From: Thomas Klausner <wiz@netbsd.org>
Subject: CVS commit: pkgsrc/lang/python23
To: pkgsrc-changes@NetBSD.org
Reply-To: wiz@netbsd.org
Message-Id: <20081110194147.EE530175D0@cvs.netbsd.org>
Date: Mon, 10 Nov 2008 19:41:47 +0000 (UTC)
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: list


Module Name:	pkgsrc
Committed By:	wiz
Date:		Mon Nov 10 19:41:47 UTC 2008

Modified Files:
	pkgsrc/lang/python23: Makefile Makefile.common PLIST.common distinfo
	pkgsrc/lang/python23/patches: patch-ah patch-ec

Log Message:
Update to 2.3.7:

Python 2.3 is now well and truly in bugfix-only mode; no new features
are being added, and only security critical bugs have been fixed.
This release addresses a number of cases interpreter might have
crashed in certain boundary conditions.

What's New in Python 2.3.7?
===========================

*Release date: 11-Mar-2008*

What's New in Python 2.3.7c1?
===========================

*Release date: 02-Mar-2008*

Core and builtins
-----------------

- Added checks for integer overflows, contributed by Google. Some are
  only available if asserts are left in the code, in cases where they
  can't be triggered from Python code.

What's New in Python 2.3.6?
===========================

*Release date: 01-NOV-2006*

What's New in Python 2.3.6c1?
=============================

*Release date: 25-OCT-2006*

Core and builtins
-----------------

- Patch #1541585: fix buffer overrun when performing repr() on
  a unicode string in a build with wide unicode (UCS-4) support.
  This is the problem described in security advisory PSF-2006-001.

Extension modules
-----------------

- Apply fix for potential heap overflow in PCRE code (CAN-2005-2491).

Library
-------

- The email package has improved RFC 2231 support, specifically for
  recognizing the difference between encoded (name*0*=<blah>) and non-encoded
  (name*0=<blah>) parameter continuations.  This may change the types of
  values returned from email.message.Message.get_param() and friends.
  Specifically in some cases where non-encoded continuations were used,
  get_param() used to return a 3-tuple of (None, None, string) whereas now it
  will just return the string (since non-encoded continuations don't have
  charset and language parts).

  Also, whereas % values were decoded in all parameter continuations, they are
  now only decoded in encoded parameter parts.


To generate a diff of this commit:
cvs rdiff -r1.39 -r1.40 pkgsrc/lang/python23/Makefile \
    pkgsrc/lang/python23/Makefile.common
cvs rdiff -r1.8 -r1.9 pkgsrc/lang/python23/PLIST.common
cvs rdiff -r1.40 -r1.41 pkgsrc/lang/python23/distinfo
cvs rdiff -r1.6 -r1.7 pkgsrc/lang/python23/patches/patch-ah
cvs rdiff -r1.1 -r1.2 pkgsrc/lang/python23/patches/patch-ec

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.