59571a91c9
Python 3.3.6 was released on October 11, 2014. Python 3.3.6 includes fixes for a few of our previously added patches, as well as other important security-related fixes. Local changes: rename the configure patch, remove now-included patches. Upstream list of changes for this version: Core and Builtins ----------------- - Issue #22518: Fixed integer overflow issues in "backslashreplace", "xmlcharrefreplace", and "surrogatepass" error handlers. - Issue #22520: Fix overflow checking when generating the repr of a unicode object. - Issue #22519: Fix overflow checking in PyBytes_Repr. - Issue #22518: Fix integer overflow issues in latin-1 encoding. Library ------- - Issue #22517: When a io.BufferedRWPair object is deallocated, clear its weakrefs. - Issue #22419: Limit the length of incoming HTTP request in wsgiref server to 65536 bytes and send a 414 error code for higher lengths. Patch contributed by Devin Cook. - Lax cookie parsing in http.cookies could be a security issue when combined with non-standard cookie handling in some Web browsers. Reported by Sergey Bobrov. - Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths before checking for a CGI script at that path. - Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second parameter. Bug reported by Guido Vranken. - Issue #20633: Replace relative import by absolute import. - Issue #21082: In os.makedirs, do not set the process-wide umask. Note this changes behavior of makedirs when exist_ok=True. - Issue #20875: Prevent possible gzip "'read' is not defined" NameError. Patch by Claudiu Popa. - Issue #11599: When an external command (e.g. compiler) fails, distutils now prints out the whole command line (instead of just the command name) if the environment variable DISTUTILS_DEBUG is set. - Issue #4931: distutils should not produce unhelpful "error: None" messages anymore. distutils.util.grok_environment_error is kept but doc-deprecated. - Issue #20283: RE pattern methods now accept the string keyword parameters as documented. The pattern and source keyword parameters are left as deprecated aliases. - Issue #21323: Fix http.server to again handle scripts in CGI subdirectories, broken by the fix for security issue #19435. Patch by Zach Byrne. Tests ----- - Issue #17752: Fix distutils tests when run from the installed location. - Issue #20946: Correct alignment assumptions of some ctypes tests. - Issue #20939: Fix test_geturl failure in test_urllibnet due to new redirect of http://www.python.org/ to https://www.python.org.
8 lines
304 B
Makefile
8 lines
304 B
Makefile
# $NetBSD: dist.mk,v 1.6 2015/01/01 21:39:45 he Exp $
|
|
|
|
PY_DISTVERSION= 3.3.6
|
|
DISTNAME= Python-${PY_DISTVERSION}
|
|
EXTRACT_SUFX= .tar.xz
|
|
DISTINFO_FILE= ${.CURDIR}/../../lang/python33/distinfo
|
|
PATCHDIR= ${.CURDIR}/../../lang/python33/patches
|
|
MASTER_SITES= http://www.python.org/ftp/python/${PY_DISTVERSION}/
|