---
- branch: MAIN
  date: Thu Jan 19 01:25:09 UTC 2017
  files:
  - new: '1.18'
    old: '1.17'
    path: pkgsrc/lang/python34/Makefile
    pathrev: pkgsrc/lang/python34/Makefile@1.18
    type: modified
  - new: '1.8'
    old: '1.7'
    path: pkgsrc/lang/python34/PLIST
    pathrev: pkgsrc/lang/python34/PLIST@1.8
    type: modified
  - new: '1.7'
    old: '1.6'
    path: pkgsrc/lang/python34/dist.mk
    pathrev: pkgsrc/lang/python34/dist.mk@1.7
    type: modified
  - new: '1.24'
    old: '1.23'
    path: pkgsrc/lang/python34/distinfo
    pathrev: pkgsrc/lang/python34/distinfo@1.24
    type: modified
  id: 20170119T012509Z.e19abf3152608d07dffdc91e6ae268f893b6708f
  log: |
    Update to 3.4.6

    Upstream changes:
    What's New in Python 3.4.6?
    ===========================

    Release date: 2017-01-16

    There were no changes between 3.4.6rc1 and 3.4.6 final.

    What's New in Python 3.4.6rc1?
    ==============================

    Release date: 2017-01-02

    Core and Builtins
    -----------------

    - Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
      when decode astral characters.  Patch by Xiang Zhang.

    - Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
      build.

    Library
    -------

    - Issue #28563: Fixed possible DoS and arbitrary code execution when handle
      plural form selections in the gettext module.  The expression parser now
      supports exact syntax supported by GNU gettext.

    - In the curses module, raise an error if window.getstr() or window.instr() is
      passed a negative value.

    - Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller.

    - Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

    - Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

    - Issue #27758: Fix possible integer overflow in the _csv module for large record
      lengths.

    - Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
      HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
      that the script is in CGI mode.

    - Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
      Patch by Mark Williams.

    Build
    -----

    - Issue #28248: Update Windows build to use OpenSSL 1.0.2j.

    Tests
    -----

    - Issue #27369: In test_pyexpat, avoid testing an error message detail that
      changed in Expat 2.2.0.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/lang/python34'
  unixtime: '1484789109'
  user: wen