Next | Query returned 54 messages, browsing 11 to 20 | Previous

History of commit frequency

CVS Commit History:


   2018-02-05 18:35:12 by Adam Ciarcinski | Files touched by this commit (6) | Package updated
Log message:
python34: updated to 3.4.8

3.4.8:
This is a bug-fix release.
   2017-12-13 13:54:57 by Jonathan Perkin | Files touched by this commit (4)
Log message:
python34: Disable libpython3.so.

This is a useless library (we've built it incorrectly for a long time so it
contains no valid symbols) that only creates CONFLICTS with other python3
packages.  No objection on tech-pkg.  Bump PKGREVISION.
   2017-11-22 20:16:20 by Benny Siegert | Files touched by this commit (3)
Log message:
ChromeOS support for the older Python versions.
   2017-11-01 22:51:22 by Thomas Klausner | Files touched by this commit (8)
Log message:
python*: remove patch for py_curses.h that doesn't make sense to me

(nor upstream)

If this is still needed, please explain it. Thanks.
   2017-09-03 10:53:18 by Thomas Klausner | Files touched by this commit (165)
Log message:
Follow some redirects.
   2017-08-14 11:20:00 by Adam Ciarcinski | Files touched by this commit (2)
Log message:
Python 3.4.7:

Security
* bpo-29591: Update expat copy from 2.1.1 to 2.2.0 to get fixes of CVE-2016-0718 \ 
and CVE-2016-4472. See https://sourceforge.net/p/expat/bugs/537/ for more \ 
information.
* bpo-30694: Upgrade expat copy from 2.2.0 to 2.2.1 to get fixes of multiple \ 
security vulnerabilities including: CVE-2017-9233 (External entity infinite loop \ 
DoS), CVE-2016-9063 (Integer overflow, re-fix), CVE-2016-0718 (Fix regression \ 
bugs from 2.2.0’s fix to CVE-2016-0718) and CVE-2012-0876 (Counter hash \ 
flooding with SipHash). Note: the CVE-2016-5300 (Use os- specific entropy \ 
sources like getrandom) doesn’t impact Python, since Python already gets \ 
entropy from the OS to set the expat secret using XML_SetHashSalt().
* bpo-26657: Fix directory traversal vulnerability with http.server on Windows. \ 
This fixes a regression that was introduced in 3.3.4rc1 and 3.4.0rc1. Based on \ 
patch by Philipp Hagemeister.
* bpo-30500: Fix urllib.parse.splithost() to correctly parse fragments. For \ 
example, splithost('//127.0.0.1#@evil.com/') now correctly returns the 127.0.0.1 \ 
host, instead of treating @evil.com as the host in an authentification \ 
(login@host).
* bpo-30730: Prevent environment variables injection in subprocess on Windows. \ 
Prevent passing other invalid environment variables and command arguments.
   2017-05-30 16:04:54 by Manuel Bouyer | Files touched by this commit (10)
Log message:
Add support for NetBSD's socketcan implementation.
Tested with the example from
http://www.bencz.com/hacks/2016/07/10/python-and-socketcan/
Needs <netcan/can.h> rev 1.3 or newer.
   2017-02-01 12:47:45 by Jonathan Perkin | Files touched by this commit (3)
Log message:
Put back bdb bl3, required for the dbm module.
   2017-01-26 10:45:23 by Jonathan Perkin | Files touched by this commit (9)
Log message:
Remove obsolete bsddb bits carried over from python2.  Patch from jcea in
joyent/pkgsrc#457.
   2017-01-19 02:25:09 by Wen Heping | Files touched by this commit (4)
Log message:
Update to 3.4.6

Upstream changes:
What's New in Python 3.4.6?
===========================

Release date: 2017-01-16

There were no changes between 3.4.6rc1 and 3.4.6 final.

What's New in Python 3.4.6rc1?
==============================

Release date: 2017-01-02

Core and Builtins
-----------------

- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
  when decode astral characters.  Patch by Xiang Zhang.

- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
  build.

Library
-------

- Issue #28563: Fixed possible DoS and arbitrary code execution when handle
  plural form selections in the gettext module.  The expression parser now
  supports exact syntax supported by GNU gettext.

- In the curses module, raise an error if window.getstr() or window.instr() is
  passed a negative value.

- Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller.

- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

- Issue #27758: Fix possible integer overflow in the _csv module for large record
  lengths.

- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
  HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
  that the script is in CGI mode.

- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
  Patch by Mark Williams.

Build
-----

- Issue #28248: Update Windows build to use OpenSSL 1.0.2j.

Tests
-----

- Issue #27369: In test_pyexpat, avoid testing an error message detail that
  changed in Expat 2.2.0.

Next | Query returned 54 messages, browsing 11 to 20 | Previous