main/python3: security upgrade to 3.6.5 (CVE-2018-1060, CVE-2018-1061)

Fixes #9270

1 files changed, 9 insertions, 3 deletions

diff --git a/main/python3/APKBUILD b/main/python3/APKBUILD
index 2f50988d5c..d2cc4bb1ab 100644
--- a/main/python3/APKBUILD
+++ b/main/python3/APKBUILD
@@ -2,9 +2,10 @@
 # Contributor: Kiyoshi Aman <kiyoshi.aman@gmail.com>
 
 pkgname=python3
-pkgver=3.6.1
+# the python2-tkinter's pkgver needs to be synchronized with this.
+pkgver=3.6.5
 _basever="${pkgver%.*}"
-pkgrel=3
+pkgrel=0
 pkgdesc="A high-level scripting language"
 url="http://www.python.org"
 arch="all"
@@ -22,6 +23,11 @@ source="http://www.python.org/ftp/python/$pkgver/Python-$pkgver.tar.xz
         "
 builddir="$srcdir/Python-$pkgver"
 
+# secfixes
+#   3.6.5-r0:
+#     - CVE-2018-1060
+#     - CVE-2018-1061
+
 prepare() {
         default_prepare || return 1
 
@@ -100,6 +106,6 @@ wininst() {
                 "$subpkgdir"/usr/lib/python$_basever/distutils/command
 }
 
-sha512sums="8605fb7019386fec227d4b06d06f00ae500a8a89df289bfe6141bb56196c75483a60cc0ee553930742b31cefce68add5ccf226e0f27b7b915f5026d597e1ac29  Python-3.6.1.tar.xz
+sha512sums="6b26fcd296b9bd8e67861eff10d14db7507711ddba947288d16d6def53135c39326b7f969c04bb2b2993f924d9e7ad3f5c5282a3915760bc0885cf0a8ea5eb51  Python-3.6.5.tar.xz
 ab8eaa2858d5109049b1f9f553198d40e0ef8d78211ad6455f7b491af525bffb16738fed60fc84e960c4889568d25753b9e4a1494834fea48291b33f07000ec2  musl-find_library.patch
 37b6ee5d0d5de43799316aa111423ba5a666c17dc7f81b04c330f59c1d1565540eac4c585abe2199bbed52ebe7426001edb1c53bd0a17486a2a8e052d0f494ad  fix-xattrs-glibc.patch"