Commit Graph

36716 Commits

Author SHA1 Message Date
guido@google.com 2bc23b8448 Add FTP to the allowed url schemes. Add Misc/NEWS. 2011-03-24 10:44:17 -07:00
guido@google.com 60a4a90c8d Issue 22663: fix redirect vulnerability in urllib/urllib2. 2011-03-24 08:07:45 -07:00
Martin v. Löwis ce5d0e22fc Set subversion version identification to empty strings if this is not a subversion
checkout (but a mercurial one). Closes #11579. Closes #11421.
Patch by Senthil Kumaran.
2011-03-21 10:30:07 +01:00
Guido van Rossum 197f7f6859 Whoops. The copyright should be two lines. 2011-03-19 16:20:06 -07:00
Guido van Rossum deeb71e8a0 Test commit. Add 2011 to copyright line. 2011-03-19 16:14:44 -07:00
Senthil Kumaran 3853586e0c Fix issue11442 - Add a charset parameter to the Content-type to avoid XSS attacks.
Patch by Tom N. (Backported from py3k codeline).
2011-03-17 12:34:18 +08:00
Georg Brandl 6e0a8b8ab6 Add tags from the closed branches. 2011-03-05 20:38:24 +01:00
Georg Brandl 4db2c257d6 Add .hgeol file and fix newlines in the 2.5 branch. 2011-03-05 15:02:28 +01:00
Georg Brandl 2af945cd3f Fix tag references in 2.5 branch. 2011-03-05 15:01:01 +01:00
Matthias Klose b7180a89b3 Merge r82494 from the python2.6 branch:
Issue #7673: Fix security vulnerability (CVE-2010-2089) in the audioop module,
  ensure that the input string length is a multiple of the frame size
2010-10-17 10:48:14 +00:00
Matthias Klose d4367c24cd Merge r81080 from the python2.6 branch:
Issue #8674: fix another bogus overflow check in audioop module.
2010-10-17 10:34:40 +00:00
Matthias Klose 192b714f92 Merged revisions 81046 from the python2.6 branch:
Issue #8674: Fix incorrect and UB-inducing overflow checks in audioop
module.  Thanks Tomas Hoger for the patch.
2010-10-17 10:28:49 +00:00
Martin v. Löwis b3b56fcfcb Post 2.5.5. 2010-01-31 16:00:16 +00:00
Martin v. Löwis e80cf5ae54 Tagging for release of Python 2.5.5 2010-01-31 12:39:06 +00:00
Martin v. Löwis ec2aed6617 Prepare for 2.5.5. 2010-01-31 12:38:29 +00:00
Martin v. Löwis 7fa05724e0 Tagging for release of Python 2.5.5c2 2010-01-24 14:26:14 +00:00
Martin v. Löwis e7abfd7cef Prepare for 2.5.5c2. 2010-01-24 14:24:46 +00:00
Matthias Klose b8ec8a48ec - expat: Fix DoS via malformed XML (CVE-2009-3720). 2010-01-21 17:43:31 +00:00
Matthias Klose 166f80860e - Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560). 2010-01-21 17:41:47 +00:00
Martin v. Löwis 8cd94b4306 Tagging for release of Python 2.5.5c1 2010-01-14 17:53:16 +00:00
Martin v. Löwis 906e26e897 Prepare for 2.5.5c1. 2010-01-14 17:41:58 +00:00
Mark Dickinson a822768c62 Restore the svn property changes in r76754 2009-12-11 20:09:24 +00:00
Vinay Sajip 02d3dcde5b Issue #7470: logging: fix bug in Unicode encoding fallback. 2009-12-11 09:16:01 +00:00
Vinay Sajip b9c85c156b Issue #7403: logging: Fixed possible race condition in lock creation. 2009-11-27 15:34:35 +00:00
Philip Jenvey 4c9c260c1a #6990: clear threading.local's key only after its thread state is removed:
fixes local subclasses leaving old state around after a ref cycle GC which
could be recycled by new locals
(backported from r75123)
2009-09-29 05:30:42 +00:00
Lars Gustäbel b4dc921e30 Avoid EOFError being passed to the caller (restoring the
old behavior).
2009-03-22 21:34:05 +00:00
Lars Gustäbel 7623294cb7 Issue #5068: Fixed the tarfile._BZ2Proxy.read() method that would loop
forever on incomplete input. That caused tarfile.open() to hang when used
with mode 'r' or 'r:bz2' and a fileobj argument that contained no data or
partial bzip2 compressed data.

(backported from r70523)
2009-03-22 20:48:03 +00:00
Guido van Rossum f73bf85942 News for issue 5389 fix. 2009-03-05 21:49:40 +00:00
Guido van Rossum c261e4868b Avoid potential for undefined variable 'startinpos' in PyUnicode_DecodeUTF7().
See issue #5389.
2009-03-05 21:47:33 +00:00
Martin v. Löwis 2a67a84954 Tagging for release of Python 2.5.4 2008-12-23 13:22:06 +00:00
Martin v. Löwis 3b43e46b3d Prepare for 2.5.4. 2008-12-23 13:18:53 +00:00
Martin v. Löwis 8ba4cc9f99 Issue #4689: Fix typo. 2008-12-23 13:15:02 +00:00
Martin v. Löwis 3c08e45b70 Revert patch for #1706039, as it can crash the interpreter. 2008-12-23 13:10:43 +00:00
Martin v. Löwis edf14317e3 Backport of r67908:
Added test case to ensure attempts to read from a file opened for writing
fail.
2008-12-23 13:07:51 +00:00
Martin v. Löwis b90b144c47 Post 2.5.3. 2008-12-20 03:38:16 +00:00
Martin v. Löwis f7702adc3b Tagging for release of Python 2.5.3 2008-12-19 15:09:20 +00:00
Martin v. Löwis 3d9eecb0bb Prepare for 2.5.3. 2008-12-19 15:08:45 +00:00
Martin v. Löwis e467f43373 Build against system Tcl framework. 2008-12-19 15:05:38 +00:00
Martin v. Löwis 20fde6641a In the OSX installer, update SQLite to 3.6.7, and change bsddb URL. 2008-12-17 18:03:01 +00:00
Martin v. Löwis d6e258a5a7 Add 2.5.3 final section. 2008-12-13 22:32:24 +00:00
Martin v. Löwis 9fb554ffae Tagging for release of Python 2.5.3c1 2008-12-13 15:44:13 +00:00
Martin v. Löwis 073ff240e7 Prepare for 2.5.3c1. 2008-12-13 15:42:40 +00:00
Martin v. Löwis 0896d3e983 Add 2.5.3. 2008-12-13 15:40:54 +00:00
Martin v. Löwis 084486b234 Issue #1706039: Support continued reading from a file even after
EOF was hit.
2008-12-13 15:36:49 +00:00
Martin v. Löwis 710fb8bf45 Issue #1040026: Fix os.times result on systems where HZ is incorrect. 2008-12-13 15:14:30 +00:00
Martin v. Löwis c252d9bc08 Issue #3767: Convert Tk object to string in tkColorChooser. 2008-12-13 15:09:44 +00:00
Martin v. Löwis afb0dabaca Backport of r59654.
Issue #4342: Always convert Text.index result to string.
2008-12-13 15:04:58 +00:00
Martin v. Löwis 8a64048a22 Backport of r64212
Issue #1683: prevent forking from interfering in threading storage.
2008-12-13 14:59:04 +00:00
Martin v. Löwis e9859df798 Issue 3248: Allow placing ScrolledText in a PanedWindow. 2008-12-13 14:48:13 +00:00
Martin v. Löwis 358076f3e4 Backport of r66703:
Issue #3863: Disabled a unit test of fork being called from a thread
when running on platforms known to exhibit OS bugs when attempting that.
2008-12-13 14:42:53 +00:00