summaryrefslogtreecommitdiff
path: root/lang/python26
AgeCommit message (Collapse)AuthorFilesLines
2014-10-27apply patch from upstream to fix possible overflow in "buffer"drochner3-3/+19
object accesses (CVE-2014-7185) bump PKGREV
2014-05-21try to find openssl header from system inc_dirs additionally, builtin oneobache2-6/+8
may be in unusual location.
2014-04-13Redo reverted commit from obache@. Original description:bsiegert3-15/+45
Prevent to detect unwanted builtin openssl. After bump of BUILDLINK_API_DEPENDS.openssl to 1.0.1c, buitin openssl is not acceptable for various platforms.
2014-03-27fixes for readline-6.3.obache2-1/+47
backported from Python 2.7.
2014-03-27revert last change, should not be committed dureing freeze.obache3-45/+15
2014-03-27Prevent to detect unwanted builtin openssl.obache3-15/+45
After bump of BUILDLINK_API_DEPENDS.openssl to 1.0.1c, buitin openssl is not acceptable for various platforms.
2014-03-12For smtpd.py, only rename with ${PY_VER_SUFFIX} to be installed as a tool,obache6-15/+16
or rename of module name affect to other parts using this module. Noticed by Benjamin Lorenz in tech-pkg@. Additionally, set ALTERNATIVE for bin/smtpd.py.
2014-02-12Remove now unnecessary package list handling for OpenSSL 0.9.*.tron2-14/+2
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2014-02-09adopt the socket.recvfrom_into() security fix from Python-2.7drochner3-6/+23
bump PKGREV
2013-11-06Python 2.6.9 is a security-fix source-only release for Python 2.6.8, fixing ↵adam7-356/+30
several reported security issues: issue 16037, issue 16038, issue 16039, issue 16040, issue 16041, and issue 16042 (CVE-2013-1752, long lines consuming too much memory), as well as issue 14984 (security enforcement on $HOME/.netrc files), issue 16248 (code execution vulnerability in tkinter), and issue 18709 (CVE-2013-4238, SSL module handling of NULL bytes inside subjectAltName).
2013-09-10Always pass rpath argument with -Wl prefix, especially if clang is not calledjoerg3-3/+20
gcc. Bump revision.
2013-08-27Patch for CVE-2013-4238 from http://hg.python.org/cpython/raw-rev/79007c4244d6tez4-4/+343
2013-07-15* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yesryoon1-2/+1
are replaced with .include "../../devel/readline/buildlink3.mk", and USE_GNU_READLINE are removed, * .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE are replaced with .include "../../mk/readline.buildlink3.mk".
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2012-12-21Revert previous as it breaks clang. PR 47342dholland2-16/+5
2012-12-16Use -Werror=format when checking HAVE_ATTRIBUTE_FORMAT_PARSETUPLE, sodholland2-5/+21
injecting -Wall -Wno-error does not cause the test to produce the wrong answer. (If it does, the wrong information is installed in /usr/include, and ultimately provokes PR 47342.) Same as -r1.8 of python27's patch-al.
2012-10-02Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-09-15recursive bump from libffi shlib major bumpobache1-2/+2
(additionaly, reset PKGREVISION of qt4-* sub packages from base qt4 update)
2012-08-14as with python27: avoid POSIX semaphores on NetBSD, this is brokendrochner3-3/+18
at least on -current
2012-05-13fixes reverse condition usage of CHECK_BUILTIN.openssl.obache1-3/+3
2012-05-07Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)dholland1-2/+2
It turns out there were a lot of these.
2012-05-05Fix build of py26-expat against expat-2.0. Bump revision.joerg2-1/+20
2012-04-14Update python26 to 2.6.8.obache31-1468/+10
(CVE-2012-0845, CVE-2012-1150 are alredy fixed in pkgsrc, CVE-2012-0876 is not affect to pkgsrc, using external expat) What's New in Python 2.6.8? =========================== *Release date: 2012-04-10* No changes since 2.6.8rc2. What's New in Python 2.6.8 rc 2? ================================ *Release date: 2012-03-17* Library ------- - Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash table internal to the pyexpat module's copy of the expat library to avoid a denial of service due to hash collisions. Patch by David Malcolm with some modifications by the expat project. What's New in Python 2.6.8 rc 1? ================================ *Release date: 2012-02-23* Core and Builtins ----------------- - Issue #13703: oCERT-2011-003 CVE-2012-1150: add -R command-line option and PYTHONHASHSEED environment variable, to provide an opt-in way to protect against denial of service attacks due to hash collisions within the dict and set types. Patch by David Malcolm, based on work by Victor Stinner. Library ------- - Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon malformed POST request. - Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure.
2012-03-25Add a fix for the DoS vulnerability reported in CVE-2012-1150 takentron29-5/+1445
from the Python Mercurial repository.
2012-02-15add patch from Python issue#14001 to fix xmlrpc server endless loopdrochner3-3/+22
by malformed request bump PKGREV
2012-01-18Revbump after updating db5adam1-1/+2
2011-12-16On SunOS, don't ever override _XOPEN_SOURCE if it is already set.hans2-1/+16
Fixes build on SunOS with gcc>=4.6.
2011-11-08Change a unused variable referacne to a fixed string that I missed whensbd2-4/+4
coping the Mac OS X sdk filename handling. Thank to Matthias Rampke in PR#45581 for catching this.
2011-10-31Improve the gdbm_compat handling by searching any ndbm.h found for thesbd2-14/+37
string 'This file is part of GDBM' and ignoring it if it dose. Thanks to obache@ for the idea.
2011-10-28Internally, Python has a set of modules depending on "platform". Thedsainty2-7/+18
"platform" in Python terms is different for Linux kernel 2.* Vs Linux kernel 3.*. Add in support to pull in a different PLIST for Linux 3.*. Fixes build under Ubuntu 11.10. XXX Perhaps it would be cleaner to name the PLIST to match the python platform name - since we already calculate that anyway, and that is exactly what drives the contents of these PLISTs.
2011-10-18Deal with the fact that if /usr/include/ndbm.h exists on Linux it probablysbd2-7/+14
belongs to gdbm_compat. I.E. _don't_ use ndbm on Linux.
2011-10-01Debian (and therefore Ubuntu) have taken to hiding some librariesdsainty2-14/+42
awkwardly, leading to Python 2.6 failing to build. Python 2.7 builds ok, because it has been taught to deal with this. This patch retro-fits the 2.7 code into 2.6, and allows 2.6 to build on Ubuntu 11.04. Ok'd by wiz@
2011-09-30Make this build on Mac OS X Lion. Fixes PR pkg/45389.yyamano4-1/+228
It is not a leaf package, but the changes affect Mac OS X only. Test builds on 10.5/i386, 10.6/i386 (thanks tron@), 10.7/i386 and 10.7/x86_64 (thanks ryoon@).
2011-09-16Fix for intereger overflow when compiled with Clangadam1-1/+8
2011-09-14Teach configure about SunOS 5.11, preventing some pyconfig.h weirdness.hans2-5/+31
2011-09-12Fix build on MirBSD by adding the respective stanzas to configure and fixbsiegert4-11/+46
building the select module. Reviewed by Bernd Ernesti and Jörg Sonnenberger.
2011-06-04Update python26 to 2.6.7.obache5-60/+7
(CVE-2011-1521 had been fixed in pkgsrc). What's New in Python 2.6.7? =========================== *Release date: 2011-06-03* *NOTE: Python 2.6 is in security-fix-only mode. No non-security bug fixes are allowed. Python 2.6.7 and beyond will be source only releases.* * No changes since 2.6.7rc2. What's New in Python 2.6.7 rc 2? ================================ *Release date: 2011-05-20* *NOTE: Python 2.6 is in security-fix-only mode. No non-security bug fixes are allowed. Python 2.6.7 and beyond will be source only releases.* Library ------- - Issue #11662: Make urllib and urllib2 ignore redirections if the scheme is not HTTP, HTTPS or FTP (CVE-2011-1521). - Issue #11442: Add a charset parameter to the Content-type in SimpleHTTPServer to avoid XSS attacks. What's New in Python 2.6.7 rc 1? ================================ *Release date: 2011-05-06* Library ------- - Issue #9129: smtpd.py is vulnerable to DoS attacks deriving from missing error handling when accepting a new connection.
2011-05-15Recent SunOS has netpacket/packet.h, but it is not what Python expects.hans1-1/+2
Fixes build on SunOS.
2011-04-23Correct path to Python interpreter in all ".py" files to fix buildtron1-12/+3
with revision 1.26 of "pkgsrc/mk/check/check-interpreter.mk". Bump package revision because the binary package changed.
2011-04-23more replace interpreter line.obache1-1/+8
2011-04-22recursive bump from gettext-lib shlib bump.obache2-3/+4
2011-04-15comment out BUILDLINK_INCDIRS/BUILDLINK_LIBDIRS/BUILDLINK_TRANSFORMdrochner1-4/+4
definitions which do things behind the client pkgs back, in particular manipulate the library search path It is well possible that this causes some fallout, but I hope it will be small and can be dealt with on a per-pkg basis. (partly) suggested by Mark Davies on tech-pkg
2011-03-28fix a security issue, using patches from upstream:drochner4-3/+55
stricter redirect handling in urllib, to prevent redirects to eg "file://" URLs (CVE-2011-1521) bump PKGREV
2011-02-28Add fix for the information disclosure vulnerability reported in SA43463tron3-3/+100
taken from the Python SVN repository.
2011-02-05Build shared library on OpenBSD too.hiramatsu2-4/+4
2011-01-03Fix find_library_file on Darwinadam1-1/+7
2010-12-25* Remove a redundant hunk for Darwin,obache3-20/+14
* Use $(CC) for LDSHARED on NetBSD and DragonFly like any other. Fixes PR#42598 for that libpython will be linked with sufficient flags. Bump PKGREVISION.
2010-11-23Add fix for CVE-2010-3492 and update the fix for CVE-2010-3493. Bothtron6-43/+224
fixes taken from the Python 2.7 branch in the Python SVN repository.
2010-11-17Add fix for SA41968 (CVE-2010-3493) from the 2.7 branch repotez3-3/+43
http://svn.python.org/view/python/branches/release27-maint/Lib/smtpd.py?r1=86084 &r2=82503&view=patch
generated by cgit v1.2.3 (git 2.46.0) at 2026-02-02 09:24:28 +0000