Thursday, October 13, 2022

[maintainer update] Python 3.10.8

https://docs.python.org/3.10/whatsnew/changelog.html#changelog

gh-97616: Fix multiplying a list by an integer (list *= int): detect the
integer overflow when the new allocated length is close to the
maximum size. Issue reported by Jordan Limor. Patch by Victor
Stinner.

gh-97612: Fix a shell code injection vulnerability in the
get-remote-certificate.py example script. The script no longer
uses a shell to run openssl commands. Issue reported and
initial fix by Caleb Shortt. Patch by Victor Stinner.

gh-68966: The deprecated mailcap module now refuses to inject unsafe text
(filenames, MIME types, parameters) into shell
commands. Instead of using such text, it will warn and act as
if a match was not found (or for test commands, as if the test
failed).

About a dozen other non-security fixes.

ok?

--Kurt

Index: Makefile
===================================================================
RCS file: /cvs/ports/lang/python/3.10/Makefile,v
retrieving revision 1.21
diff -u -p -r1.21 Makefile
--- Makefile 8 Sep 2022 19:36:23 -0000 1.21
+++ Makefile 13 Oct 2022 17:32:36 -0000
@@ -3,7 +3,7 @@
# requirement of the PSF license, if it constitutes a change to
# Python itself.

-FULL_VERSION = 3.10.7
+FULL_VERSION = 3.10.8
SHARED_LIBS = python3.10 0.0
VERSION_SPEC = >=3.10,<3.11
PORTROACH = limit:^3\.10
Index: distinfo
===================================================================
RCS file: /cvs/ports/lang/python/3.10/distinfo,v
retrieving revision 1.6
diff -u -p -r1.6 distinfo
--- distinfo 8 Sep 2022 19:36:23 -0000 1.6
+++ distinfo 13 Oct 2022 17:32:36 -0000
@@ -1,2 +1,2 @@
-SHA256 (Python-3.10.7.tgz) = Gy5OLfaXxS02cxZml55ki+7aWUHQ+VdAqvv0Fj5cwSY=
-SIZE (Python-3.10.7.tgz) = 26006589
+SHA256 (Python-3.10.8.tgz) = 9ADD+zlLi+8SkvbcEpLF+tw1MwOaW8DD6IXz4Wc4Apo=
+SIZE (Python-3.10.8.tgz) = 26015299
Index: pkg/PLIST-tests
===================================================================
RCS file: /cvs/ports/lang/python/3.10/pkg/PLIST-tests,v
retrieving revision 1.6
diff -u -p -r1.6 PLIST-tests
--- pkg/PLIST-tests 18 Jun 2022 20:22:41 -0000 1.6
+++ pkg/PLIST-tests 13 Oct 2022 17:32:38 -0000
@@ -3928,6 +3928,16 @@ lib/python3.10/test/tracedmodules/__pyca
lib/python3.10/test/tracedmodules/__pycache__/testmod.cpython-310.opt-2.pyc
lib/python3.10/test/tracedmodules/__pycache__/testmod.cpython-310.pyc
lib/python3.10/test/tracedmodules/testmod.py
+lib/python3.10/test/typinganndata/
+lib/python3.10/test/typinganndata/__init__.py
+lib/python3.10/test/typinganndata/__pycache__/
+lib/python3.10/test/typinganndata/__pycache__/__init__.cpython-310.opt-1.pyc
+lib/python3.10/test/typinganndata/__pycache__/__init__.cpython-310.opt-2.pyc
+lib/python3.10/test/typinganndata/__pycache__/__init__.cpython-310.pyc
+lib/python3.10/test/typinganndata/__pycache__/ann_module9.cpython-310.opt-1.pyc
+lib/python3.10/test/typinganndata/__pycache__/ann_module9.cpython-310.opt-2.pyc
+lib/python3.10/test/typinganndata/__pycache__/ann_module9.cpython-310.pyc
+lib/python3.10/test/typinganndata/ann_module9.py
lib/python3.10/test/win_console_handler.py
lib/python3.10/test/xmltestdata/
lib/python3.10/test/xmltestdata/c14n-20/

No comments:

Post a Comment