Accepting request 911061 from devel:languages:python:Factory

- Update to 3.9.6:
  * Security
    - bpo-44022: mod:http.client now avoids infinitely reading
      potential HTTP headers after a 100 Continue status response
      from the server.
  * Core and Builtins
    - bpo-44168: Fix error message in the parser involving keyword
      arguments with invalid expressions. Patch by Pablo Galindo
    - bpo-44114: Fix incorrect dictkeys_reversed and
      dictitems_reversed function signatures in C code, which broke
      webassembly builds.
    - bpo-44070: No longer eagerly makes import filenames absolute,
      except for extension modules, which was introduced in 3.9.5.
    - bpo-28146: Fix a confusing error message in str.format().
    - bpo-11105: When compiling ast.AST objects with recursive
      references through compile(), the interpreter doesn’t crash
      anymore instead it raises a RecursionError.
  * Library
    - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
      301 (Moved Permanently) for a directory path not ending with
      /, add a Content-Length: 0 header. This improves the behavior
      for certain clients.
    - bpo-43776: When subprocess.Popen args are provided as a
      string or as pathlib.Path, the Popen instance repr now shows
      the right thing.
    - bpo-43318: Fix a bug where pdb does not always echo cleared
      breakpoints.
    - bpo-43295: datetime.datetime.strptime() now raises ValueError
      instead of IndexError when matching 'z' with the %z format
      specifier.

OBS-URL: https://build.opensuse.org/request/show/911061
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python39?expand=0&rev=20

Python-3.9.5.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0c5a140665436ec3dbfbb79e2dfb6d192655f26ef4a29aeffcb6d1820d716d83
-size 19058600

Python-3.9.5.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmCQIFQACgkQsmmV4xAl
-BWi5HRAAhcpdJaRrDp0A/09a6ifg1IPBU8tsZkoMjav4RuDIG0WQLo2xCeds6TEv
-RdpV3AgUs3PVb8Y8LHYYFXvOR28ntDfcDScOKkPVL2BYNepP3PI3Ogg/tehZ8BsN
-jvyYqHdbQNWcv4P2m8iiOePtDlAVNRuMl384vE5B9QywCH5yG/bRNdTgY/337KFd
-2+t2yAhbctmyuzZbNaCjOYzNwQhaNPi6PBSYwtcDuOHbN5KzrGiXhz0KAcm0h82g
-8nQMaA4B2pMfm27e4NLubT4oMbE07TWEIH+rnBbZ0ld+nzDdg1ewyBiKqx0qXOlS
-ik8C48NBmADQu0No288W2aJ4ZLlWjrQKgh1gcxJZtSI8AWHsqJcwhN5fJTanR3jt
-EyIif4e58zUuc+aDSu0gtqVz0Y1ktjyX5sx/7/dM756hiv8FcUN3j+zGH92GEVpc
-RxGenFt8RH2TZQhZ/tulI22GXpB50EGqxfEARG2k0f4+UdhBIXhDvQhnlh0uc+/r
-cF9Jf3QpAuC8n/DDd8fOp67BkADB6CFuXY6pr0yHs+tjHufd7Nd+H5zs0TI5rsgx
-j+rLvhOKx4kYz3M5OajVTqQCq4OvvH0Hc/FRTiZwEBp5N4fC/AfbCRNiH0dNWrx3
-X0DGvVicJLinKaHCmiqrKba7isMTDx0LMRC7YcTKB8rkih7eyhk=
-=LkIx
------END PGP SIGNATURE-----

Python-3.9.6.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:397920af33efc5b97f2e0b57e91923512ef89fc5b3c1d21dbfc8c4828ce0108a
+size 19051972

Python-3.9.6.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE4/8oOcBIslwITevpsmmV4xAlBWgFAmDZkQMACgkQsmmV4xAl
+BWj09RAAoAJZTivNUSuw9H4UBr5Y7O/y09t2SoSDnyQTv8OWXhFh6uSQQvUah8oh
+BtyfIHHJrPK+h6oX5mNmFcuv0GVKpmn5yuIYExeMBvG78mqSybYuQuHqWISEK5Vt
+NUt0ZBbOzQyqidO2Q++kRf+zfrc5BK5SZ/iCaT8fTcxISs/GuKmG2R/SoRzjYDNa
+XSqJi0/3jH/hSS/XIhKzDRzlkSemOCBuGeBi8rLCEtLE1faeeMYBB/StLzs8lkpb
+VIZ26jMN5BDtT2Srm2tJk3Yze3I4jSvhkDLVS3gWd5IKH0jrFFoGwswXuc8V6aLP
+tt87artPasOhLvEBy7y/1c3MZw+WOsZS5ogKrfI2QSMbuXT4HMOyFnrb7zz3nsKy
+wtwRP0I03P1KbI0RrM4LQj1r05RSvMSSJsbslIThL274Fh44/xanNgIM1xyf1Ios
+GiKkfo9xkkwB2/et2WJd9M4MfWcLiGvkRoFGxyon5uoNDrIaZaQF8JWZeXctIyDP
+MbdoLQod7PevKnr+XNxZNN1JVQ1uatghuTtXQcZ34WWkSGxb1zf+uh2ghayEKSeC
+nOhk2/j3CDHh5j+9oYqmDi1yvQGLucVIhu7cc2mFk6nljROzOu5Ga7M1+XSv7RNe
+cB0N1XRmpD075HEPHDmV7HSQc9A3B6fdDa5bHgyDBML7flIj5Vs=
+=j4X2
+-----END PGP SIGNATURE-----

bpo44426-complex-keyword-sphinx.patch

@@ -1,44 +0,0 @@
-From 29b463879b71a3ade67541c34daafb2929269fc4 Mon Sep 17 00:00:00 2001
-From: Mark Dickinson <mdickinson@enthought.com>
-Date: Wed, 16 Jun 2021 18:43:49 +0100
-Subject: [PATCH] bpo-44426: Use of 'complex' as a C variable name confuses
- Sphinx; change it to 'num'. (GH-26744) (cherry picked from commit
- 7247f6f433846c6e37308a550e8e5eb6be379856)
-
-Co-authored-by: Mark Dickinson <mdickinson@enthought.com>
----
- Doc/c-api/complex.rst |    4 ++--
- Doc/c-api/object.rst  |    4 ++--
- 2 files changed, 4 insertions(+), 4 deletions(-)
-
---- a/Doc/c-api/complex.rst
-+++ b/Doc/c-api/complex.rst
-@@ -46,9 +46,9 @@ pointers.  This is consistent throughout
-    :c:type:`Py_complex` representation.
- 
- 
--.. c:function:: Py_complex _Py_c_neg(Py_complex complex)
-+.. c:function:: Py_complex _Py_c_neg(Py_complex num)
- 
--   Return the negation of the complex number *complex*, using the C
-+   Return the negation of the complex number *num*, using the C
-    :c:type:`Py_complex` representation.
- 
- 
---- a/Doc/c-api/object.rst
-+++ b/Doc/c-api/object.rst
-@@ -483,12 +483,12 @@ Object Protocol
-    returned.  This is the equivalent to the Python expression ``len(o)``.
- 
- 
--.. c:function:: Py_ssize_t PyObject_LengthHint(PyObject *o, Py_ssize_t default)
-+.. c:function:: Py_ssize_t PyObject_LengthHint(PyObject *o, Py_ssize_t def_size)
- 
-    Return an estimated length for the object *o*. First try to return its
-    actual length, then an estimate using :meth:`~object.__length_hint__`, and
-    finally return the default value. On error return ``-1``. This is the
--   equivalent to the Python expression ``operator.length_hint(o, default)``.
-+   equivalent to the Python expression ``operator.length_hint(o, def_size)``.
- 
-    .. versionadded:: 3.4
- 

python39.changes

@@ -1,3 +1,59 @@
+-------------------------------------------------------------------
+Mon Aug  9 11:14:15 UTC 2021 - Fusion Future <qydwhotmail@gmail.com>
+
+- Update to 3.9.6:
+  * Security
+    - bpo-44022: mod:http.client now avoids infinitely reading
+      potential HTTP headers after a 100 Continue status response
+      from the server.
+  * Core and Builtins
+    - bpo-44168: Fix error message in the parser involving keyword
+      arguments with invalid expressions. Patch by Pablo Galindo
+    - bpo-44114: Fix incorrect dictkeys_reversed and
+      dictitems_reversed function signatures in C code, which broke
+      webassembly builds.
+    - bpo-44070: No longer eagerly makes import filenames absolute,
+      except for extension modules, which was introduced in 3.9.5.
+    - bpo-28146: Fix a confusing error message in str.format().
+    - bpo-11105: When compiling ast.AST objects with recursive
+      references through compile(), the interpreter doesn’t crash
+      anymore instead it raises a RecursionError.
+  * Library
+    - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
+      301 (Moved Permanently) for a directory path not ending with
+      /, add a Content-Length: 0 header. This improves the behavior
+      for certain clients.
+    - bpo-43776: When subprocess.Popen args are provided as a
+      string or as pathlib.Path, the Popen instance repr now shows
+      the right thing.
+    - bpo-43318: Fix a bug where pdb does not always echo cleared
+      breakpoints.
+    - bpo-43295: datetime.datetime.strptime() now raises ValueError
+      instead of IndexError when matching 'z' with the %z format
+      specifier.
+    - bpo-37022: pdb now displays exceptions from repr() with its p
+      and pp commands.
+  * IDLE
+    - bpo-33962: Move the indent space setting from the Font tab to
+      the new Windows tab. Patch by Mark Roseman and Terry Jan
+      Reedy.
+    - bpo-40468: Split the settings dialog General tab into Windows
+      and Shell/ED tabs. Move help sources, which extend the Help
+      menu, to the Extensions tab. Make space for new options and
+      shorten the dialog. The latter makes the dialog better fit
+      small screens.
+    - bpo-41611: Avoid uncaught exceptions in
+      AutoCompleteWindow.winconfig_event().
+    - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
+      macOS.
+  * Tools/Demos
+    - bpo-44074: Make patchcheck automatically detect the correct
+      base branch name (previously it was hardcoded to ‘master’)
+- Upstreamed patches were removed:
+  - bpo44426-complex-keyword-sphinx.patch
+- Refreshed patches:
+  - subprocess-raise-timeout.patch
+
 -------------------------------------------------------------------
 Mon Aug  2 12:36:47 UTC 2021 - Matej Cepl <mcepl@suse.com>
 
@@ -50,14 +106,14 @@ Wed May  5 15:16:58 UTC 2021 - Matej Cepl <mcepl@suse.com>
     - bpo-43472: Ensures interpreter-level audit hooks receive
       the cpython.PyInterpreterState_New event when called
       through the _xxsubinterpreters module.
-    - bpo-36384: ipaddress module no longer accepts any leading
+    - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
-      zeros in IPv4 address strings. Leading zeros are ambiguous
+      no longer accepts any leading zeros in IPv4 address
-      and interpreted as octal notation by some libraries. For
+      strings. Leading zeros are ambiguous and interpreted as
-      example the legacy function socket.inet_aton() treats
+      octal notation by some libraries. For example the legacy
-      leading zeros as octal notatation. glibc implementation of
+      function socket.inet_aton() treats leading zeros as octal
-      modern inet_pton() does not accept any leading zeros. For
+      notatation. glibc implementation of modern inet_pton() does
-      a while the ipaddress module used to accept ambiguous
+      not accept any leading zeros. For a while the ipaddress
-      leading zeros.
+      module used to accept ambiguous leading zeros.
     - bpo-43075: Fix Regular Expression Denial of Service (ReDoS)
       vulnerability in urllib.request.AbstractBasicAuthHandler.
       The ReDoS-vulnerable regex has quadratic worst-case

python39.spec

@@ -53,7 +53,7 @@
 # Will do the /usr/bin/python3 and all the core links
 %define         primary_interpreter 0
 # We don't process beta signs well
-%define         folderversion 3.9.5
+%define         folderversion 3.9.6
 %define         tarname    Python-%{tarversion}
 %define         sitedir         %{_libdir}/python%{python_version}
 # three possible ABI kinds: m - pymalloc, d - debug build; see PEP 3149
@@ -88,7 +88,7 @@
 %bcond_without profileopt
 %endif
 Name:           %{python_pkg_name}%{psuffix}
-Version:        3.9.5
+Version:        3.9.6
 Release:        0
 Summary:        Python 3 Interpreter
 License:        Python-2.0
@@ -145,10 +145,6 @@ Patch33:        no-skipif-doctests.patch
 # PATCH-FIX-SLE skip-test_pyobject_freed_is_freed.patch mcepl@suse.com
 # skip a test failing on SLE-15
 Patch34:        skip-test_pyobject_freed_is_freed.patch
-# PATCH-FIX-UPSTREAM bpo44426-complex-keyword-sphinx.patch bpo#44426 mcepl@suse.com
-# Use of 'complex' as a C variable name confuses Sphinx; change it to 'num'
-# The same goes for 'default', which I had to change to 'def_size'
-Patch35:        bpo44426-complex-keyword-sphinx.patch
 BuildRequires:  autoconf-archive
 BuildRequires:  automake
 BuildRequires:  fdupes
@@ -395,7 +391,6 @@ other applications.
 %if 0%{?sle_version} && 0%{?sle_version} <= 150300
 %patch34 -p1
 %endif
-%patch35 -p1
 
 # drop Autoconf version requirement
 sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac

subprocess-raise-timeout.patch

@@ -1,6 +1,6 @@
 --- a/Lib/test/test_subprocess.py
 +++ b/Lib/test/test_subprocess.py
-@@ -252,7 +252,8 @@ class ProcessTestCase(BaseTestCase):
+@@ -253,7 +253,8 @@ class ProcessTestCase(BaseTestCase):
                       "time.sleep(3600)"],
                      # Some heavily loaded buildbots (sparc Debian 3.x) require
                      # this much time to start and print.