diff --git a/Python-3.9.5.tar.xz b/Python-3.9.5.tar.xz deleted file mode 100644 index 5b0cffb..0000000 --- a/Python-3.9.5.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0c5a140665436ec3dbfbb79e2dfb6d192655f26ef4a29aeffcb6d1820d716d83 -size 19058600 diff --git a/Python-3.9.5.tar.xz.asc b/Python-3.9.5.tar.xz.asc deleted file mode 100644 index 77e2b3f..0000000 --- a/Python-3.9.5.tar.xz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmCQIFQACgkQsmmV4xAl -BWi5HRAAhcpdJaRrDp0A/09a6ifg1IPBU8tsZkoMjav4RuDIG0WQLo2xCeds6TEv -RdpV3AgUs3PVb8Y8LHYYFXvOR28ntDfcDScOKkPVL2BYNepP3PI3Ogg/tehZ8BsN -jvyYqHdbQNWcv4P2m8iiOePtDlAVNRuMl384vE5B9QywCH5yG/bRNdTgY/337KFd -2+t2yAhbctmyuzZbNaCjOYzNwQhaNPi6PBSYwtcDuOHbN5KzrGiXhz0KAcm0h82g -8nQMaA4B2pMfm27e4NLubT4oMbE07TWEIH+rnBbZ0ld+nzDdg1ewyBiKqx0qXOlS -ik8C48NBmADQu0No288W2aJ4ZLlWjrQKgh1gcxJZtSI8AWHsqJcwhN5fJTanR3jt -EyIif4e58zUuc+aDSu0gtqVz0Y1ktjyX5sx/7/dM756hiv8FcUN3j+zGH92GEVpc -RxGenFt8RH2TZQhZ/tulI22GXpB50EGqxfEARG2k0f4+UdhBIXhDvQhnlh0uc+/r -cF9Jf3QpAuC8n/DDd8fOp67BkADB6CFuXY6pr0yHs+tjHufd7Nd+H5zs0TI5rsgx -j+rLvhOKx4kYz3M5OajVTqQCq4OvvH0Hc/FRTiZwEBp5N4fC/AfbCRNiH0dNWrx3 -X0DGvVicJLinKaHCmiqrKba7isMTDx0LMRC7YcTKB8rkih7eyhk= -=LkIx ------END PGP SIGNATURE----- diff --git a/Python-3.9.6.tar.xz b/Python-3.9.6.tar.xz new file mode 100644 index 0000000..8b4a971 --- /dev/null +++ b/Python-3.9.6.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:397920af33efc5b97f2e0b57e91923512ef89fc5b3c1d21dbfc8c4828ce0108a +size 19051972 diff --git a/Python-3.9.6.tar.xz.asc b/Python-3.9.6.tar.xz.asc new file mode 100644 index 0000000..b53bb87 --- /dev/null +++ b/Python-3.9.6.tar.xz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmDZkQMACgkQsmmV4xAl +BWj09RAAoAJZTivNUSuw9H4UBr5Y7O/y09t2SoSDnyQTv8OWXhFh6uSQQvUah8oh +BtyfIHHJrPK+h6oX5mNmFcuv0GVKpmn5yuIYExeMBvG78mqSybYuQuHqWISEK5Vt +NUt0ZBbOzQyqidO2Q++kRf+zfrc5BK5SZ/iCaT8fTcxISs/GuKmG2R/SoRzjYDNa +XSqJi0/3jH/hSS/XIhKzDRzlkSemOCBuGeBi8rLCEtLE1faeeMYBB/StLzs8lkpb +VIZ26jMN5BDtT2Srm2tJk3Yze3I4jSvhkDLVS3gWd5IKH0jrFFoGwswXuc8V6aLP +tt87artPasOhLvEBy7y/1c3MZw+WOsZS5ogKrfI2QSMbuXT4HMOyFnrb7zz3nsKy +wtwRP0I03P1KbI0RrM4LQj1r05RSvMSSJsbslIThL274Fh44/xanNgIM1xyf1Ios +GiKkfo9xkkwB2/et2WJd9M4MfWcLiGvkRoFGxyon5uoNDrIaZaQF8JWZeXctIyDP +MbdoLQod7PevKnr+XNxZNN1JVQ1uatghuTtXQcZ34WWkSGxb1zf+uh2ghayEKSeC +nOhk2/j3CDHh5j+9oYqmDi1yvQGLucVIhu7cc2mFk6nljROzOu5Ga7M1+XSv7RNe +cB0N1XRmpD075HEPHDmV7HSQc9A3B6fdDa5bHgyDBML7flIj5Vs= +=j4X2 +-----END PGP SIGNATURE----- diff --git a/bpo44426-complex-keyword-sphinx.patch b/bpo44426-complex-keyword-sphinx.patch deleted file mode 100644 index ed23189..0000000 --- a/bpo44426-complex-keyword-sphinx.patch +++ /dev/null @@ -1,44 +0,0 @@ -From 29b463879b71a3ade67541c34daafb2929269fc4 Mon Sep 17 00:00:00 2001 -From: Mark Dickinson -Date: Wed, 16 Jun 2021 18:43:49 +0100 -Subject: [PATCH] bpo-44426: Use of 'complex' as a C variable name confuses - Sphinx; change it to 'num'. (GH-26744) (cherry picked from commit - 7247f6f433846c6e37308a550e8e5eb6be379856) - -Co-authored-by: Mark Dickinson ---- - Doc/c-api/complex.rst | 4 ++-- - Doc/c-api/object.rst | 4 ++-- - 2 files changed, 4 insertions(+), 4 deletions(-) - ---- a/Doc/c-api/complex.rst -+++ b/Doc/c-api/complex.rst -@@ -46,9 +46,9 @@ pointers. This is consistent throughout - :c:type:`Py_complex` representation. - - --.. c:function:: Py_complex _Py_c_neg(Py_complex complex) -+.. c:function:: Py_complex _Py_c_neg(Py_complex num) - -- Return the negation of the complex number *complex*, using the C -+ Return the negation of the complex number *num*, using the C - :c:type:`Py_complex` representation. - - ---- a/Doc/c-api/object.rst -+++ b/Doc/c-api/object.rst -@@ -483,12 +483,12 @@ Object Protocol - returned. This is the equivalent to the Python expression ``len(o)``. - - --.. c:function:: Py_ssize_t PyObject_LengthHint(PyObject *o, Py_ssize_t default) -+.. c:function:: Py_ssize_t PyObject_LengthHint(PyObject *o, Py_ssize_t def_size) - - Return an estimated length for the object *o*. First try to return its - actual length, then an estimate using :meth:`~object.__length_hint__`, and - finally return the default value. On error return ``-1``. This is the -- equivalent to the Python expression ``operator.length_hint(o, default)``. -+ equivalent to the Python expression ``operator.length_hint(o, def_size)``. - - .. versionadded:: 3.4 - diff --git a/python39.changes b/python39.changes index effccb4..99d66a9 100644 --- a/python39.changes +++ b/python39.changes @@ -1,3 +1,59 @@ +------------------------------------------------------------------- +Mon Aug 9 11:14:15 UTC 2021 - Fusion Future + +- Update to 3.9.6: + * Security + - bpo-44022: mod:http.client now avoids infinitely reading + potential HTTP headers after a 100 Continue status response + from the server. + * Core and Builtins + - bpo-44168: Fix error message in the parser involving keyword + arguments with invalid expressions. Patch by Pablo Galindo + - bpo-44114: Fix incorrect dictkeys_reversed and + dictitems_reversed function signatures in C code, which broke + webassembly builds. + - bpo-44070: No longer eagerly makes import filenames absolute, + except for extension modules, which was introduced in 3.9.5. + - bpo-28146: Fix a confusing error message in str.format(). + - bpo-11105: When compiling ast.AST objects with recursive + references through compile(), the interpreter doesn’t crash + anymore instead it raises a RecursionError. + * Library + - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a + 301 (Moved Permanently) for a directory path not ending with + /, add a Content-Length: 0 header. This improves the behavior + for certain clients. + - bpo-43776: When subprocess.Popen args are provided as a + string or as pathlib.Path, the Popen instance repr now shows + the right thing. + - bpo-43318: Fix a bug where pdb does not always echo cleared + breakpoints. + - bpo-43295: datetime.datetime.strptime() now raises ValueError + instead of IndexError when matching 'z' with the %z format + specifier. + - bpo-37022: pdb now displays exceptions from repr() with its p + and pp commands. + * IDLE + - bpo-33962: Move the indent space setting from the Font tab to + the new Windows tab. Patch by Mark Roseman and Terry Jan + Reedy. + - bpo-40468: Split the settings dialog General tab into Windows + and Shell/ED tabs. Move help sources, which extend the Help + menu, to the Extensions tab. Make space for new options and + shorten the dialog. The latter makes the dialog better fit + small screens. + - bpo-41611: Avoid uncaught exceptions in + AutoCompleteWindow.winconfig_event(). + - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on + macOS. + * Tools/Demos + - bpo-44074: Make patchcheck automatically detect the correct + base branch name (previously it was hardcoded to ‘master’) +- Upstreamed patches were removed: + - bpo44426-complex-keyword-sphinx.patch +- Refreshed patches: + - subprocess-raise-timeout.patch + ------------------------------------------------------------------- Mon Aug 2 12:36:47 UTC 2021 - Matej Cepl @@ -50,14 +106,14 @@ Wed May 5 15:16:58 UTC 2021 - Matej Cepl - bpo-43472: Ensures interpreter-level audit hooks receive the cpython.PyInterpreterState_New event when called through the _xxsubinterpreters module. - - bpo-36384: ipaddress module no longer accepts any leading - zeros in IPv4 address strings. Leading zeros are ambiguous - and interpreted as octal notation by some libraries. For - example the legacy function socket.inet_aton() treats - leading zeros as octal notatation. glibc implementation of - modern inet_pton() does not accept any leading zeros. For - a while the ipaddress module used to accept ambiguous - leading zeros. + - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module + no longer accepts any leading zeros in IPv4 address + strings. Leading zeros are ambiguous and interpreted as + octal notation by some libraries. For example the legacy + function socket.inet_aton() treats leading zeros as octal + notatation. glibc implementation of modern inet_pton() does + not accept any leading zeros. For a while the ipaddress + module used to accept ambiguous leading zeros. - bpo-43075: Fix Regular Expression Denial of Service (ReDoS) vulnerability in urllib.request.AbstractBasicAuthHandler. The ReDoS-vulnerable regex has quadratic worst-case diff --git a/python39.spec b/python39.spec index 58d2f17..e567b2b 100644 --- a/python39.spec +++ b/python39.spec @@ -53,7 +53,7 @@ # Will do the /usr/bin/python3 and all the core links %define primary_interpreter 0 # We don't process beta signs well -%define folderversion 3.9.5 +%define folderversion 3.9.6 %define tarname Python-%{tarversion} %define sitedir %{_libdir}/python%{python_version} # three possible ABI kinds: m - pymalloc, d - debug build; see PEP 3149 @@ -88,7 +88,7 @@ %bcond_without profileopt %endif Name: %{python_pkg_name}%{psuffix} -Version: 3.9.5 +Version: 3.9.6 Release: 0 Summary: Python 3 Interpreter License: Python-2.0 @@ -145,10 +145,6 @@ Patch33: no-skipif-doctests.patch # PATCH-FIX-SLE skip-test_pyobject_freed_is_freed.patch mcepl@suse.com # skip a test failing on SLE-15 Patch34: skip-test_pyobject_freed_is_freed.patch -# PATCH-FIX-UPSTREAM bpo44426-complex-keyword-sphinx.patch bpo#44426 mcepl@suse.com -# Use of 'complex' as a C variable name confuses Sphinx; change it to 'num' -# The same goes for 'default', which I had to change to 'def_size' -Patch35: bpo44426-complex-keyword-sphinx.patch BuildRequires: autoconf-archive BuildRequires: automake BuildRequires: fdupes @@ -395,7 +391,6 @@ other applications. %if 0%{?sle_version} && 0%{?sle_version} <= 150300 %patch34 -p1 %endif -%patch35 -p1 # drop Autoconf version requirement sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac diff --git a/subprocess-raise-timeout.patch b/subprocess-raise-timeout.patch index 70094ef..05b7db3 100644 --- a/subprocess-raise-timeout.patch +++ b/subprocess-raise-timeout.patch @@ -1,6 +1,6 @@ --- a/Lib/test/test_subprocess.py +++ b/Lib/test/test_subprocess.py -@@ -252,7 +252,8 @@ class ProcessTestCase(BaseTestCase): +@@ -253,7 +253,8 @@ class ProcessTestCase(BaseTestCase): "time.sleep(3600)"], # Some heavily loaded buildbots (sparc Debian 3.x) require # this much time to start and print.