From 543e9e715cf3dbf017bd8f4cb1adb5700de58d05 Mon Sep 17 00:00:00 2001 From: Juan RP Date: Wed, 3 Jul 2019 19:46:37 +0200 Subject: [PATCH] python3: update to 3.6.9. --- srcpkgs/python3/patches/CVE-2019-5010.patch | 32 --------------------- srcpkgs/python3/template | 6 ++-- 2 files changed, 3 insertions(+), 35 deletions(-) delete mode 100644 srcpkgs/python3/patches/CVE-2019-5010.patch diff --git a/srcpkgs/python3/patches/CVE-2019-5010.patch b/srcpkgs/python3/patches/CVE-2019-5010.patch deleted file mode 100644 index a3b1579bb12..00000000000 --- a/srcpkgs/python3/patches/CVE-2019-5010.patch +++ /dev/null @@ -1,32 +0,0 @@ -commit 216a4d83c3b72f4fdcd81b588dc3f42cc461739a -Author: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> -Date: Tue Jan 15 17:16:36 2019 -0800 - - bpo-35746: Fix segfault in ssl's cert parser (GH-11569) (GH-11573) - - Fix a NULL pointer deref in ssl module. The cert parser did not handle CRL - distribution points with empty DP or URI correctly. A malicious or buggy - certificate can result into segfault. - - Signed-off-by: Christian Heimes - - https://bugs.python.org/issue35746 - (cherry picked from commit a37f52436f9aa4b9292878b72f3ff1480e2606c3) - - Co-authored-by: Christian Heimes - -diff --git Modules/_ssl.c Modules/_ssl.c -index a188d6a729..7365630a5e 100644 ---- Modules/_ssl.c -+++ Modules/_ssl.c -@@ -1338,6 +1338,10 @@ _get_crl_dp(X509 *certificate) { - STACK_OF(GENERAL_NAME) *gns; - - dp = sk_DIST_POINT_value(dps, i); -+ if (dp->distpoint == NULL) { -+ /* Ignore empty DP value, CVE-2019-5010 */ -+ continue; -+ } - gns = dp->distpoint->name.fullname; - - for (j=0; j < sk_GENERAL_NAME_num(gns); j++) { diff --git a/srcpkgs/python3/template b/srcpkgs/python3/template index 400b8a519f2..336b6a4d4a1 100644 --- a/srcpkgs/python3/template +++ b/srcpkgs/python3/template @@ -3,15 +3,15 @@ # THIS PKG MUST BE SYNCHRONIZED WITH "srcpkgs/python3-tkinter". # pkgname=python3 -version=3.6.8 -revision=4 +version=3.6.9 +revision=1 wrksrc="Python-${version}" short_desc="Interpreted, interactive, object-oriented programming language (${version%.*} series)" maintainer="Juan RP " homepage="https://www.python.org" license="Python-2.0" distfiles="https://www.python.org/ftp/python/${version}/Python-${version}.tar.xz" -checksum=35446241e995773b1bed7d196f4b624dadcadc8429f26282e756b2fb8a351193 +checksum=5e2f5f554e3f8f7f0296f7e73d8600c4e9acbaee6b2555b83206edf5153870da pycompile_dirs="usr/lib/python${version%.*}" hostmakedepends="pkg-config"