Commit Graph

86882 Commits

Author SHA1 Message Date
Donald Stufft c6c2217f27 Merge 3.3 2016-08-03 18:48:17 -04:00
Donald Stufft fb7929044a Switch upload.pypi.io to upload.pypi.org 2016-08-03 18:43:38 -04:00
Senthil Kumaran 436fe5a447 [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:34:34 -07:00
Senthil Kumaran 4cbb23f8f2 Prevent HTTPoxy attack (CVE-2016-1000110)
Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.
2016-07-30 23:24:16 -07:00
Martin Panter b7b5d35545 Issue #27369: Merge test_pyexpat from 3.3 into 3.4 2016-07-14 02:09:17 +00:00
Martin Panter d27a7c1f22 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 2016-07-14 01:42:53 +00:00
Martin Panter 076ca6c3c8 Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 2016-07-14 01:31:46 +00:00
Martin Panter 2cdcaf1353 Issue #22758: Move NEWS entry to Library section 2016-07-14 01:17:03 +00:00
R David Murray 8cf14964c6 #22758 null merge 2016-07-10 14:10:56 -04:00
R David Murray e3638944a9 #22758 null merge 2016-07-10 14:10:08 -04:00
R David Murray 5f21f43af7 #22758: fix regression in handling of secure cookies.
This backports the fix from #16611, per discussion with the release
manager.
2016-07-10 13:32:43 -04:00
Benjamin Peterson ede9a0ffa2 merge 3.3 2016-07-06 14:04:11 -07:00
Donald Stufft ad04a85aff Switch to the new upload url for PyPI 2016-07-06 16:18:39 -04:00
Donald Stufft 188c118ba5 Switch to the new upload url for PyPI 2016-07-06 15:27:35 -04:00
Larry Hastings 91058707cf Merge. 2016-06-26 19:43:00 -07:00
Larry Hastings ea684921c2 Post-release fixups for Python 3.4.5. 2016-06-26 19:41:21 -07:00
Larry Hastings 8e362213df Added tag v3.4.5 for changeset 619b61e505d0 2016-06-25 14:44:49 -07:00
Larry Hastings 98be9d500e Version bump for 3.4.5 final. 2016-06-25 14:44:30 -07:00
Larry Hastings 27d3529d87 Regenerate pydoc topics for 3.4.5 final. 2016-06-25 14:42:04 -07:00
Georg Brandl 4b9e75ba7f Docs: add html-stable autobuild variant 2016-06-15 08:57:32 +02:00
Benjamin Peterson 06d49bb895 sync ordering of stddef.h includes with expat 2.1.1 2016-06-13 23:41:19 -07:00
Matthias Klose a8bb04b9a8 Issue #26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. 2016-06-12 23:40:00 -07:00
Larry Hastings 393c759324 Added tag v3.4.5rc1 for changeset 3631bb4a2490 2016-06-11 22:25:43 -07:00
Larry Hastings 463c3f3eef Release bump for 3.4.5rc1. 2016-06-11 22:24:03 -07:00
Larry Hastings 6e77ebe6e9 Regenerate pydoc topics for 3.4.5rc1. 2016-06-11 22:22:07 -07:00
Benjamin Peterson 196d7db395 upgrade expt to 2.1.1 (closes #26556) 2016-06-11 13:28:56 -07:00
Benjamin Peterson 46b32f307c raise an error when STARTTLS fails 2016-06-11 13:16:42 -07:00
Guido van Rossum 3d4d01f614 Back out 7e9605697dfc, 2e3c31ab586a, 759b2cecc289.
These added a path attribute to pathlib.Path objects, and docs.
Instead, we're going to use PEP 519.

(Starting in the 3.4 branch and merging forward from there since that's what I did originally.)
2016-05-19 13:00:21 -07:00
Donald Stufft 2a86122759 Upgrade ensurepip bundled setuptools to 20.10.1 2016-05-02 07:03:46 -04:00
Ethan Furman 5de67b106a Issue26748: Enum classes should evaluate as True 2016-04-13 23:52:09 -07:00
Benjamin Peterson b9869dfe35 remove useless $ keyword (closes #17167) 2016-03-21 22:31:02 -07:00
Donald Stufft 2bc69c49e1 Upgrade ensurepip._bundled pip to 8.1.1 and setuptools to 20.3 2016-03-17 11:00:08 -04:00
Serhiy Storchaka adca8464b1 Backed out changeset 19a3e0e664af 2016-03-08 21:13:35 +02:00
Serhiy Storchaka 388b90f28e Issues #23808, #25911: Trying to fix walk tests on Windows.
On Windows a symlink can has the FILE_ATTRIBUTE_DIRECTORY flag.
2016-03-08 16:11:26 +02:00
Benjamin Peterson f11b25b081 properly use the ObjArgs variant of CallMethod in dictview binary operations (closes #26478) 2016-03-03 22:05:36 -08:00
Berker Peksag 25c0ef518d Issue #26246: Set initial value of the hidden attr when creating copy button.
Patch by Liang-Bo Wang.
2016-03-02 19:40:08 +02:00
Yury Selivanov 90faa09152 asyncio: Update 3.4 asyncio/test_tasks to upstream version 2016-03-02 10:33:22 -05:00
Ezio Melotti 90ba2ca68a #26246: update copybutton.js after JQuery update. Patch by Liang-Bo Wang. 2016-02-27 08:39:36 +02:00
Benjamin Peterson 9491272751 open the cert store readonly
Patch from Chi Hsuan Yen.
2016-02-17 22:13:19 -08:00
Benjamin Peterson b1db758061 reject negative data_size 2016-01-21 22:02:46 -08:00
Donald Stufft 5d0124623c Upgrade pip to 8.0.2 2016-01-21 21:55:32 -05:00
Benjamin Peterson c4032da201 prevent buffer overflow in get_data (closes #26171) 2016-01-20 22:23:44 -08:00
Benjamin Peterson ef9cf08352 fix refleak in error condition 2016-01-20 22:06:43 -08:00
Benjamin Peterson c836f717cd remove script from epub (closes #26172) 2016-01-20 22:02:30 -08:00
Donald Stufft 33a827678e Update pip to 8.0.0 and setuptools to 19.4 2016-01-19 20:13:51 -05:00
Gregory P. Smith c7b05a409d Make the error message regex more lenient so that it matches both
"certificate verify failed " and "CERTIFICATE_VERIFY_FAILED " as
some SSL libraries use different text than OpenSSL.
2016-01-15 17:29:45 -08:00
Martin Panter 3f2240ccb6 Issue #25940: Merge ETIMEDOUT fix from 3.3 into 3.4 2016-01-15 02:18:31 +00:00
Martin Panter fab75d9bb9 Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 2016-01-15 02:08:13 +00:00
Martin Panter 035583b389 Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT 2016-01-15 01:16:41 +00:00
Martin Panter b55f8b79af Issue #25940: Update new SSL tests for self-signed.pythontest.net 2016-01-14 12:53:56 +00:00