Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (58m)  pkgsrc-2024Q1 (11d)  pkgsrc-2023Q4 (58d)  pkgsrc-2023Q2 (90d)  pkgsrc-2023Q3 (170d) 

2024-05-28 17:15:12 UTC Now

2012-04-14 10:47:19 UTC MAIN commitmail json YAML

pkgsrc/lang/python26/Makefile@1.47 / diff
pkgsrc/lang/python26/dist.mk@1.3 / diff
pkgsrc/lang/python26/distinfo@1.45 / diff
pkgsrc/lang/python26/patches/patch-CVE-2012-0845 deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Doc_library_sys.rst deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Doc_reference_datamodel.rst deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Doc_using_cmdline.rst deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Include_object.h deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Include_pydebug.h deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Include_pythonrun.h deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_os.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_cmd_line.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_hash.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_os.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_set.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_support.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_symtable.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Lib_test_test_sys.py deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Misc_NEWS deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Misc_python.man deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Modules_main.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Modules_posixmodule.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Objects_bufferobject.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Objects_object.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Objects_stringobject.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Objects_unicodeobject.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-PCbuild_pythoncore.vcproj deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Python_pythonrun.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Python_random.c deleted
pkgsrc/lang/python26/patches/patch-CVE-2012-1150-Python_sysmodule.c deleted
pkgsrc/lang/python26/patches/patch-au@1.9 / diff

Update python26 to 2.6.8.
(CVE-2012-0845, CVE-2012-1150 are alredy fixed in pkgsrc,
CVE-2012-0876 is not affect to pkgsrc, using external expat)

What's New in Python 2.6.8?
===========================

*Release date: 2012-04-10*

No changes since 2.6.8rc2.

What's New in Python 2.6.8 rc 2?
================================

*Release date: 2012-03-17*

Library
-------

- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash
  table internal to the pyexpat module's copy of the expat library to avoid a
  denial of service due to hash collisions.  Patch by David Malcolm with some
  modifications by the expat project.

What's New in Python 2.6.8 rc 1?
================================

*Release date: 2012-02-23*

Core and Builtins
-----------------

- Issue #13703: oCERT-2011-003 CVE-2012-1150: add -R command-line
  option and PYTHONHASHSEED environment variable, to provide an opt-in
  way to protect against denial of service attacks due to hash
  collisions within the dict and set types.  Patch by David Malcolm,
  based on work by Victor Stinner.

Library
-------

- Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in
  SimpleXMLRPCServer upon malformed POST request.

- Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC
  IV attack countermeasure.

(obache)