ports/lang/python32/files/patch-modules_gcmodule.c, branch 7-eolFreeBSD ports treehttps://cgit-dev.freebsd.org/ports/atom?h=7-eol2008-10-13T08:23:00ZIntroduce two new versions of Python: 2.6 and 3.0rc1 (finally!)2008-10-13T08:23:00ZHye-Shik Changperky@FreeBSD.org2008-10-13T08:23:00Zurn:sha1:3813a5dbe7d0608965d690d98e1730ad5c8878ff
Python 2.6 will be the next default python version when enough
testings of consumer ports are done. The new "2to3" program is
renamed to 2to3-2.6 and 2to3-3.0 for each version, respectively.
Repo-copied by: marcus
- Security fixes2008-09-08T00:14:06ZMartin Wilkemiwi@FreeBSD.org2008-09-08T00:14:06Zurn:sha1:8a1ff65b9b4abb36af6477b5c168037be07d4f71
Multiple vulnerabilities:
1) Various integer overflow errors exist in core modules e.g. stringobject,
unicodeobject, bufferobject, longobject, tupleobject, stropmodule, gcmodule, mmapmodule.
2) An integer overflow in the hashlib module can lead to an unreliable cryptographic digest results.
3) Integer overflow errors in the processing of unicode strings can be exploited to cause
buffer overflows on 32-bit systems.
4) An integer overflow exists in the PyOS_vsnprintf() function on architectures that do not
have a "vsnprintf()" function.
5) An integer underflow error in the PyOS_vsnprintf() function when passing zero-length strings
can lead to memory corruption.
PR: 127172 (based on)
Submitted by: bf <bf2006a@yahoo.com>
Obtained from: python svn
Security: CVE-2008-2315, CVE-2008-2316, CVE-2008-3142, CVE-2008-3144, CVE-2008-3143. (vuxml come later)