs-html.tar.bz2) = 3da7edbf5fe83907dbddb0eec3d61e416d6d9dfc
-RMD160 (python-3.8.8-docs-html.tar.bz2) = 4960b60dc4425fde466ace56357f320ff823d537
-SHA512 (python-3.8.8-docs-html.tar.bz2) = 1f3da0cb48dd817a31b824ca88b27d8df6bf32d5e6348e339e4b4a06403d5aca37a0984d59d8d954ef037aa427ced77a8163c03887de51bd60ff25a6e5ef2682
-Size (python-3.8.8-docs-html.tar.bz2) = 6590826 bytes
+SHA1 (python-3.8.9-docs-html.tar.bz2) = 0e8a0ebc11946120a5251d1bffbaade125f796a1
+RMD160 (python-3.8.9-docs-html.tar.bz2) = ee7a77c81275441a41c8a9c057f4ff3e89824be1
+SHA512 (python-3.8.9-docs-html.tar.bz2) = 384f2326d1ab3c08ade6a1e42edbf7a8cf9e15638297ef5413d1dad55299daf62a92e87c7e13e4c6f042be2432604a0500fe7bc5a0a8816f9024ca28d068a472
+Size (python-3.8.9-docs-html.tar.bz2) = 6593775 bytes
diff -r 6b695de2b44b -r e3fe1e571922 lang/python38/dist.mk
--- a/lang/python38/dist.mk     Sat Apr 03 05:33:18 2021 +0000
+++ b/lang/python38/dist.mk     Sat Apr 03 06:22:06 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.9 2021/02/20 19:29:06 adam Exp $
+# $NetBSD: dist.mk,v 1.10 2021/04/03 06:22:06 adam Exp $
 
-PY_DISTVERSION=        3.8.8
+PY_DISTVERSION=        3.8.9
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python38/distinfo
diff -r 6b695de2b44b -r e3fe1e571922 lang/python38/distinfo
--- a/lang/python38/distinfo    Sat Apr 03 05:33:18 2021 +0000
+++ b/lang/python38/distinfo    Sat Apr 03 06:22:06 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.17 2021/02/20 19:29:06 adam Exp $
+$NetBSD: distinfo,v 1.18 2021/04/03 06:22:06 adam Exp $
 
-SHA1 (Python-3.8.8.tar.xz) = d7dd8ef51ebe7ddd8ec41e39a607ac26d1834a8f
-RMD160 (Python-3.8.8.tar.xz) = 18e8c2584915068a9d7a69df9a64311337802d1a
-SHA512 (Python-3.8.8.tar.xz) = 64181db5aa48281284a3230436ebfb8cb91b645a9dec956fd48c0048334498477073fc4e14d6b426d0ef7fbcdcfd5d59cbf01a504e6c9014dc9529494b9309fb
-Size (Python-3.8.8.tar.xz) = 18271736 bytes
+SHA1 (Python-3.8.9.tar.xz) = ea40651135adc4126a60a45093d100722610f4de
+RMD160 (Python-3.8.9.tar.xz) = fb13a5a53796ecc6acce509cf4fe49f3be61666e
+SHA512 (Python-3.8.9.tar.xz) = e7872a6767f9a8941e8fd76d384fc1a528bcee18514ad13fcb4d3d59f6075c6283e4c933a728b9ae68b9606da2f0a3ae0208e46fbefe3bd7899ced61da5dcf47
+Size (Python-3.8.9.tar.xz) = 18271948 bytes
 SHA1 (patch-Lib___osx__support.py) = 95c729132e5bdbda72789f02b37ed111d0d9d11e
 SHA1 (patch-Lib_ctypes_macholib_dyld.py) = 3acfa836e06bb1ca994357bc4b687af1ce1641e0
 SHA1 (patch-Lib_ctypes_test_test__macholib.py) = db352894c47cbb4bed4905b4a7dde272577c65d8
@@ -35,6 +35,6 @@
 SHA1 (patch-Python_bootstrap__hash.c) = 2e7d24ded1369624b2983b15784988517a9697a5
 SHA1 (patch-Python_pytime.c) = 41981f821e0b420abcb0334312148deb9a9fed5e
 SHA1 (patch-Python_thread__pthread.h) = fb81eaa604b4ed7c1b64c3f4731d58a8aee257be
-SHA1 (patch-configure) = 35f0a5f94837ce84eee30756f349ea39c6b5ef8b
+SHA1 (patch-configure) = 09999ef507c89a53df5106e08d436e7c439286fb
 SHA1 (patch-pyconfig.h.in) = 6e24f401286768641c7d69dd75cfe18f1d8df1e7
 SHA1 (patch-setup.py) = f5cd4ec25c8a5725a39970a097ddfb7068370db8
diff -r 6b695de2b44b -r e3fe1e571922 lang/python38/patches/patch-configure
--- a/lang/python38/patches/patch-configure     Sat Apr 03 05:33:18 2021 +0000
+++ b/lang/python38/patches/patch-configure     Sat Apr 03 06:22:06 2021 +0000
@@ -1,4 +1,4 @@
-$NetBSD: patch-configure,v 1.6 2021/01/02 09:51:49 adam Exp $
+$NetBSD: patch-configure,v 1.7 2021/04/03 06:22:06 adam Exp $
 
 - Use gnu99 instead of c99 to avoid "alloca() undefined" problems.
 - Fix linking on Darwin; don't use -stack_size.
@@ -7,9 +7,9 @@
 - Support for macOS 11 and Apple Silicon (ARM). Mostly backported from:
   https://github.com/python/cpython/pull/22855
 
---- configure.orig     2020-12-21 16:25:24.000000000 +0000
+--- configure.orig     2021-04-02 10:32:10.000000000 +0000
 +++ configure
-@@ -1502,9 +1502,11 @@ Optional Packages:
+@@ -1490,9 +1490,11 @@ Optional Packages:
    --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
    --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
    --with-universal-archs=ARCH
@@ -24,7 +24,7 @@
    --with-framework-name=FRAMEWORK
                            specify an alternate name of the framework built
                            with --enable-framework
-@@ -6924,7 +6926,7 @@ UNIVERSAL_ARCH_FLAGS=
+@@ -6912,7 +6914,7 @@ UNIVERSAL_ARCH_FLAGS=
  # tweak BASECFLAGS based on compiler and platform
  case $GCC in
  yes)
@@ -33,7 +33,7 @@
  
      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -Wextra" >&5
  $as_echo_n "checking for -Wextra... " >&6; }
-@@ -7403,6 +7405,11 @@ $as_echo "$CC" >&6; }
+@@ -7391,6 +7393,11 @@ $as_echo "$CC" >&6; }
                 LIPO_32BIT_FLAGS="-extract ppc7400 -extract i386"
                 ARCH_RUN_32BIT="/usr/bin/arch -i386 -ppc"
                 ;;
@@ -45,7 +45,7 @@
              intel)
                 UNIVERSAL_ARCH_FLAGS="-arch i386 -arch x86_64"
                 LIPO_32BIT_FLAGS="-extract i386"
-@@ -7424,7 +7431,7 @@ $as_echo "$CC" >&6; }
+@@ -7412,7 +7419,7 @@ $as_echo "$CC" >&6; }
                 ARCH_RUN_32BIT="/usr/bin/arch -i386 -ppc"
                 ;;
              *)
@@ -54,7 +54,7 @@
                 ;;
              esac
  
-@@ -9288,6 +9295,9 @@ fi
+@@ -9276,6 +9283,9 @@ fi
                ;;
        ppc)
                MACOSX_DEFAULT_ARCH="ppc64"
@@ -64,7 +64,7 @@
                ;;
        *)
                as_fn_error $? "Unexpected output of 'arch' on OSX" "$LINENO" 5
-@@ -9561,7 +9571,6 @@ then
+@@ -9549,7 +9559,6 @@ then
                # to ensure that tests don't crash
                # Note: This matches the value of THREAD_STACK_SIZE in
                # thread_pthread.h
@@ -72,7 +72,7 @@
  
                if test "$enable_framework"
                then
-@@ -11849,6 +11858,31 @@ $as_echo "no" >&6; }
+@@ -11837,6 +11846,31 @@ $as_echo "no" >&6; }
  
  fi
  rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
@@ -104,29 +104,29 @@
  
  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for memfd_create" >&5
  $as_echo_n "checking for memfd_create... " >&6; }
-@@ -14328,10 +14362,10 @@ _ACEOF
+@@ -14316,10 +14350,10 @@ _ACEOF
  if ac_fn_c_try_compile "$LINENO"; then :
  
  
--if $GREP noonsees conftest.$ac_objext >/dev/null ; then
+-if grep noonsees conftest.$ac_objext >/dev/null ; then
 +if strings -a conftest.$ac_objext | grep noonsees >/dev/null ; then
    ax_cv_c_float_words_bigendian=yes
  fi
--if $GREP seesnoon conftest.$ac_objext >/dev/null ; then
+-if grep seesnoon conftest.$ac_objext >/dev/null ; then
 +if strings -a conftest.$ac_objext | grep seesnoon >/dev/null ; then
    if test "$ax_cv_c_float_words_bigendian" = unknown; then
      ax_cv_c_float_words_bigendian=no
    else
-@@ -15215,7 +15249,7 @@ _ACEOF
+@@ -15204,7 +15238,7 @@ _ACEOF
+ fi
  
- fi
  
 -EXT_SUFFIX=.${SOABI}${SHLIB_SUFFIX}
 +EXT_SUFFIX=${SHLIB_SUFFIX}
  
  { $as_echo "$as_me:${as_lineno-$LINENO}: checking LDVERSION" >&5
  $as_echo_n "checking LDVERSION... " >&6; }
-@@ -15232,11 +15266,7 @@ else
+@@ -15221,11 +15255,7 @@ else
  fi