CVS commit: pkgsrc/lang

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Sep  9 15:48:22 UTC 2024

Modified Files:
        pkgsrc/lang/py39-html-docs: Makefile distinfo
        pkgsrc/lang/python39: Makefile dist.mk distinfo

Log Message:
python39 py39-html-docs: updated to 3.9.20

Python 3.9.20 final

Windows

gh-119690: Fixes data type confusion in audit events raised by _winapi.CreateFile and _winapi.CreateNamedPipe.
gh-116773: Fix instances of <_overlapped.Overlapped object at 0xXXX> still has pending operation at deallocation, the process may crash.

Tests

gh-112769: The tests now correctly compare zlib version when zlib.ZLIB_RUNTIME_VERSION contains non-integer suffixes. For example zlib-ng defines the version as 1.3.0.zlib-ng.
gh-117187: Fix XML tests for vanilla Expat <2.6.0.

Security

gh-123678: Upgrade libexpat to 2.6.3
gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for python -i, as well as for python -m asyncio. The event in question is cpython.run_stdin.
gh-122133: Authenticate the socket connection for the socket.socketpair() fallback on platforms where AF_UNIX is not available like Windows.

Patch by Gregory P. Smith <greg%krypto.org@localhost> and Seth Larson <seth%python.org@localhost>. Reported by Ellie <el%horse64.org@localhost>
gh-121285: Remove backtracking from tarfile header parsing for hdrcharset, PAX, and GNU sparse headers.
gh-118486: os.mkdir() on Windows now accepts mode of 0o700 to restrict the new directory to the current user. This fixes CVE-2024-4030 affecting tempfile.mkdtemp() in scenarios where the base 
temporary directory is more permissive than the default.
gh-114572: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads.
gh-116741: Update bundled libexpat to 2.6.2

Library

gh-123270: Applied a more surgical fix for malformed payloads in zipfile.Path causing infinite loops (gh-122905) without breaking contents using legitimate characters.
gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes by http.cookies.
gh-121650: email headers with embedded newlines are now quoted on output. The generator will now refuse to serialize (write) headers that are unsafely folded or delimited; see 
verify_generated_headers. (Contributed by Bas Bloemsaat and Petr Viktorin in gh-121650.)
gh-113171: Fixed various false positives and false negatives in

ipaddress.IPv4Address.is_private (see these docs for details)
ipaddress.IPv4Address.is_global
ipaddress.IPv6Address.is_private
ipaddress.IPv6Address.is_global
Also in the corresponding ipaddress.IPv4Network and ipaddress.IPv6Network attributes.
gh-102988: email.utils.getaddresses() and email.utils.parseaddr() now return ('', '') 2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate 
values. Add optional strict parameter to these two functions: use strict=False to get the old behavior, accept malformed inputs. getattr(email.utils, 'supports_strict_parsing', False) can be use to 
check if the strict paramater is available. Patch by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix.
gh-67693: Fix urllib.parse.urlunparse() and urllib.parse.urlunsplit() for URIs with path starting with multiple slashes and no authority. Based on patch by Ashwin Ramaswami.

Core and Builtins

gh-112275: A deadlock involving pystate.c’s HEAD_LOCK in posixmodule.c at fork is now fixed. Patch by ChuBoning based on previous Python 3.12 fix by Victor Stinner.


To generate a diff of this commit:
cvs rdiff -u -r1.20 -r1.21 pkgsrc/lang/py39-html-docs/Makefile
cvs rdiff -u -r1.22 -r1.23 pkgsrc/lang/py39-html-docs/distinfo
cvs rdiff -u -r1.37 -r1.38 pkgsrc/lang/python39/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/lang/python39/dist.mk
cvs rdiff -u -r1.40 -r1.41 pkgsrc/lang/python39/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/lang/py39-html-docs/Makefile
diff -u pkgsrc/lang/py39-html-docs/Makefile:1.20 pkgsrc/lang/py39-html-docs/Makefile:1.21
--- pkgsrc/lang/py39-html-docs/Makefile:1.20    Wed Mar 20 15:41:01 2024
+++ pkgsrc/lang/py39-html-docs/Makefile Mon Sep  9 15:48:22 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.20 2024/03/20 15:41:01 adam Exp $
+# $NetBSD: Makefile,v 1.21 2024/09/09 15:48:22 adam Exp $
 
-VERS=          3.9.19
+VERS=          3.9.20
 DISTNAME=      python-${VERS}-docs-html
 PKGNAME=       py39-html-docs-${VERS}
 CATEGORIES=    lang python

Index: pkgsrc/lang/py39-html-docs/distinfo
diff -u pkgsrc/lang/py39-html-docs/distinfo:1.22 pkgsrc/lang/py39-html-docs/distinfo:1.23
--- pkgsrc/lang/py39-html-docs/distinfo:1.22    Wed Mar 20 15:41:01 2024
+++ pkgsrc/lang/py39-html-docs/distinfo Mon Sep  9 15:48:22 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.22 2024/03/20 15:41:01 adam Exp $
+$NetBSD: distinfo,v 1.23 2024/09/09 15:48:22 adam Exp $
 
-BLAKE2s (python-3.9.19-docs-html.tar.bz2) = 85908303141fc909c345709cfb4c77d5b62d2c75930c4bcdd6189ec6ed383d2f
-SHA512 (python-3.9.19-docs-html.tar.bz2) = 5812613745d169caba35b234aeed77edcc1cd26d95a1cd32b0692bb7e27dc2acd9b94a45f349485856b9e4388b73f7b05d07b8626960f7127ba110f7094c5a48
-Size (python-3.9.19-docs-html.tar.bz2) = 6983522 bytes
+BLAKE2s (python-3.9.20-docs-html.tar.bz2) = 3b31c39a2781b3c395e74608a88a7e4559299855f960118b30b7d6b71d43deac
+SHA512 (python-3.9.20-docs-html.tar.bz2) = 524ebdc8b082ba50691fb8eadf6bf17374a1d9d6e61a6b49efecf597bbd2c7b50bca908fb94c5ca9350c06895330d88086d0d1ee9ccb7306362b1cd37282a53d
+Size (python-3.9.20-docs-html.tar.bz2) = 6988218 bytes

Index: pkgsrc/lang/python39/Makefile
diff -u pkgsrc/lang/python39/Makefile:1.37 pkgsrc/lang/python39/Makefile:1.38
--- pkgsrc/lang/python39/Makefile:1.37  Wed May 29 16:33:16 2024
+++ pkgsrc/lang/python39/Makefile       Mon Sep  9 15:48:22 2024
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.37 2024/05/29 16:33:16 adam Exp $
+# $NetBSD: Makefile,v 1.38 2024/09/09 15:48:22 adam Exp $
 
-PKGREVISION= 1
 .include "dist.mk"
 
 PKGNAME=       python39-${PY_DISTVERSION}

Index: pkgsrc/lang/python39/dist.mk
diff -u pkgsrc/lang/python39/dist.mk:1.20 pkgsrc/lang/python39/dist.mk:1.21
--- pkgsrc/lang/python39/dist.mk:1.20   Wed Mar 20 15:41:01 2024
+++ pkgsrc/lang/python39/dist.mk        Mon Sep  9 15:48:22 2024
@@ -1,6 +1,6 @@
-# $NetBSD: dist.mk,v 1.20 2024/03/20 15:41:01 adam Exp $
+# $NetBSD: dist.mk,v 1.21 2024/09/09 15:48:22 adam Exp $
 
-PY_DISTVERSION=        3.9.19
+PY_DISTVERSION=        3.9.20
 DISTNAME=      Python-${PY_DISTVERSION}
 EXTRACT_SUFX=  .tar.xz
 DISTINFO_FILE= ${.CURDIR}/../../lang/python39/distinfo

Index: pkgsrc/lang/python39/distinfo
diff -u pkgsrc/lang/python39/distinfo:1.40 pkgsrc/lang/python39/distinfo:1.41
--- pkgsrc/lang/python39/distinfo:1.40  Wed Mar 20 15:41:01 2024
+++ pkgsrc/lang/python39/distinfo       Mon Sep  9 15:48:22 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.40 2024/03/20 15:41:01 adam Exp $
+$NetBSD: distinfo,v 1.41 2024/09/09 15:48:22 adam Exp $
 
-BLAKE2s (Python-3.9.19.tar.xz) = 36b5e8e8ac4081264e20f6f8d7b017226c0a2bf93b454a49b6a811bb33b3b6c0
-SHA512 (Python-3.9.19.tar.xz) = 5577830c734e63a70bbc62cd33d263b9aa87c4381b49cb694c3559067c4c682a55506b65ec5514a8e0a5abf6294dc728e909385d449ae1c388e62f83cea9bb89
-Size (Python-3.9.19.tar.xz) = 19682840 bytes
+BLAKE2s (Python-3.9.20.tar.xz) = 1e2d8ed13f42f5c5daa1b76ca06dc3d97dd18cdc1c008148291541e4b4a0a567
+SHA512 (Python-3.9.20.tar.xz) = c828f33edf1704e3149499d6d34e89264cb5cdb2b09ff05561641b359716d7996f0fe928629e09f006b1fd7850fdaf937275919c7fdd83f5efc32707c64d814b
+Size (Python-3.9.20.tar.xz) = 19648968 bytes
 SHA1 (patch-Lib_ctypes_util.py) = 032cc99ebad93ddddfd89073c60424a952e3faa3
 SHA1 (patch-Lib_distutils_sysconfig.py) = 6822eafb4dfded86d7f7353831816aeb8119e6cf
 SHA1 (patch-Lib_distutils_unixccompiler.py) = 2e65a8dd5dd3fe25957206c062106fa7a6fc4e69