Subject: CVS commit: pkgsrc/lang/python310
From: Adam Ciarcinski
Date: 2022-09-06 21:13:24
Message id: 20220906191324.CE3D5FA90@cvs.NetBSD.org

Log Message:
python310: updated to 3.10.7

Python 3.10.7 final

Security
gh-95778: Converting between int and str in bases other than 2 (binary), 4, 8 \ 
(octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a \ 
ValueError if the number of digits in string form is above a limit to avoid \ 
potential denial of service attacks due to the algorithmic complexity. This is a \ 
mitigation for CVE-2020-10735.

This new limit can be configured or disabled by environment variable, command \ 
line flag, or sys APIs. See the integer string conversion length limitation \ 
documentation. The default limit is 4300 digits in string form.

Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback \ 
from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.

Core and Builtins
gh-96187: Fixed a bug that caused _PyCode_GetExtra to return garbage for \ 
negative indexes. Patch by Pablo Galindo
gh-95876: Fix format string in _PyPegen_raise_error_known_location that can lead \ 
to memory corruption on some 64bit systems. The function was building a tuple \ 
with i (int) instead of n (Py_ssize_t) for Py_ssize_t arguments.
gh-95605: Fix misleading contents of error message when converting an \ 
all-whitespace string to float.
gh-93592: coroutine.throw() now properly initializes the frame.f_back when \ 
resuming a stack of coroutines. This allows e.g. traceback.print_stack() to work \ 
correctly when an exception (such as CancelledError) is thrown into a coroutine.
gh-94996: ast.parse() will no longer parse function definitions with \ 
positional-only params when passed feature_version less than (3, 8). Patch by \ 
Shantanu Jain.

Library
gh-68163: Correct conversion of numbers.Rational’s to float.
gh-96159: Fix a performance regression in logging TimedRotatingFileHandler. Only \ 
check for special files when the rollover time has passed.
gh-96175: Fix unused localName parameter in the Attr class in xml.dom.minidom.
gh-95609: Update bundled pip to 22.2.2.
gh-95231: Fail gracefully if EPERM or ENOSYS is raised when loading crypt \ 
methods. This may happen when trying to load MD5 on a Linux kernel with FIPS \ 
enabled.

Documentation
gh-96098: Improve discoverability of the higher level concurrent.futures module \ 
by providing clearer links from the lower level threading and multiprocessing \ 
modules.
gh-95789: Update the default RFC base URL from deprecated tools.ietf.org to \ 
datatracker.ietf.org
gh-91207: Fix stylesheet not working in Windows CHM htmlhelp docs. Contributed \ 
by C.A.M. Gerlach.
bpo-47115: The documentation now lists which members of C structs are part of \ 
the Limited API/Stable ABI.

Tests
gh-95243: Mitigate the inherent race condition from using find_unused_port() in \ 
testSockName() by trying to find an unused port a few times before failing. \ 
Patch by Ross Burton.

Build
gh-94682: Build and test with OpenSSL 1.1.1q

IDLE
gh-65802: Document handling of extensions in Save As dialogs.
gh-95191: Include prompts when saving Shell (interactive input and output).

Files:
RevisionActionfile
1.16modifypkgsrc/lang/python310/Makefile
1.8modifypkgsrc/lang/python310/PLIST
1.8modifypkgsrc/lang/python310/dist.mk
1.19modifypkgsrc/lang/python310/distinfo