Path to this page:
Subject: CVS commit: [pkgsrc-2016Q2] pkgsrc/lang/python34
From: Benny Siegert
Date: 2016-09-06 21:07:05
Message id: 20160906190705.7A42DFBD1@cvs.NetBSD.org
Log Message:
Pullup ticket #5091 - requested by sevan
lang/python34: security fix
Revisions pulled up:
- lang/python34/PLIST 1.7
- lang/python34/dist.mk 1.6
- lang/python34/distinfo 1.21
---
Module Name: pkgsrc
Committed By: adam
Date: Sat Jul 2 15:23:33 UTC 2016
Modified Files:
pkgsrc/lang/python34: PLIST dist.mk distinfo
Log Message:
Changes 3.4.5:
Core and Builtins
Issue 26478: Fix semantic bugs when using binary operators with dictionary \
views and tuples.
Issue 26171: Fix possible integer overflow and heap corruption in \
zipimporter.get_data().
Library
Issue 26556: Update expat to 2.1.1, fixes CVE-2015-1283.
Fix TLS stripping vulnerability in smptlib, CVE-2016-0772. Reported by Team \
Oststrom
Issue 25939: On Windows open the cert store readonly in ssl.enum_certificates.
Issue 26012: Don?t traverse into symlinks for ** pattern in \
pathlib.Path.[r]glob().
Issue 24120: Ignore PermissionError when traversing a tree with \
pathlib.Path.[r]glob(). Patch by Ulrich Petri.
Skip getaddrinfo if host is already resolved. Patch by A. Jesse Jiryu Davis.
Add asyncio.timeout() context manager.
Issue 26050: Add asyncio.StreamReader.readuntil() method. Patch by ???? ?????????.
Tests
Issue 25940: Changed test_ssl to use self-signed.pythontest.net. This avoids \
relying on svn.python.org, which recently changed root certificate.
Files: