---
- branch: MAIN
  date: Wed Apr  7 14:57:49 UTC 2010
  files:
  - new: '1.26'
    old: '1.25'
    path: pkgsrc/lang/python25/Makefile
    pathrev: pkgsrc/lang/python25/Makefile@1.26
    type: modified
  - new: '1.13'
    old: '1.12'
    path: pkgsrc/lang/python25/distinfo
    pathrev: pkgsrc/lang/python25/distinfo@1.13
    type: modified
  id: 20100407T145749Z.005bcfbd7377fea13808a68c97c1c8b98ce2923d
  log: |
    Update to 2.5.5, a minor security fix release with very few changes relative to 2.5.4.

    (ok to update during freeze by wiz@)

    Extension Modules
    -----------------

    - expat: Fix DoS via XML document with malformed UTF-8 sequences
      (CVE_2009_3560).

    - expat: Fix DoS via malformed XML (CVE-2009-3720).

    Core and builtins
    -----------------

    - Issue #6990: Fix threading.local subclasses leaving old state around
      after a reference cycle GC which could be recycled by new locals.

    Library
    -------

    - Issue #7403: logging: Fixed possible race condition in lock creation.

    - Issue #5068: Fixed the tarfile._BZ2Proxy.read() method that would loop
      forever on incomplete input. That caused tarfile.open() to hang when used
      with mode 'r' or 'r:bz2' and a fileobj argument that contained no data or
      partial bzip2 compressed data.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/lang/python25'
  unixtime: '1270652269'
  user: gdt