Commit Graph

4920 Commits

Author SHA1 Message Date
Barry Warsaw f25d95732c - Issue #16248: Disable code execution from the user's home directory by
tkinter when the -E flag is passed to Python.  Patch by Zachary Ware.
2013-02-20 18:19:55 -05:00
Barry Warsaw cca96f09d3 Post release twiddle. 2012-04-10 14:50:39 -04:00
Barry Warsaw a12d0ccfbe Bump to 2.6.8 2012-04-10 10:59:35 -04:00
Barry Warsaw bd371a4cbb Bump to 2.6.8rc2 2012-03-17 18:19:15 -04:00
Barry Warsaw 2875b5b294 Update Docs and NEWS for 2.6.8rc2. 2012-03-17 18:16:58 -04:00
Barry Warsaw e9bc2f773f - Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash
table internal to the pyexpat module's copy of the expat library to avoid a
  denial of service due to hash collisions.  Patch by David Malcolm with some
  modifications by the expat project.
2012-03-14 17:10:41 -07:00
Barry Warsaw 1fbc16d050 Bump to version 2.6.8rc1. 2012-02-23 10:55:57 -05:00
Georg Brandl 3aec568e6e Remove reST markup from --help output. Also: O(n**2) is dict construction, not single insertion. 2012-02-21 22:36:27 +01:00
Barry Warsaw 1e13eb084f - Issue #13703: oCERT-2011-003: add -R command-line option and PYTHONHASHSEED
environment variable, to provide an opt-in way to protect against denial of
  service attacks due to hash collisions within the dict and set types.  Patch
  by David Malcolm, based on work by Victor Stinner.
2012-02-20 20:42:21 -05:00
Charles-François Natali 66f3cc6f8d Issue #14001: CVE-2012-0845: xmlrpc: Fix an endless loop in SimpleXMLRPCServer
upon malformed POST request.
2012-02-18 14:15:38 +01:00
Antoine Pitrou d358e0554b Issue #13885: CVE-2011-3389: the _ssl module would always disable the CBC IV attack countermeasure. 2012-01-27 09:42:45 +01:00
Barry Warsaw d0366e862a Replay svn r88852. 2011-06-03 20:05:48 -04:00
Barry Warsaw 16ec24a192 Replay svn r88850. 2011-06-03 20:02:47 -04:00
Barry Warsaw 32140f8955 Replay changeset 70249:b571c7a8cf2e from fubar branch. Original commit
message:

Merging post 2.6.7rc2 changes from Subversion.
2011-05-23 15:27:52 -04:00
Barry Warsaw 34289260da Replay changeset 70248:c714e2f92f63 from fubar branch. Original commit
message:

Cross-port changes for 2.6.7rc2 from the Subversion branch.
2011-05-23 15:26:11 -04:00
Barry Warsaw cf0d8ab818 Replay changeset 70238:03e488b5c009 from fubar branch. Original commit
message:

Reconcile with the 2.6svn branch.  The 2.6.7 release will be made from
Subversion, but there were differences, so this brings them in sync.  These
changes should *not* propagate to any newer versions.
2011-05-23 15:22:56 -04:00
Martin v. Löwis 31e1b1f69c merge 11442 NEWS 2011-04-17 22:56:19 +02:00
Martin v. Löwis 2d253dd9ea Issue 11442: Add NEWS entry for e9724d7abbc2 2011-04-17 22:29:40 +02:00
Guido van Rossum 079381d236 Merge issue 11662 from 2.5. 2011-03-29 12:51:16 -07:00
guido@google.com db3080e68f Add CVE number to urllib/urllib2 news item. 2011-03-28 13:53:40 -07:00
guido@google.com 2bc23b8448 Add FTP to the allowed url schemes. Add Misc/NEWS. 2011-03-24 10:44:17 -07:00
Giampaolo Rodolà 8497f0a85d backporting security fix of issue 9129 (smtpd module vulnerable to DoS attacks in case of connection bashing) 2010-12-07 18:54:43 +00:00
Matthias Klose b7180a89b3 Merge r82494 from the python2.6 branch:
Issue #7673: Fix security vulnerability (CVE-2010-2089) in the audioop module,
  ensure that the input string length is a multiple of the frame size
2010-10-17 10:48:14 +00:00
Matthias Klose 192b714f92 Merged revisions 81046 from the python2.6 branch:
Issue #8674: Fix incorrect and UB-inducing overflow checks in audioop
module.  Thanks Tomas Hoger for the patch.
2010-10-17 10:28:49 +00:00
Barry Warsaw 1740947952 Post release bump 2010-08-24 16:19:58 +00:00
Barry Warsaw d724296fc3 2.6.6 final. \o/ 2010-08-23 23:37:56 +00:00
Barry Warsaw 8275da3f6a Post release twiddling. 2010-08-17 19:57:29 +00:00
Barry Warsaw a7077c865d Move NEWS file entry. 2010-08-16 22:58:18 +00:00
Barry Warsaw 607a2e3f6d Bumping to 2.6.6rc2. 2010-08-16 22:19:57 +00:00
Barry Warsaw b828e5c957 Issue 9568: Fix test_urllib2_localnet on OS X 10.3. 2010-08-16 19:33:51 +00:00
Florent Xicluna 0261d2e361 Merged revisions 82529 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

........
  r82529 | florent.xicluna | 2010-07-04 16:24:40 +0200 (dim., 04 juil. 2010) | 1 line

  Issue #9145: Fix a regression due to r79539
........
2010-08-16 16:08:12 +00:00
Brian Curtin 7c251bbd6e Fix #9600. Don't use relative imports for _multiprocessing on Windows.
Same fix as #9513 on 3.x.
2010-08-14 17:09:55 +00:00
Éric Araujo 77cb7ed40e Revert regression from r81256 (with release manager approval, see #8688) 2010-08-14 02:07:26 +00:00
Mark Dickinson aa6a939d33 Issue #8433: Fix test_curses failure caused by newer versions of
ncurses returning ERR from getmouse() when there are no mouse events
available.
2010-08-13 07:57:29 +00:00
Giampaolo Rodolà 5b07f3cbfc (issue 2944) reverting r83704 changes as per Barry Warsaw request 2010-08-13 01:30:39 +00:00
Florent Xicluna 6980342c34 Rolled back revisions 81259,81265 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

(due to 2.6.6 release candidate freeze)
2010-08-12 22:39:08 +00:00
Ezio Melotti 66983a09d3 Add NEWS entry for r83964. 2010-08-12 17:49:01 +00:00
Florent Xicluna 935f09aea1 Blocked revisions 83902,83907 via svnmerge
................
  r83902 | florent.xicluna | 2010-08-09 22:02:00 +0200 (lun., 09 août 2010) | 25 lines

  Merged revisions 83833,83838-83839,83859,83878 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83833 | florent.xicluna | 2010-08-08 18:25:27 +0200 (dim., 08 août 2010) | 2 lines

    Add test case for the HTTPResponse being an iterable.  Follow-up of issue #4608.
  ........
    r83838 | florent.xicluna | 2010-08-08 20:03:44 +0200 (dim., 08 août 2010) | 2 lines

    Typo.
  ........
    r83839 | florent.xicluna | 2010-08-08 20:06:13 +0200 (dim., 08 août 2010) | 2 lines

    Issue #7564: Skip test_ioctl if another process is attached to /dev/tty.
  ........
    r83859 | florent.xicluna | 2010-08-09 00:07:16 +0200 (lun., 09 août 2010) | 2 lines

    Fix #8530: Prevent stringlib fastsearch from reading beyond the front of an array.
  ........
    r83878 | florent.xicluna | 2010-08-09 10:29:08 +0200 (lun., 09 août 2010) | 1 line

    Merge the 2to3 script from /sandbox/trunk/2to3/2to3, revision 72867 (latest).
  ........
................
  r83907 | florent.xicluna | 2010-08-09 22:29:44 +0200 (lun., 09 août 2010) | 27 lines

  Missed the svnmerge property on r83902.

  Recorded merge of revisions 83833,83838-83839,83859,83878 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83833 | florent.xicluna | 2010-08-08 18:25:27 +0200 (dim., 08 août 2010) | 2 lines

    Add test case for the HTTPResponse being an iterable.  Follow-up of issue #4608.
  ........
    r83838 | florent.xicluna | 2010-08-08 20:03:44 +0200 (dim., 08 août 2010) | 2 lines

    Typo.
  ........
    r83839 | florent.xicluna | 2010-08-08 20:06:13 +0200 (dim., 08 août 2010) | 2 lines

    Issue #7564: Skip test_ioctl if another process is attached to /dev/tty.
  ........
    r83859 | florent.xicluna | 2010-08-09 00:07:16 +0200 (lun., 09 août 2010) | 2 lines

    Fix #8530: Prevent stringlib fastsearch from reading beyond the front of an array.
  ........
    r83878 | florent.xicluna | 2010-08-09 10:29:08 +0200 (lun., 09 août 2010) | 1 line

    Merge the 2to3 script from /sandbox/trunk/2to3/2to3, revision 72867 (latest).
  ........
................
2010-08-09 22:15:51 +00:00
Florent Xicluna 1c24592b92 Merged revisions 81053,81259,81265 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

........
  r81053 | florent.xicluna | 2010-05-10 21:59:22 +0200 (lun., 10 mai 2010) | 2 lines

  Add a link on maketrans().
........
  r81259 | florent.xicluna | 2010-05-17 12:39:07 +0200 (lun., 17 mai 2010) | 2 lines

  Slight style cleanup.
........
  r81265 | florent.xicluna | 2010-05-17 15:35:09 +0200 (lun., 17 mai 2010) | 2 lines

  Issue #1285086: Speed up urllib.quote and urllib.unquote for simple cases.
........
2010-08-09 22:05:50 +00:00
Matthias Klose 9b83dbe905 Merged revisions 83306 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

........
  r83306 | matthias.klose | 2010-07-30 23:27:18 +0200 (Fr, 30 Jul 2010) | 2 lines

  - Issue #7567: Don't call `setupterm' twice.
........
2010-08-05 16:35:53 +00:00
Mark Dickinson f34e396b18 Issue #5798: Handle select.poll flag oddities properly on OS X.
This fixes test_asynchat and test_smtplib failures on OS X.
(Backport of r73182 from trunk.)
2010-08-04 14:42:13 +00:00
Giampaolo Rodolà 042cf1ae8c Merged revisions 83703 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

........
  r83703 | giampaolo.rodola | 2010-08-04 10:35:25 +0200 (mer, 04 ago 2010) | 1 line

  fix issue #2944: asyncore doesn't handle connection refused correctly (patch by Alexander Shigin)
........
2010-08-04 08:58:38 +00:00
Barry Warsaw 6053744c3a Bumping to 2.6.6 rc 1 2010-08-03 22:39:42 +00:00
Mark Dickinson 6f09ea8937 - Issue #8447: Make distutils.sysconfig follow symlinks in the path to
the interpreter executable.  This fixes a failure of test_httpservers
  on OS X.
2010-08-03 21:18:06 +00:00
Mark Dickinson c1ef2fa45f Merged revisions 83680,83685 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

................
  r83680 | mark.dickinson | 2010-08-03 19:34:53 +0100 (Tue, 03 Aug 2010) | 9 lines

  Merged revisions 83677 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83677 | mark.dickinson | 2010-08-03 19:31:54 +0100 (Tue, 03 Aug 2010) | 1 line

    Fix memory leak in ssl module.
  ........
................
  r83685 | mark.dickinson | 2010-08-03 19:46:28 +0100 (Tue, 03 Aug 2010) | 9 lines

  Merged revisions 83683 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83683 | mark.dickinson | 2010-08-03 19:44:16 +0100 (Tue, 03 Aug 2010) | 1 line

    Misc/NEWS entry for r83677.
  ........
................
2010-08-03 18:50:32 +00:00
Ezio Melotti f613f352d0 Merged revisions 78758 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

........
  r78758 | florent.xicluna | 2010-03-07 14:18:33 +0200 (Sun, 07 Mar 2010) | 4 lines

  Issue #7849: Now the utility ``check_warnings`` verifies if the warnings are
  effectively raised.  A new utility ``check_py3k_warnings`` deals with py3k warnings.
........
2010-08-02 18:10:09 +00:00
Georg Brandl 800a354fa9 Merged revisions 83533 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

................
  r83533 | georg.brandl | 2010-08-02 19:34:58 +0200 (Mo, 02 Aug 2010) | 9 lines

  Merged revisions 83531 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83531 | georg.brandl | 2010-08-02 19:24:49 +0200 (Mo, 02 Aug 2010) | 1 line

    #7372: fix regression in pstats: a previous fix to handle cProfile data in add_callers broke handling of profile data.
  ........
................
2010-08-02 17:40:28 +00:00
Ezio Melotti 8dc04a4dd1 Merged revisions 77310-77311 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/trunk

........
  r77310 | antoine.pitrou | 2010-01-05 01:22:44 +0200 (Tue, 05 Jan 2010) | 4 lines

  Issue #7092: Fix the DeprecationWarnings emitted by the standard library
  when using the -3 flag.  Patch by Florent Xicluna.
........
  r77311 | antoine.pitrou | 2010-01-05 01:28:16 +0200 (Tue, 05 Jan 2010) | 3 lines

  Kill a couple of "<>"
........
2010-08-02 00:24:26 +00:00
R. David Murray 9e8e508b31 Merged revisions 83508-83509 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

................
  r83508 | r.david.murray | 2010-08-01 19:52:42 -0400 (Sun, 01 Aug 2010) | 9 lines

  Merged revisions 83506 via svnmerge from
  svn+ssh://pythondev@svn.python.org/python/branches/py3k

  ........
    r83506 | r.david.murray | 2010-08-01 19:43:28 -0400 (Sun, 01 Aug 2010) | 2 lines

    Fix ACKS alphabetization.
  ........
................
  r83509 | r.david.murray | 2010-08-01 19:53:40 -0400 (Sun, 01 Aug 2010) | 2 lines

  Fix the alphabetization fix (bad merge).
................
2010-08-01 23:57:22 +00:00
Georg Brandl 2189607e8f Merged revisions 83499 via svnmerge from
svn+ssh://pythondev@svn.python.org/python/branches/release27-maint

........
  r83499 | georg.brandl | 2010-08-02 00:27:39 +0200 (Mo, 02 Aug 2010) | 1 line

  Fix style of referring to issues.
........
2010-08-01 22:31:28 +00:00