2011-04-23 10:53:53 by OBATA Akio | Files touched by this commit (19) | |
Log message:
Update python24 to 2.4.6.
What's New in Python 2.4.6?
===========================
*Release date: 19-Dec-2008*
What's New in Python 2.4.6c1?
=============================
*Release date: 13-Dec-2008*
Core and builtins
-----------------
- Issue #4469: Prevent expandtabs() on string and unicode
objects from causing a segfault when a large width is passed
on 32-bit platforms. CVE-2008-5031.
- Issue #4317: Fixed a crash in the imageop.rgb2rgb8() function.
- Issue #4230: Fix a crash when a class has a custom __getattr__ and an
__getattribute__ method that deletes the __getattr__ attribute.
- Apply security patches from Apple. CVE-2008-2315.
- Issue #2620: Overflow checking when allocating or reallocating memory
was not always being done properly in some python types and extension
modules. PyMem_MALLOC, PyMem_REALLOC, PyMem_NEW and PyMem_RESIZE have
all been updated to perform better checks and places in the code that
would previously leak memory on the error path when such an allocation
failed have been fixed.
- Issue #1179: Fix CVE-2007-4965 and CVE-2008-1679, multiple integer
overflows in the imageop and rgbimgmodule modules.
- Issue #2586: Fix CVE-2008-1721, zlib crash from
zlib.decompressobj().flush(val) when val is not positive.
- Issues #2588, #2589: Fix potential integer underflow and overflow
conditions in the PyOS_vsnprintf C API function. CVE-2008-3144.
- Issue #2587: In the C API, PyString_FromStringAndSize() takes a signed size
parameter but was not verifying that it was greater than zero. Values
less than zero will now raise a SystemError and return NULL to indicate a
bug in the calling C code. CVE-2008-1887.
- Security Issue #2: imageop did not validate arguments correctly and could
segfault as a result. CVE-2008-4864.
Extension Modules
-----------------
Library
-------
Tests
-----
Build
-----
Tools/Demos
-----------
- Tools/faqwiz/move-faqwiz.sh: Fix unsecure use of temporary files.
|
2011-04-23 08:06:30 by OBATA Akio | Files touched by this commit (1) |
Log message:
remove tail enmty line.
|
2011-04-23 08:04:37 by OBATA Akio | Files touched by this commit (1) |
Log message:
move extra buildlinks into the guard.
|
2011-04-22 15:45:23 by OBATA Akio | Files touched by this commit (2234) |
Log message:
recursive bump from gettext-lib shlib bump.
|
2011-04-15 19:23:24 by Matthias Drochner | Files touched by this commit (4) |
Log message:
comment out BUILDLINK_INCDIRS/BUILDLINK_LIBDIRS/BUILDLINK_TRANSFORM
definitions which do things behind the client pkgs back, in particular
manipulate the library search path
It is well possible that this causes some fallout, but I hope it
will be small and can be dealt with on a per-pkg basis.
(partly) suggested by Mark Davies on tech-pkg
|
2011-02-28 15:53:10 by Thomas Klausner | Files touched by this commit (169) |
Log message:
Reset maintainer for retired developers.
|
2010-09-17 09:11:42 by OBATA Akio | Files touched by this commit (6) | |
Log message:
Share distfile related information for each python variants with
srcdist.mk to make update simplicity.
|
2010-01-17 13:02:58 by Thomas Klausner | Files touched by this commit (724) | |
Log message:
Recursive PKGREVISION bump for jpeg update to 8.
|
2009-09-19 11:30:41 by OBATA Akio | Files touched by this commit (2) |
Log message:
Fixes module names in disabled_module_list
* "bsddb" does not exists, probably removed/renamed before/in Python24.
* "mpz" was removed in Python24.
|
2009-09-12 19:47:17 by Matthias Drochner | Files touched by this commit (3) |
Log message:
remove assignments to the LIBS env var -- this should have been done
earlier, but there became no-ops due to my change to db4/bl3 and thus
didn't do harm. Now that part of that change was backed out they became
harmful again and thus need to go.
|