pkgsrc/lang/python27/patches/patch-Misc_NEWS, branch pkgsrc-2014Q2 [no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2014Q2 2014-07-05T11:13:52Z Pullup ticket #4441 - requested by he 2014-07-05T11:13:52Z tron tron@pkgsrc.org 2014-07-05T11:13:52Z urn:sha1:00e6f2baa0e93eb28ae14b293d7c3fa30e633604 lang/python27: security patch Revisions pulled up: - lang/python27/distinfo 1.43 - lang/python27/patches/patch-Lib_CGIHTTPServer.py 1.1 - lang/python27/patches/patch-Lib_test_test__httpservers.py 1.1 - lang/python27/patches/patch-Misc_NEWS 1.4 --- Module Name: pkgsrc Committed By: he Date: Wed Jul 2 08:22:02 UTC 2014 Modified Files: pkgsrc/lang/python27: distinfo pkgsrc/lang/python27/patches: patch-Misc_NEWS Added Files: pkgsrc/lang/python27/patches: patch-Lib_CGIHTTPServer.py patch-Lib_test_test__httpservers.py Log Message: Apply a fix for directory-traversal vulnerability, ref. http://bugs.python.org/issue21766 Bump PKGREVISION. Add patches to fix the remaining two functions reported as being 2014-06-09T17:58:31Z he he@pkgsrc.org 2014-06-09T17:58:31Z urn:sha1:ac3ee4ba7fa57f54be184b635c97b6b04270aa5b vulnerable to CVE-2013-1752, following the general theme of overflow of line lengths. This fixes the smtp and pop functions. Taken / adapted from http://bugs.python.org/issue16041 and http://bugs.python.org/issue16042. PKGREVISION bumped. Changes 2.7.6: 2013-11-12T18:57:25Z adam adam@pkgsrc.org 2013-11-12T18:57:25Z urn:sha1:349ab1cd816b3d475f092d3c7ed7e0a366d43a34 This is a 2.7 series bugfix release. Most importantly, it resolves an issue that caused the interactive prompt to crash on OS X 10.9. It also includes numerous bugfixes over 2.7.5. patch for CVE-2013-4238 taken from 2013-08-18T13:42:14Z spz spz@pkgsrc.org 2013-08-18T13:42:14Z urn:sha1:0ad3794e19c7aadfd090dcc4614549857d142d72 http://hg.python.org/cpython/rev/bd2360476bdb