- Update to 3.9.1:

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=49

Python-3.9.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9c73e63c99855709b9be0b3cc9e5b072cb60f37311e8c4e50f15576a0bf82854
-size 18866140

Python-3.9.0.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAl97PMMACgkQsmmV4xAl
-BWgyNQ//YIbaMs4BN/AHD3ojfJ20iH5H6/QN/Qdg618byVhGF6m3VuJxYhLZKmRq
-pdoSgbvQcmI46dab49LeusFvCGF9RlI+ojmaEN1yaX9gZAbC3C3VamBVEbZN03x6
-WsEohuc+8WKseBf1WfkkeVtH/+a/9Vu0a2RBLjtdLeIq9OfDamX0q2HsTXVD7aYa
-f1nl83rEqSoY5xntNeRMdG/zpmQxyUlB2EjDvDttQN9rjNzsyXe5/iX8/NE9sYIv
-+Cwt6GLhwUEwxxMbwScbyGSsTKKzBiy8NRKQLwwFoW7lx6pawARY4b3QT5yqSGOu
-Yg64+gHtbyx1R8M4qifxzOXuwUWzM0KM1y3DhpGiGmOkxvauLr+qexn40Org3COw
-v88EQpWyo9PONbLiU6oHegxRlu5ZYDB6aHC1h6zwLOruGOTZS/F+cKuH9m6nfZEq
-H/d5nBeumyvtVt+XwscF4jGbnhP5f+Cysj5NDy9HFLoghaHQfsvQvFXCJ3EaQggm
-9y6Z2JT9ihKoUCLqvx1Bj36V1cvWM+0MYL4ripG8gCPSeMMwCSnbXKsDqUtBLJxn
-1EOZXa2eBADF2w1+xjy0Ny7TodHpGLmrejiYiohzhjPcslSWH+cis7iBxCe5uug1
-GOS8A3T6bhUcpNXKqFAMxi+0ew4zBy410P48qQFFxoJEsM6dGTw=
-=2Ua7
------END PGP SIGNATURE-----

Python-3.9.1.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:991c3f8ac97992f3d308fefeb03a64db462574eadbff34ce8bc5bb583d9903ff
+size 18897104

Python-3.9.1.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=5dH0
+-----END PGP SIGNATURE-----

python39.changes

@@ -1,3 +1,244 @@
+-------------------------------------------------------------------
+Mon Feb  8 22:02:03 UTC 2021 - Matej Cepl <mcepl@suse.com>
+
+- Update to 3.9.1:
+  Security bugs:
+  - Prevented potential DoS attack via CPU and RAM exhaustion
+    when processing malformed Apple Property List files in binary
+    format.
+  - The plistlib module no longer accepts entity declarations in
+    XML plist files to avoid XML vulnerabilities. This should not
+    affect users as entity declarations are not used in regular
+    plist files.
+  - Add volatile to the accumulator variable in
+    hmac.compare_digest, making constant-time-defeating
+    optimizations less likely.
+  Core and Builtins
+  - Allow assignment expressions in set literals and set
+    comprehensions as per PEP 572. Patch by Pablo Galindo.
+  - Fix a regression introduced by the new parser, where an
+    unparenthesized walrus operator was not allowed within
+    generator expressions.
+  - types.GenericAlias objects can now be the targets of
+    weakrefs.
+  - Fixed a bug in the PEG parser that was causing crashes in
+    debug mode. Now errors are checked in left-recursive rules to
+    avoid cases where such errors do not get handled in time and
+    appear as long-distance crashes in other places.
+  - Fixed a possible crash in the PEG parser when checking for
+    the ‘!=’ token in the barry_as_flufl rule. Patch by Pablo
+    Galindo.
+  - Fix handling of errors during creation of PyFunctionObject,
+    which resulted in operations on uninitialized memory. Patch
+    by Yonatan Goldschmidt.
+  - Fix a bug in the parser, where a curly brace following
+    a primary didn’t fail immediately. This led to invalid
+    expressions like a {b} to throw a SyntaxError with a wrong
+    offset, or invalid expressions ending with a curly brace like
+    a { to not fail immediately in the REPL.
+  - Fix possible buffer overflow in the new parser when checking
+    for continuation lines. Patch by Pablo Galindo.
+  - Run the parser two times. On the first run, disable all the
+    rules that only generate better error messages to gain
+    performance. If there’s a parse failure, run the parser
+    a second time with those enabled.
+  - Document the default implementation of object.__eq__.
+  - Fix peephole optimizer misoptimize conditional jump
+    + JUMP_IF_NOT_EXC_MATCH pair.
+  - The garbage collector now tracks all user-defined classes.
+    Patch by Brandt Bucher.
+  - Fixed potential issues with removing not completely
+    initialized module from sys.modules when import fails.
+  - Star-unpacking is now allowed for with item’s targets in the
+    PEG parser.
+  - Fixed stack overflow in issubclass() and isinstance() when
+    getting the __bases__ attribute leads to infinite recursion.
+  - When loading a native module and a load failure occurs,
+    prevent a possible UnicodeDecodeError when not running in
+    a UTF-8 locale by decoding the load error message using the
+    current locale’s encoding.
+  - Correctly count control blocks in ‘except’ in compiler.
+    Ensures that a syntax error, rather a fatal error, occurs for
+    deeply nested, named exception handlers.
+  Library
+  - types.GenericAlias will now raise a TypeError when attempting
+    to initialize with a keyword argument. Previously, this would
+    cause the interpreter to crash if the interpreter was
+    compiled with debug symbols. This does not affect
+    interpreters compiled for release. Patch by Ken Jin.
+  - CGIHTTPRequestHandler.run_cgi() HTTP_ACCEPT improperly
+    parsed. Replace the special purpose getallmatchingheaders
+    with generic get_all method and add relevant tests.
+  - inspect.findsource() now raises OSError instead of IndexError
+    when co_lineno of a code object is greater than the file
+    length. This can happen, for example, when a file is edited
+    after it was imported. PR by Irit Katriel.
+  - Fix handling of trailing comments by inspect.getsource().
+  - ChainMap.__iter__ no longer calls __getitem__ on underlying
+    maps
+  - TracebackException no longer holds a reference to the
+    exception’s traceback object. Consequently, instances of
+    TracebackException for equivalent but non-equal exceptions
+    now compare as equal.
+  - We fixed an issue in pickle.whichmodule in which importing
+    multiprocessing could change the how pickle identifies which
+    module an object belongs to, potentially breaking the
+    unpickling of those objects.
+  - Clarify the error message for asyncio.IncompleteReadError
+    when expected is None.
+  - Extracting a symlink from a tarball should succeed and
+    overwrite the symlink if it already exists. The fix is to
+    remove the existing file or symlink before extraction. Based
+    on patch by Chris AtLee, Jeffrey Kintscher, and Senthil
+    Kumaran.
+  - Fixed tkinter.ttk.Style.map(). The function accepts now the
+    representation of the default state as empty sequence (as
+    returned by Style.map()). The structure of the result is now
+    the same on all platform and does not depend on the value of
+    wantobjects.
+  - Fix various issues with typing.Literal parameter handling
+    (flatten, deduplicate, use type to cache key). Patch provided
+    by Yurii Karabas.
+  - Fix the threading.Thread class at fork: do nothing if the
+    thread is already stopped (ex: fork called at Python exit).
+    Previously, an error was logged in the child process.
+  - The onerror callback from shutil.rmtree now receives correct
+    function when os.open fails.
+  - Fix os.sendfile() on illumos.
+  - Fixed writing binary Plist files larger than 4 GiB.
+  - The repr() of typing types containing Generic Alias Types
+    previously did not show the parameterized types in the
+    GenericAlias. They have now been changed to do so.
+  - webbrowser: Ignore NotADirectoryError when calling
+    xdg-settings.
+  - binhex.binhex() consisently writes macOS 9 line endings.
+  - Fix a stack overflow error for asyncio Task or Future repr().
+  - The overflow occurs under some circumstances when a Task or
+    Future recursively returns itself.
+  - Fix memory leak in subprocess.Popen() in case an uid (gid)
+    specified in user (group, extra_groups) overflows uid_t
+    (gid_t).
+  - Improve asyncio.wait function to create the futures set just
+    one time.
+  - InvalidFileException and RecursionError are now the only
+    errors caused by loading malformed binary Plist file
+    (previously ValueError and TypeError could be raised in some
+    specific cases).
+  - Pickling heap types implemented in C with protocols 0 and
+    1 raises now an error instead of producing incorrect data.
+  - plistlib: fix parsing XML plists with hexadecimal integer
+    values
+  - Fix an incorrectly formatted error from
+    _codecs.charmap_decode() when called with a mapped value
+    outside the range of valid Unicode code points. PR by Max
+    Bernstein.
+  - Fix pickling pure Python datetime.time subclasses. Patch by
+    Dean Inwood.
+  - Fixed a bug that was causing ctypes.util.find_library() to
+    return None when triying to locate a library in an
+    environment when gcc>=9 is available and ldconfig is not.
+    Patch by Pablo Galindo
+  - C14N 2.0 serialisation in xml.etree.ElementTree failed for
+    unprefixed attributes when a default namespace was defined.
+  - Fix a bug in the symtable module that was causing
+    module-scope global variables to not be reported as both
+    local and global. Patch by Pablo Galindo.
+  - str() for the type attribute of the tkinter.Event object
+    always returns now the numeric code returned by Tk instead of
+    the name of the event type.
+  - fix tkinter.EventType Enum so all members are strings, and
+    none are tuples
+  - Fix SQLite3 segfault when backing up closed database. Patch
+    contributed by Peter David McCormick.
+  - Fix the tarfile module to write only basename of TAR file to
+    GZIP compression header.
+  - Allow ctypes.wintypes to be imported on non-Windows systems.
+  - shutil.which() now ignores empty entries in PATHEXT instead
+    of treating them as a match.
+  - Fix time-of-check/time-of-action issue in
+    subprocess.Popen.send_signal.
+  - Fix --outfile for cProfile / profile not writing the output
+    file in the original directory when the program being
+    profiled changes the working directory. PR by Anthony
+    Sottile.
+  - ZipFile truncates files to avoid corruption when a shorter
+    comment is provided in append (“a”) mode. Patch by Jan Mazur.
+  - Fixed KeyError exception when flattening an email to a string
+    attempts to replace a non-existent Content-Transfer-Encoding
+    header.
+  Documentation
+  - Fix the URL for the IMAP protocol documents.
+  - Document __format__ functionality for IP addresses.
+  - Clarify that subscription expressions are also valid for
+    certain classes and types in the standard library, and for
+    user-defined classes and types if the classmethod
+    __class_getitem__() is provided.
+  - Documented generic alias type and types.GenericAlias. Also
+    added an entry in glossary for generic types.
+  - In Programming FAQ “Sequences (Tuples/Lists)” section, add
+    “How do you remove multiple items from a list”.
+  - Fix RemovedInSphinx40Warning when building the documentation.
+    Patch by Dong-hee Na.
+  - Update the refcounts info of PyType_FromModuleAndSpec.
+  - Fix tarfile’s extractfile documentation
+  - Document some restrictions on the default string
+    representations of numeric classes.
+  Tests
+  - Reenable test_gdb on gdb 9.2 and newer:
+    https://bugzilla.redhat.com/show_bug.cgi?id=1866884 bug is
+    fixed in gdb 10.1.
+  - Fix test_asyncio.test_call_later() race condition: don’t
+    measure asyncio performance in the call_later() unit test.
+    The test failed randomly on the CI.
+  - Include _testinternalcapi module in Windows installer for
+    test suite
+  - Fix test_logging.test_race_between_set_target_and_flush():
+    the test now waits until all threads complete to avoid
+    leaking running threads.
+  - Avoid a test failure in test_lib2to3 if the module has
+    already imported at the time the test executes. Patch by
+    Pablo Galindo.
+  - Tests for CJK codecs no longer call eval() on content
+    received via HTTP.
+  - Fix test_site.test_license_exists_at_url(): call
+    urllib.request.urlcleanup() to reset the global
+    urllib.request._opener. Patch by Victor Stinner.
+  - test_ssl: skip test_min_max_version_mismatch when TLS 1.0 is
+    not available
+  - Add tests for SIGINT handling in the runpy module.
+  - Fixed a failure in test_tk.test_widgets.ScaleTest happening
+    when executing the test with Tk 8.6.10.
+  Build
+  - Fix a race condition in “make regen-all” when make -jN option
+    is used to run jobs in parallel. The clinic.py script now
+    only use atomic write to write files. Moveover, generated
+    files are now left unchanged if the content does not change,
+    to not change the file modification time.
+  - Update Py_UNREACHABLE to use __builtin_unreachable() if only
+    the compiler is able to use it. Patch by Dong-hee Na.
+  - Addressed three compiler warnings found by undefined behavior
+    sanitizer (ubsan).
+  IDLE
+  - Fix reporting offset of the RE error in searchengine.
+  - Get docstrings for IDLE calltips more often by using
+    inspect.getdoc.
+  - Mostly finish using ttk widgets, mainly for editor, settings,
+    and searches. Some patches by Mark Roseman.
+  - Use ‘IDLE Shell’ as shell title
+  - Rewrite the Calltips doc section.
+  - In calltips, stop reminding that ‘/’ marks the end of
+    positional-only arguments.
+  - Typing opening and closing parentheses inside the parentheses
+    of a function call will no longer cause unnecessary
+    “flashing” off and on of an existing open call-tip, e.g. when
+    typed in a string literal.
+  C API
+  - Fix potential crash in deallocating method objects when
+    dynamically allocated PyMethodDef’s lifetime is managed
+    through the self argument of a PyCFunction.
+  - Py_FileSystemDefaultEncodeErrors and Py_UTF8Mode are
+    available again in limited API.
+
 -------------------------------------------------------------------
 Fri Jan 29 17:22:48 UTC 2021 - Matej Cepl <mcepl@suse.com>
 

python39.spec

@@ -53,7 +53,7 @@
 # Will do the /usr/bin/python3 and all the core links
 %define         primary_interpreter 0
 # We don't process beta signs well
-%define         folderversion 3.9.0
+%define         folderversion 3.9.1
 %define         tarname    Python-%{tarversion}
 %define         sitedir         %{_libdir}/python%{python_version}
 # three possible ABI kinds: m - pymalloc, d - debug build; see PEP 3149
@@ -88,7 +88,7 @@
 %bcond_without profileopt
 %endif
 Name:           %{python_pkg_name}%{psuffix}
-Version:        3.9.0
+Version:        3.9.1
 Release:        0
 Summary:        Python 3 Interpreter
 License:        Python-2.0