From a5bbc2ea3ddf4af710770f26fd6809eeeff3129e Mon Sep 17 00:00:00 2001 From: Nick Coghlan Date: Sat, 23 Aug 2014 14:47:47 +1000 Subject: [PATCH] Forward port PEP 466 What's New in 2.7 updates --- Doc/whatsnew/2.7.rst | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) diff --git a/Doc/whatsnew/2.7.rst b/Doc/whatsnew/2.7.rst index 8e0d3aa731b..cbd83da323b 100644 --- a/Doc/whatsnew/2.7.rst +++ b/Doc/whatsnew/2.7.rst @@ -2547,13 +2547,23 @@ with the first of those changes appearing in the Python 2.7.7 release. :pep:`466` related features added in Python 2.7.7: -* :func:`hmac.compare_digest` was added to make a timing attack resistant - comparison operation broadly available to Python 2 applications - (backported by Alex Gaynor in :issue:`21306`) +* :func:`hmac.compare_digest` was backported from Python 3 to make a timing + attack resistant comparison operation broadly available to Python 2 + applications (backported by Alex Gaynor in :issue:`21306`) -* the version of OpenSSL linked with the prebuilt Windows installers - published on python.org was updated to 1.0.1g (contributed by - Zachary Ware in :issue:`21462`) +* upgraded to OpenSSL 1.0.1g for the prebuilt Windows installers published + on python.org (contributed by Zachary Ware in :issue:`21462`) + + +:pep:`466` related features added in Python 2.7.8: + +* :func:`hashlib.pbkdf2_hmac` was backported from Python 3 to make a hashing + algorithm suitable for secure password storage broadly available to Python + 2 applications (backported by Alex Gaynor in :issue:`21304`) + +* upgraded to OpenSSL 1.0.1h for the prebuilt Windows installers published + on python.org (contributed by Zachary Ware in :issue:`21671` for + CVE-2014-0224) .. ======================================================================