Path to this page:
Subject: CVS commit: pkgsrc/lang/python34
From: Wen Heping
Date: 2017-01-19 02:25:09
Message id: 20170119012509.47E50FBA6@cvs.NetBSD.org
Log Message:
Update to 3.4.6
Upstream changes:
What's New in Python 3.4.6?
===========================
Release date: 2017-01-16
There were no changes between 3.4.6rc1 and 3.4.6 final.
What's New in Python 3.4.6rc1?
==============================
Release date: 2017-01-02
Core and Builtins
-----------------
- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
when decode astral characters. Patch by Xiang Zhang.
- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
build.
Library
-------
- Issue #28563: Fixed possible DoS and arbitrary code execution when handle
plural form selections in the gettext module. The expression parser now
supports exact syntax supported by GNU gettext.
- In the curses module, raise an error if window.getstr() or window.instr() is
passed a negative value.
- Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller.
- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.
- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.
- Issue #27758: Fix possible integer overflow in the _csv module for large record
lengths.
- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
that the script is in CGI mode.
- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
Patch by Mark Williams.
Build
-----
- Issue #28248: Update Windows build to use OpenSSL 1.0.2j.
Tests
-----
- Issue #27369: In test_pyexpat, avoid testing an error message detail that
changed in Expat 2.2.0.
Files: