Next | Query returned 50 messages, browsing 11 to 20 | Previous

History of commit frequency

CVS Commit History:


   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-10-24 11:12:37 by Thomas Klausner | Files touched by this commit (6)
Log message:
python*: explicitly add --with-system-expat

To make sure expat module is linked against expat library.

Bump PKGREVISION.
   2023-10-23 10:50:36 by Thomas Klausner | Files touched by this commit (6)
Log message:
python*: add SUPERSEDES
   2023-10-23 08:36:01 by Thomas Klausner | Files touched by this commit (22)
Log message:
python*: include some standard modules in the base Python package

As proposed on tech-pkg

Bump PKGREVISION.
   2023-08-25 10:26:49 by Adam Ciarcinski | Files touched by this commit (4) | Package updated
Log message:
python310 py310-html-docs: updated to 3.10.13

Python 3.10.13

Security

gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a \ 
bypass of the TLS handshake and included protections (like certificate \ 
verification) and treating sent unencrypted data as if it were post-handshake \ 
TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. \ 
Patch by Gregory P. Smith.

Library

gh-107845: tarfile.data_filter() now takes the location of symlinks into account \ 
when determining their target, so it will no longer reject some valid tarballs \ 
with LinkOutsideDestinationError.

Tools/Demos

gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, \ 
3.0.10, and 3.1.2.

C API

gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data: *consumed was \ 
not set.
   2023-08-15 16:39:08 by Amitai Schleier | Files touched by this commit (4)
Log message:
python3*: when linking with pkgsrc gettext, pass -lintl. When linking
with builtin gettext, NFCI. Fixes PREFER_PKGSRC=gettext-lib builds on at
least NetBSD 9 and 10.
   2023-06-29 03:32:17 by Taylor R Campbell | Files touched by this commit (1)
Log message:
python310: Fix env vars for sysconfig data when cross-compiling.

Paves the way to cross-version-compiling (e.g., netbsd9 building
packages for netbsd10) and cross-OS-compilation (e.g., macOS building
packages for NetBSD).
   2023-06-27 12:35:30 by Taylor R Campbell | Files touched by this commit (12)
Log message:
python: Override sys.platform with PY_PLATNAME when cross-compiling.

For this purpose, factor the PY_PLATNAME definition out into a new
lang/pythonNN/platname.mk file.  It's not the same for 2.x and 3.x;
perhaps we could factor it out further into a single 2.x vs 3.x
conditional but this is a more mechanical change that makes it easier
to audit for now.
   2023-06-27 12:29:58 by Taylor R Campbell | Files touched by this commit (3)
Log message:
lang/python39, 310, 311: Handle TOOLBASE/LOCALBASE split.
   2023-06-07 15:26:54 by Adam Ciarcinski | Files touched by this commit (5) | Package updated
Log message:
python310 py310-html-docs: updated to 3.10.12

Python 3.10.12

Security
gh-103142: The version of OpenSSL used in our binary builds has been upgraded to \ 
1.1.1u to address several CVEs.
gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory \ 
traversal based on the input if no out_file was specified.
gh-104049: Do not expose the local on-disk location in directory indexes \ 
produced by http.client.SimpleHTTPRequestHandler.
gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space \ 
characters following the specification for URLs defined by WHATWG in response to \ 
CVE-2023-24329. Patch by Illia Volochii.

Library
gh-103935: Use io.open_code() for files to be executed instead of raw open()
gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have \ 
a new a filter argument that allows limiting tar features than may be surprising \ 
or dangerous, such as creating files outside the destination directory. See \ 
Extraction filters for details.

Documentation
gh-89412: Add missing documentation for the end_lineno and end_offset attributes \ 
of the traceback.TracebackException class.

Build
gh-103262: Fixes Windows installer build to work with latest compilers.

Next | Query returned 50 messages, browsing 11 to 20 | Previous