Subject: CVS commit: pkgsrc/net/py-rpyc
From: Adam Ciarcinski
Date: 2024-04-10 14:51:33
Message id: 20240410125133.6EF60FA2C@cvs.NetBSD.org

Log Message:
py-rpyc: updated to 6.0.0

6.0.0

Resolves security issue that results in RCE. The fix breaks backwards \ 
compatibility for those that rely on the __array__ attribute used by numpy. This \ 
RCE is only exploitable when the server-side gets the attribute __array__ and \ 
calls it (e.g., np.array(x)). This issues effects all versions since major \ 
release 4.

5.3.1

Resolved timeout issue that was introduced in 5.2.1
and
While the fix for thread binding is not backwards compatible, it only impacts \ 
people using an experimental feature. Hence, I did a patch version bump.

5.3.0

Support for Python 3.11 is available after teleportation bug fix
Experimental support for threading is added (default is disabled for now)
Resolved server-side exceptions due to the logic for checking if a name is in \ 
ModuleNamespace
Improved documentation on the life-cycle of a netref/proxy-object

5.2.3

rpyc_classic.py and rpyc_registry.py can now be resolved without the suffix as well.

5.2.1

Added support for using decorators to expose methods
Allow BgServingThread serve and sleep intervals to be customized
Avoid redefining hasattr_static on every _check_attr call
Updated SSL context usage to avoid deprecated aspects and changes
Add a configurable timeout on the zero deploy close method
Fixed –mode CLI argument for rpyc_registry
Fixed propagation of AttributeErrors raised by exposed descriptors
Allow filtering by host on list_services
and
Some work around race conditions but proper fix is rather involved
5.2.0 was skipped due to PyPi not allowing file name reuse

5.1.0

Add types.MappingProxyType to _builtin_types
Updated documentation
Fixed spradic dealock issues from wait within AsyncResult
Fixed chained Classic RPyC connections
Added ability to list Registry services
Fixed bug that prevented RPyC from running on systems without SSL
Fixed unexpected behavior with respect to auto_register
Fixed propagation of chunk_size parameter for download_dir

5.0.1

Fixed unexpected behavior when using inspect.isfunction
Now prevents installation of RPyC on unsupported versions of python

5.0.0

Date: 12.26.2020

Backwards Incompatible

RPyC 5.0.0 cannot teleport functions to earlier versions
Deprecated Python 2 support to coincide with it’s EOL
Improvements

Server hostname default supports IPv4 and IPv6 by using the wildcard address
Added docker/docker-compose.yml for Python 3.6, 3.7, 3.8, 3.9, and 3.10 \ 
containers to improve local workflow
Fixed pickle failure on windows for connect_multiprocess and connect_thread
Fixed teleport function behavior for keyword-only arguments with default
Improved documentation on custom exception handling
Fixed IPv6 support for server
Added a simple asynchronous service example

Files:
RevisionActionfile
1.9modifypkgsrc/net/py-rpyc/Makefile
1.6modifypkgsrc/net/py-rpyc/PLIST
1.8modifypkgsrc/net/py-rpyc/distinfo
1.1addpkgsrc/net/py-rpyc/ALTERNATIVES