Path to this page:
Subject: CVS commit: pkgsrc/lang/python25
From: OBATA Akio
Date: 2011-06-04 07:08:20
Message id: 20110604050820.49407175DD@cvs.netbsd.org
Log Message:
Update python25 to 2.5.6.
(contains already fixed issues, #11662 patch-b{a,b}, #8674,#7673 patch-bc)
What's New in Python 2.5.6?
===========================
*Release date: 26-May-2011*
What's New in Python 2.5.6c1?
=============================
*Release date: 17-Apr-2011*
Library
-------
- Issue #11442: Add a charset parameter to the Content-type in SimpleHTTPServer
to avoid XSS attacks.
- Issue #11662: Make urllib and urllib2 ignore redirections if the
scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
- Issue #8674: Fixed a number of incorrect or undefined-behaviour-inducing
overflow checks in the audioop module (CVE-2010-1634).
- Issue #7673: Fix security vulnerability (CVE-2010-2089) in the audioop
module, ensure that the input string length is a multiple of the frame size.
Files: