Path to this page:
Subject: CVS commit: pkgsrc/lang/python310
From: Adam Ciarcinski
Date: 2022-09-06 21:13:24
Message id: 20220906191324.CE3D5FA90@cvs.NetBSD.org
Log Message:
python310: updated to 3.10.7
Python 3.10.7 final
Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 \
(octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a \
ValueError if the number of digits in string form is above a limit to avoid \
potential denial of service attacks due to the algorithmic complexity. This is a \
mitigation for CVE-2020-10735.
This new limit can be configured or disabled by environment variable, command \
line flag, or sys APIs. See the integer string conversion length limitation \
documentation. The default limit is 4300 digits in string form.
Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback \
from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.
Core and Builtins
gh-96187: Fixed a bug that caused _PyCode_GetExtra to return garbage for \
negative indexes. Patch by Pablo Galindo
gh-95876: Fix format string in _PyPegen_raise_error_known_location that can lead \
to memory corruption on some 64bit systems. The function was building a tuple \
with i (int) instead of n (Py_ssize_t) for Py_ssize_t arguments.
gh-95605: Fix misleading contents of error message when converting an \
all-whitespace string to float.
gh-93592: coroutine.throw() now properly initializes the frame.f_back when \
resuming a stack of coroutines. This allows e.g. traceback.print_stack() to work \
correctly when an exception (such as CancelledError) is thrown into a coroutine.
gh-94996: ast.parse() will no longer parse function definitions with \
positional-only params when passed feature_version less than (3, 8). Patch by \
Shantanu Jain.
Library
gh-68163: Correct conversion of numbers.Rational’s to float.
gh-96159: Fix a performance regression in logging TimedRotatingFileHandler. Only \
check for special files when the rollover time has passed.
gh-96175: Fix unused localName parameter in the Attr class in xml.dom.minidom.
gh-95609: Update bundled pip to 22.2.2.
gh-95231: Fail gracefully if EPERM or ENOSYS is raised when loading crypt \
methods. This may happen when trying to load MD5 on a Linux kernel with FIPS \
enabled.
Documentation
gh-96098: Improve discoverability of the higher level concurrent.futures module \
by providing clearer links from the lower level threading and multiprocessing \
modules.
gh-95789: Update the default RFC base URL from deprecated tools.ietf.org to \
datatracker.ietf.org
gh-91207: Fix stylesheet not working in Windows CHM htmlhelp docs. Contributed \
by C.A.M. Gerlach.
bpo-47115: The documentation now lists which members of C structs are part of \
the Limited API/Stable ABI.
Tests
gh-95243: Mitigate the inherent race condition from using find_unused_port() in \
testSockName() by trying to find an unused port a few times before failing. \
Patch by Ross Burton.
Build
gh-94682: Build and test with OpenSSL 1.1.1q
IDLE
gh-65802: Document handling of extensions in Save As dialogs.
gh-95191: Include prompts when saving Shell (interactive input and output).
Files: