2015-03-16 14:53:05 by Tobias Nygren | Files touched by this commit (5) |
Log message:
Fix a MAKE_JOBS safety problem. In the recipe for Python/importlib.h it
launches a submake for _freeze_importlib before all the object files have
been compiled. List $(LIBRARY_OBJS_OMIT_FROZEN) as dependencies to make it
wait until it is safe to launch the submake.
Should fix occasional errors of the sort:
Python/Python-ast.o: file not recognized: File truncated
*** [Modules/_freeze_importlib] Error code 1
|
2015-01-22 12:09:18 by Sevan Janiyan | Files touched by this commit (2) |
Log message:
Like the other versions of Python available in our tree, do not trim the library
name on FreeBSD
Resolves packing issue which causes the package to fail
|
2015-01-11 15:07:48 by Benny Siegert | Files touched by this commit (2) |
Log message:
Make python33 and 34 build under Mac OS X by copying over compat hack from
python27. From J. Lewis Muir.
Note that the correct way to solve this is to do this in the Darwin
specific config files, but until that has landed, this at least fixes the
build.
|
2015-01-06 10:51:51 by Havard Eidnes | Files touched by this commit (1) |
Log message:
Tobias Nygren reports this needs MAKE_JOBS_SAFE=no -- make it so.
|
2015-01-01 22:39:45 by Havard Eidnes | Files touched by this commit (11) |
Log message:
Update to 3.3.6.
Python 3.3.6 was released on October 11, 2014.
Python 3.3.6 includes fixes for a few of our previously added patches,
as well as other important security-related fixes. Local changes:
rename the configure patch, remove now-included patches.
Upstream list of changes for this version:
Core and Builtins
-----------------
- Issue #22518: Fixed integer overflow issues in "backslashreplace",
"xmlcharrefreplace", and "surrogatepass" error handlers.
- Issue #22520: Fix overflow checking when generating the repr of a unicode
object.
- Issue #22519: Fix overflow checking in PyBytes_Repr.
- Issue #22518: Fix integer overflow issues in latin-1 encoding.
Library
-------
- Issue #22517: When a io.BufferedRWPair object is deallocated, clear its
weakrefs.
- Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
65536 bytes and send a 414 error code for higher lengths. Patch contributed
by Devin Cook.
- Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers. Reported by
Sergey Bobrov.
- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths
before checking for a CGI script at that path.
- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second
parameter. Bug reported by Guido Vranken.
- Issue #20633: Replace relative import by absolute import.
- Issue #21082: In os.makedirs, do not set the process-wide umask. Note this
changes behavior of makedirs when exist_ok=True.
- Issue #20875: Prevent possible gzip "'read' is not defined" NameError.
Patch by Claudiu Popa.
- Issue #11599: When an external command (e.g. compiler) fails, distutils now
prints out the whole command line (instead of just the command name) if the
environment variable DISTUTILS_DEBUG is set.
- Issue #4931: distutils should not produce unhelpful "error: None" \
messages
anymore. distutils.util.grok_environment_error is kept but doc-deprecated.
- Issue #20283: RE pattern methods now accept the string keyword parameters
as documented. The pattern and source keyword parameters are left as
deprecated aliases.
- Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,
broken by the fix for security issue #19435. Patch by Zach Byrne.
Tests
-----
- Issue #17752: Fix distutils tests when run from the installed location.
- Issue #20946: Correct alignment assumptions of some ctypes tests.
- Issue #20939: Fix test_geturl failure in test_urllibnet due to
new redirect of http://www.python.org/ to https://www.python.org.
|
2014-07-02 14:53:52 by Havard Eidnes | Files touched by this commit (5) |
Log message:
Add a fix, test-case and note for directory traversal vulnerability, ref.
http://bugs.python.org/issue21766
Bump PKGREVISION.
|
2014-06-11 08:03:10 by Richard PALO | Files touched by this commit (3) |
Log message:
avoid conflicting declaration of gethostname on SunOS
|
2014-05-31 14:46:29 by Ryo ONODERA | Files touched by this commit (3) |
Log message:
Fix _multiprocessing import under DragonFly/amd64, fix packaging
|
2014-05-15 14:33:10 by Thomas Klausner | Files touched by this commit (3) |
Log message:
Add fix for CVE-2014-2667.
Bump PKGREVISION.
|
2014-05-10 06:32:36 by OBATA Akio | Files touched by this commit (2) |
Log message:
fixes again, for the case pkgsrc openssl is prefered than builtin old openssl.
|