CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Mar 20 15:42:26 UTC 2024

Modified Files:
        pkgsrc/lang/py310-html-docs: Makefile PLIST distinfo
        pkgsrc/lang/python310: Makefile dist.mk distinfo

Log Message:
python310 py310-html-docs: updated to 3.10.14

Python 3.10.14

Security

gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods:
xml.etree.ElementTree.XMLParser.flush()
xml.etree.ElementTree.XMLPullParser.flush()
xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
xml.sax.expatreader.ExpatParser.flush()
gh-115399: Update bundled libexpat to 2.6.0
gh-114572: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads.
gh-113659: Skip .pth files with names starting with a dot or hidden file attribute.

Core and Builtins

gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds

Library

gh-115197: urllib.request no longer resolves the hostname before checking it against the system’s proxy bypass list on macOS and Windows.
gh-115133: Fix tests for XMLPullParser with Expat 2.6.0.
gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows platforms.
gh-109858: Protect zipfile from “quoted-overlap” zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory.
gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, which now no longer dereferences symlinks when working around file system permission errors.

Documentation

gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under “XML vulnerabilities”.

Windows

gh-111239: Update Windows builds to use zlib v1.3.1.
gh-109991: Windows builds now use OpenSSL 1.1.1w. Note that OpenSSL 1.1 has reached its end of life and no future fixes will be made, and this version of Python is no longer receiving maintenance 
fixes and will not be updated to OpenSSL 3.0.

Tools/Demos

gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to use 1.1.1w, 3.0.11, and 3.1.3.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/py310-html-docs/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/lang/py310-html-docs/PLIST
cvs rdiff -u -r1.16 -r1.17 pkgsrc/lang/py310-html-docs/distinfo
cvs rdiff -u -r1.31 -r1.32 pkgsrc/lang/python310/Makefile
cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/python310/dist.mk
cvs rdiff -u -r1.29 -r1.30 pkgsrc/lang/python310/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py310-html-docs/Makefile
diff -u pkgsrc/lang/py310-html-docs/Makefile:1.14 pkgsrc/lang/py310-html-docs/Makefile:1.15
--- pkgsrc/lang/py310-html-docs/Makefile:1.14   Fri Aug 25 08:26:49 2023
+++ pkgsrc/lang/py310-html-docs/Makefile        Wed Mar 20 15:42:25 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.14 2023/08/25 08:26:49 adam Exp $
+# $NetBSD: Makefile,v 1.15 2024/03/20 15:42:25 adam Exp $
 
-VERS=          3.10.13
+VERS=          3.10.14
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py310-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py310-html-docs/PLIST
diff -u pkgsrc/lang/py310-html-docs/PLIST:1.3 pkgsrc/lang/py310-html-docs/PLIST:1.4
--- pkgsrc/lang/py310-html-docs/PLIST:1.3       Wed Jun  7 13:26:54 2023
+++ pkgsrc/lang/py310-html-docs/PLIST   Wed Mar 20 15:42:26 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2023/06/07 13:26:54 adam Exp $
+@comment $NetBSD: PLIST,v 1.4 2024/03/20 15:42:26 adam Exp $
 share/doc/python3.10/.buildinfo
 share/doc/python3.10/_downloads/6b45dc135219d1404be49d606589a11d/tzinfo_examples.py
 share/doc/python3.10/_images/hashlib-blake2-tree.png
@@ -516,6 +516,7 @@ share/doc/python3.10/_static/pydoctheme.
 share/doc/python3.10/_static/pydoctheme_dark.css
 share/doc/python3.10/_static/pygments.css
 share/doc/python3.10/_static/pygments_dark.css
+share/doc/python3.10/_static/search-focus.js
 share/doc/python3.10/_static/searchtools.js
 share/doc/python3.10/_static/sidebar.js
 share/doc/python3.10/_static/themetoggle.js

Index: pkgsrc/lang/py310-html-docs/distinfo
diff -u pkgsrc/lang/py310-html-docs/distinfo:1.16 pkgsrc/lang/py310-html-docs/distinfo:1.17
--- pkgsrc/lang/py310-html-docs/distinfo:1.16   Fri Aug 25 08:26:49 2023
+++ pkgsrc/lang/py310-html-docs/distinfo        Wed Mar 20 15:42:26 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.16 2023/08/25 08:26:49 adam Exp $
+$NetBSD: distinfo,v 1.17 2024/03/20 15:42:26 adam Exp $
 
-BLAKE2s (python-3.10.13-docs-html.tar.bz2) = fac9c93390a9f6d820a4171ae7374dd51eeb314de3a53a645106f71a19d56249
-SHA512 (python-3.10.13-docs-html.tar.bz2) = be2cb6a2ece7849b1c259e9d86b7cf5e2a91c30a976b155c4055fc229d35a1762a90321a6227e890b6d5be51ab3377b9059b9662eed683933ec676fc2dc5f9a9
-Size (python-3.10.13-docs-html.tar.bz2) = 7429989 bytes
+BLAKE2s (python-3.10.14-docs-html.tar.bz2) = 3124fe5714ceaa252e5518c440d0ec1fea8ba04fb8d8864fa2919ab4f0459faa
+SHA512 (python-3.10.14-docs-html.tar.bz2) = 4232cca2c31a87362d3c0bde27f029eb4f475be0eab4eeeaeffa70825f2d40c91d80e88feb44408c2014ee5e012554442f0c1d394f110b9e49209e7534cce600
+Size (python-3.10.14-docs-html.tar.bz2) = 7441459 bytes

Index: pkgsrc/lang/python310/Makefile
diff -u pkgsrc/lang/python310/Makefile:1.31 pkgsrc/lang/python310/Makefile:1.32
--- pkgsrc/lang/python310/Makefile:1.31 Tue Jan 23 06:51:44 2024
+++ pkgsrc/lang/python310/Makefile      Wed Mar 20 15:42:25 2024
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.31 2024/01/23 06:51:44 adam Exp $
+# $NetBSD: Makefile,v 1.32 2024/03/20 15:42:25 adam Exp $
 
 .include "dist.mk"
 
 PKGNAME=       python310-${PY_DISTVERSION}
-PKGREVISION=   4
 CATEGORIES=    lang python
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/lang/python310/dist.mk
diff -u pkgsrc/lang/python310/dist.mk:1.14 pkgsrc/lang/python310/dist.mk:1.15
--- pkgsrc/lang/python310/dist.mk:1.14  Fri Aug 25 08:26:49 2023
+++ pkgsrc/lang/python310/dist.mk       Wed Mar 20 15:42:25 2024
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.14 2023/08/25 08:26:49 adam Exp $
+# $NetBSD: dist.mk,v 1.15 2024/03/20 15:42:25 adam Exp $
 
-PY_DISTVERSION=        3.10.13
+PY_DISTVERSION=        3.10.14
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python310/distinfo

Index: pkgsrc/lang/python310/distinfo
diff -u pkgsrc/lang/python310/distinfo:1.29 pkgsrc/lang/python310/distinfo:1.30
--- pkgsrc/lang/python310/distinfo:1.29 Tue Jan 23 06:51:44 2024
+++ pkgsrc/lang/python310/distinfo      Wed Mar 20 15:42:25 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.29 2024/01/23 06:51:44 adam Exp $
+$NetBSD: distinfo,v 1.30 2024/03/20 15:42:25 adam Exp $
 
-BLAKE2s (Python-3.10.13.tar.xz) = c714daeb2437980ce940e76db70f037d844bcddc06dddb6ac966cef281a2b514
-SHA512 (Python-3.10.13.tar.xz) = 7579772e501486b2b07f78142082dee1e99c7643640098860ac0cf2ca87daf7588b0c00b1db1960146b37f56a6ed98fd08297c25c9a19b612cf6e6a258984da8
-Size (Python-3.10.13.tar.xz) = 19663088 bytes
+BLAKE2s (Python-3.10.14.tar.xz) = 4c8218347a53dbad485ae6c862b4b4ccc192c46b23beba9acd8b3fe1d93d4f1a
+SHA512 (Python-3.10.14.tar.xz) = adee638aeca898743da4b8245c0fa1e9b94b516f22e716e60c99038f0bb3dcbf726317aa86656404be1719b5a7c58eb09533720ebc0badbb04bd9a534dd48fef
+Size (Python-3.10.14.tar.xz) = 19600188 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 3dec1b6b7a36e46cbfa0dfcd71c5e7fac9f60764
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 8a91e8f4f86517a62408c3a10ed5eb50c4091fbf
 SHA1 (patch-Lib_lib2to3_pgen2_driver.py) = 593c4e93c5653ab400f0a98b91db92630c0a7390