Subject: CVS commit: pkgsrc/lang/python34
From: Wen Heping
Date: 2017-01-19 02:25:09
Message id: 20170119012509.47E50FBA6@cvs.NetBSD.org

Log Message:
Update to 3.4.6

Upstream changes:
What's New in Python 3.4.6?
===========================

Release date: 2017-01-16

There were no changes between 3.4.6rc1 and 3.4.6 final.

What's New in Python 3.4.6rc1?
==============================

Release date: 2017-01-02

Core and Builtins
-----------------

- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
  when decode astral characters.  Patch by Xiang Zhang.

- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
  build.

Library
-------

- Issue #28563: Fixed possible DoS and arbitrary code execution when handle
  plural form selections in the gettext module.  The expression parser now
  supports exact syntax supported by GNU gettext.

- In the curses module, raise an error if window.getstr() or window.instr() is
  passed a negative value.

- Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller.

- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

- Issue #27758: Fix possible integer overflow in the _csv module for large record
  lengths.

- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
  HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
  that the script is in CGI mode.

- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
  Patch by Mark Williams.

Build
-----

- Issue #28248: Update Windows build to use OpenSSL 1.0.2j.

Tests
-----

- Issue #27369: In test_pyexpat, avoid testing an error message detail that
  changed in Expat 2.2.0.

Files:
RevisionActionfile
1.18modifypkgsrc/lang/python34/Makefile
1.8modifypkgsrc/lang/python34/PLIST
1.7modifypkgsrc/lang/python34/dist.mk
1.24modifypkgsrc/lang/python34/distinfo