https://github.com/python/cpython

sort by:
Revision Author Date Message Commit Date
a61d7f2 Version bump for 3.4.8. 04 February 2018, 23:40:38 UTC
2a5da97 Finalize blurb archive for 3.4.8 (no new blurbs). 04 February 2018, 23:38:39 UTC
71b94e3 [3.4] [3.5] bpo-32620: Remove failing pyenv call from CI config (GH-5274) (#5533) * [3.5] Remove failing pyenv call from CI config * Backport XML RPC test skip to 3.5 The buildbot service upgrade removed the XML-RPC interface, so this test no longer works (through no fault of the standard library). (cherry picked from commit 4a4c2743133e195cc3725b78a895d85d69e50089) Co-authored-by: Nick Coghlan <ncoghlan@gmail.com> 04 February 2018, 19:37:08 UTC
24396c0 Post-release version bump for 3.4.8rc1. 04 February 2018, 16:17:20 UTC
d5af78b Bump version and copyright year for 3.4.8rc1. 23 January 2018, 12:32:09 UTC
68485f7 blurb release and pydoc topics for 3.4.8rc1. 23 January 2018, 12:24:55 UTC
c59731d [3.4] bpo-32072: Fix issues with binary plists. (GH-4455) (#4658) * [3.4] bpo-32072: Fix issues with binary plists. (GH-4455) * Fixed saving bytearrays. * Identical objects will be saved only once. * Equal references will be load as identical objects. * Added support for saving and loading recursive data structures.. (cherry picked from commit a897aeeef647259a938a36cb5eb6680c86021c6a) * Fix implementation dependent assertion in test_plistlib. (#4813) It is failed with an advanced optimizer. 22 January 2018, 10:18:00 UTC
092db6c bpo-29572: Update Windows build to OpenSSL 1.0.2k (GH-443) (#3445) (cherry picked from commit dd2000cbe475da48fdc94e8f05618e9f460077fd) 08 December 2017, 22:48:37 UTC
6c004b4 bpo-30657: Fix CVE-2017-1000158 (#4758) Fixes possible integer overflow in PyBytes_DecodeEscape. Co-Authored-By: Jay Bosamiya <jaybosamiya@gmail.com> 08 December 2017, 21:34:44 UTC
8b11e8d [3.4] bpo-31170: Fix inclusion of expat in Windows build projects (#3785) * bpo-31170: Fix inclusion of expat in Windows build projects Co-Authored-By: Steve Dower <steve.dower@microsoft.com> * expat: Fix compilation on Visual Studio 2010 The standard header stdbool.h is not available with old Visual Studio compilers Cherry-picked from libexpat commit b4b89c2ab0cc5325a41360c25ef9d2ccbe617e5c. expat: Add artificial scopes in xmltok.c utf8_toUtf8() to fix c89 compilation. Cherry-picked from libexpat commit e0b290eb3d8f4c4b45137a7d7f4f8db812145bd2 * Expat: fix preprocessor defines in VS projects Remove the following defines: * BYTEORDER=1234 * HAVE_MEMMOVE * USE_PYEXPAT_CAPI * XML_CONTEXT_BYTES=1024 * XML_DTD * XML_NS * XML_STATIC * PCbuild/pyexpat.vcxproj: define _CRT_SECURE_NO_WARNINGS 29 November 2017, 18:50:42 UTC
5d7fc42 Backport Doc build venv fixes (#3979) 12 October 2017, 21:06:51 UTC
727f419 Remove retired and security branches from active docs (#3883) 04 October 2017, 03:33:54 UTC
86a713c [3.4][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3353) * bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 * Upgrade libexpat embedded copy from version 2.2.1 to 2.2.3 to get security fixes. * Update libexpat from 2.2.3 to 2.2.4. Fix copying of partial characters for UTF-8 input (libexpat bug 115): https://github.com/libexpat/libexpat/issues/115 * Define XML_POOR_ENTROPY when compiling expat 24 September 2017, 08:04:53 UTC
d0e61bd bpo-29169: Update zlib to 1.2.11 (#3107) Python 3.4 backport: convert the Misc/NEWS entry using blurb. (cherry picked from commit 34e7e2ecb1741850190e78f42875480693d3537b) 16 August 2017, 16:05:57 UTC
ed51967 Post-release bump for 3.4.7 final. 09 August 2017, 07:36:14 UTC
7dc3838 Version bump for 3.4.7 final. 09 August 2017, 07:08:33 UTC
67dc125 Blurb release and pydoc topics for 3.4.7 final. 09 August 2017, 07:06:48 UTC
362e9fb [3.5] bpo-31036: use an existing Misc/NEWS rather than trying to use blurb (#2874) (#2926) (cherry picked from commit 3de144890ad3bc50694368a1b33be6d7f3a780b3) 28 July 2017, 05:02:05 UTC
2a5a26c [3.4] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2893) 27 July 2017, 19:47:46 UTC
5c673dd Post-release bump for 3.4.7rc1. 25 July 2017, 08:58:59 UTC
c912af8 Version bump and copyright year fixes for 3.4.7rc1. 24 July 2017, 01:16:33 UTC
961168d Update pydoc topics and susp-ignored for 3.4.7rc1. 24 July 2017, 01:11:33 UTC
e9a74c4 blurb release for 3.4.7rc1. 24 July 2017, 00:59:56 UTC
f067f7e Switch to using blurb to manage Misc/NEWS! 24 July 2017, 00:55:09 UTC
b154917 [3.4] Backport CI config from master (#2475) * Issues #23808, #25911: Trying to fix walk tests on Windows. On Windows a symlink can has the FILE_ATTRIBUTE_DIRECTORY flag. (cherry picked from commit 388b90f28e029daaf06aae8026b596e2f20a1cd3) * bpo-30231: Remove skipped test_imaplib tests (#1419) (#2193) The public cyrus.andrew.cmu.edu IMAP server (port 993) doesn't accept TLS connection using our self-signed x509 certificate. Remove the two tests which are already skipped. (cherry picked from commit 7895a0585b4b6a1c8082d17227307c6ce2c8bb8b) * Backport CI config from master * Add .travis.yml for Travis CI * Add .github/ for AppVeyor and CodeCov. * Travis CI: remove "make regen-all" check The regen-all Makefile rule doesn't exist in Python 3.4, only since Python 3.5 and newer (and 2.7). * appveyor: replace --slowest with --slow * Travis CI: remove the GCC coverage job * Travis CI: remove tzdata resource from regrtest tzdata resource doesn't exist in Python 3.4. * Travis CI: remove the doc job Fixing Sphinx warnings requires to backport huge intrusive changes like: - commit d97b7dc94b19063f0589d401bdc4aaadc7030762 - commit 5c6793394066b012b9674681b0815667938ce4d9 * appveyor: set version to 3.4.6+ * bpo-30730: Fix test_os tests. Fix test_invalid_cmd() and test_invalid_env(), TypeError is raised on Python 3.4. (cherry picked from commit 5e22721e586344b547194f0f7ea67fd425f94e72) 22 July 2017, 19:22:31 UTC
3b3a5a5 bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2724) (cherry picked from commit 50f58163a69abe2f35e91044d1df165ee7bdbb42) 22 July 2017, 19:18:44 UTC
34fae03 [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (#2695) * [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (cherry picked from commit 8f657c35b978b681e6e919f08358992e1aed7dc1) * Rewrite a NEWS entry as a NEWS.d entry. 22 July 2017, 19:07:10 UTC
6f6bc1d bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) Based on patch by Philipp Hagemeister. This fixes a regression caused by revision f4377699fd47. (cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a) 12 July 2017, 12:52:04 UTC
cc54c1c bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2291) The current regex based splitting produces a wrong result. For example:: http://abc#@def Web browsers parse that URL as ``http://abc/#@def``, that is, the host is ``abc``, the path is ``/``, and the fragment is ``#@def``. (cherry picked from commit 90e01e50ef8a9e6c91f30d965563c378a4ad26de) 12 July 2017, 12:51:46 UTC
71572bb [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2203) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 (#2164) * bpo-29591: Upgrade Modules/expat to libexpat 2.2 * bpo-29591: Restore Python changes on expat * bpo-29591: Remove expat config of unsupported platforms Remove the configuration (Modules/expat/*config.h) of unsupported platforms: * Amiga * MacOS Classic on PPC32 * Open Watcom * bpo-29591: Remove useless XML_HAS_SET_HASH_SALT The XML_HAS_SET_HASH_SALT define of Modules/expat/expat.h became useless since our local expat copy was upgrade to expat 2.1 (it's now expat 2.2.0). (cherry picked from commit 23ec4b57e1359f9c539b8defc317542173ae087e) * bpo-30694: Upgrade Modules/expat/ to libexpat 2.2.1 (#2300) New file: Modules/expat/siphash.h. (cherry picked from commit 5ff7132313eb651107b179d20218dfe5d4e47f13) * bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) bpo-30726, bpo-29591: libexpat 2.2.1 of Modules/expat/ now uses a winconfig.h configuration file which already defines: * XML_NS * XML_DTD * BYTEORDER=1234 * XML_CONTEXT_BYTES=1024 * HAVE_MEMMOVE Remove these defines from PCbuild/_elementtree.vcxproj to prevent compiler warnings. Co-Authored-By: Jeremy Kloth <jeremy.kloth@gmail.com> (cherry picked from commit c8fb58bd7917151e63398587a7fc2126db7c26de) * bpo-30726: Fix elementtree warnings on Windows due to expat upgrade (#2319) * bpo-30726: Fix elementtree warnings on Windows Caused by usage of `getenv` which should be safe. And a few integer truncations which should also be ok. * bpo-30726: Don't ignore libexpat warnings which haypo intends to fix upstream (cherry picked from commit 87c65550730a8f85ce339ba197bce4fb7e836619) 12 July 2017, 12:41:34 UTC
f734479 [3.4] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) (GH-1678) (#2248) Based on patches by Duane Griffin and Tim Mitchell. (cherry picked from commit 753bca3934a7618a4fa96e107ad1c5c18633a683). (cherry picked from commit 2f7f533cf6fb57fcedcbc7bd454ac59fbaf2c655) 11 July 2017, 13:30:21 UTC
fe82c46 [security][3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2362) * [3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) Prevent passing other invalid environment variables and command arguments.. (cherry picked from commit d174d24a5d37d1516b885dc7c82f71ecd5930700) * Update NEWS 11 July 2017, 10:24:10 UTC
ad1fb81 Add "Misc/NEWS.d" directory tree for "blurb". GH-2331 CPython workflow is changing! We're going to start using "blurb" to manage Misc/NEWS entries: https://github.com/python/core-workflow (This will be a big win for release managers, honest.) This checkin simply populates the "Misc/NEWS.d" subdirectory tree so that people can start putting their news entries in there. No other changes (yet). 22 June 2017, 23:00:46 UTC
fa53dbd Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ChaCha20 Poly1305. (#224) Backport: replace 3.5.3 with 3.4.7 in the doc versionchanged. (cherry picked from commit 03d13c0cbfe912eb0f9b9a02987b9e569f25fe19) 10 March 2017, 00:49:11 UTC
f37b0cb bpo-25008: Deprecate smtpd and point to aiosmtpd (#274) (#280) 24 February 2017, 20:31:48 UTC
a52b0a4 Post-release updates for 3.4.6. 17 January 2017, 08:49:13 UTC
db413f2 Added tag v3.4.6 for changeset b662f4776921 16 January 2017, 08:20:40 UTC
7f10ede Version bump for Python 3.4.6. 16 January 2017, 08:19:54 UTC
aa772e3 Merge Python 3.4.6rc1 changes back into main branch. 03 January 2017, 02:30:26 UTC
a7aa988 Post-release fixups for Python 3.4.6rc1. 03 January 2017, 02:29:26 UTC
0717564 merge 3.3 02 January 2017, 07:47:35 UTC
c276ffa ring IDLE.app into 2017, too 02 January 2017, 07:46:09 UTC
af17a2b Added tag v3.4.6rc1 for changeset e199a272ccda 02 January 2017, 06:13:29 UTC
d12551f Version bump for 3.4.6rc1. 02 January 2017, 06:12:36 UTC
8f24f66 Regenerated pydoc topics for 3.4.6rc1. (Also fixed doc error, improved build.) 02 January 2017, 06:09:46 UTC
03fdeb7 Fix test failure so it's no longer dependent on example.com. 02 January 2017, 05:49:09 UTC
b6e2142 merge 3.3 02 January 2017, 04:07:37 UTC
e527dd3 ring in 2017 for Python 02 January 2017, 04:04:13 UTC
dd5c73b Upgrade pip to 9.0.1 and setuptools to 28.8.0 16 November 2016, 02:17:43 UTC
5ca92ab Issue #28563: Make plural form selection more lenient and accepting non-integer numbers. Django tests depend on this. 14 November 2016, 17:25:56 UTC
60ac989 Issue #28563: Make plural form selection more lenient and accepting non-integer numbers. Django tests depend on this. 14 November 2016, 17:22:12 UTC
84293af Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X when decode astral characters. 12 November 2016, 12:29:48 UTC
b626643 Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X when decode astral characters. 12 November 2016, 12:28:06 UTC
1c3fdd9 Issue #28563: Fixed possible DoS and arbitrary code execution when handle plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. 08 November 2016, 19:20:09 UTC
07bcf05 Issue #28563: Fixed possible DoS and arbitrary code execution when handle plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. 08 November 2016, 19:17:46 UTC
20a587b Upgrade pip to 9.0 and setuptools to 28.7.1 02 November 2016, 19:42:49 UTC
77eede3 Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug build. 25 October 2016, 07:07:51 UTC
068534a Issue #28248: Update Windows build to use OpenSSL 1.0.2j 11 October 2016, 02:57:20 UTC
cb9424f Issue #27759: Fix selectors incorrectly retain invalid file descriptors. (Backported to 3.4 as this bug might be exploited to for DoS) 06 October 2016, 18:03:03 UTC
26d998c properly handle the single null-byte file (closes #24022) 19 September 2016, 06:41:11 UTC
354c2f9 Issue #26171: Null merge 14 September 2016, 05:38:36 UTC
d751040 Issue #26171: Prevent buffer overflow in get_data Backport of 01ddd608b85c. 14 September 2016, 05:37:28 UTC
16d7d59 Upgrade setuptools to 27.1.2 09 September 2016, 16:08:53 UTC
d25d9dc Upgrade setuptools to 27.1.1 09 September 2016, 15:35:02 UTC
1f5fd64 Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by developed for Issue #12885. 06 September 2016, 02:24:01 UTC
79ae967 Issue #12885: Revert commits in 3.4 branch which is security-only fixes. 02 September 2016, 03:27:45 UTC
6f5d3fd Issue #12885: Correct issue reference in NEWS 02 September 2016, 02:08:25 UTC
8ac147d Backed out changeset cc86e9e102e8 02 September 2016, 01:55:22 UTC
97eda15 Issue #12285: Update NEWS 02 September 2016, 01:12:17 UTC
1f0e7c9 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) 17 August 2016, 06:35:35 UTC
3a27b08 do not decref value borrowed from list (closes #27774) 16 August 2016, 05:01:41 UTC
4f97651 fix possible integer overflow in binascii.b2a_qp (closes #27760) Reported by Thomas E. Hybel 14 August 2016, 01:33:33 UTC
6e01d90 check for overflow in join_append_data (closes #27758) Reported by Thomas E. Hybel 14 August 2016, 00:17:06 UTC
6f25003 Issue #20160: Handled passing of large structs to callbacks correctly. 05 August 2016, 20:24:27 UTC
fb79290 Switch upload.pypi.io to upload.pypi.org 03 August 2016, 22:43:38 UTC
4cbb23f Prevent HTTPoxy attack (CVE-2016-1000110) Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. 31 July 2016, 06:24:16 UTC
d27a7c1 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 14 July 2016, 01:42:53 UTC
076ca6c Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 14 July 2016, 01:31:46 UTC
2cdcaf1 Issue #22758: Move NEWS entry to Library section 14 July 2016, 01:17:03 UTC
e363894 #22758 null merge 10 July 2016, 18:10:08 UTC
5f21f43 #22758: fix regression in handling of secure cookies. This backports the fix from #16611, per discussion with the release manager. 10 July 2016, 17:32:43 UTC
188c118 Switch to the new upload url for PyPI 06 July 2016, 19:27:35 UTC
035583b Issue #25940: On Windows, connecting to port 444 returns ETIMEDOUT 15 January 2016, 01:16:41 UTC
3d81d93 Issue #25940: Use self-signed.pythontest.net in SSL tests This is instead of svn.python.org, whose certificate recently expired, and whose new certificate uses a different root certificate. The certificate used at the pythontest server was modifed to set the "basic constraints" CA flag. This flag seems to be required for test_get_ca_certs_ capath() to work (in Python 3.4+). Added the new self-signed certificate to capath with the following commands: cp Lib/test/{selfsigned_pythontestdotnet.pem,capath/} c_rehash -v Lib/test/capath/ c_rehash -v -old Lib/test/capath/ # Note the generated file names cp Lib/test/capath/{selfsigned_pythontestdotnet.pem,0e4015b9.0} mv Lib/test/capath/{selfsigned_pythontestdotnet.pem,ce7b8643.0} The new server responds with "No route to host" when connecting to port 444. 14 January 2016, 09:36:00 UTC
31b9410 Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. 02 December 2015, 23:02:03 UTC
fab75d9 Issue #25940: Merge ETIMEDOUT fix from 3.2 into 3.3 15 January 2016, 02:08:13 UTC
73f5507 Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 14 January 2016, 12:21:02 UTC
0e617e2 remove some copyright notices supserseded by the toplevel ones 01 January 2016, 17:53:47 UTC
f1dcdd9 add 2015 and 2016 01 January 2016, 17:53:14 UTC
16b347b reflow 01 January 2016, 17:12:44 UTC
75e3630 2016 will be another year of writing copyrighted code 01 January 2016, 16:23:45 UTC
14b2c82 fix reordering 05 December 2015, 08:27:11 UTC
2deaea3 merge 3.2 05 December 2015, 08:21:12 UTC
5e62117 add CVE and issue number 05 December 2015, 08:17:57 UTC
edc4b2f Issue #12285: Replace implementation of findall with implementation from Setuptools 7ce820d524db. 19 September 2015, 16:12:15 UTC
102764a Issue #25021: Correctly make sure that product.__setstate__ does not access invalid memory. 12 September 2015, 15:20:54 UTC
1a04c44 Sort result to avoid spurious errors due to order. 30 August 2015, 18:05:58 UTC
a2cf229 Add docstring and additional test revealing nuances of the implementation as found in setuptools. 19 September 2015, 15:32:51 UTC
2c5278a Add another test capturing the basic discovery expectation. 30 August 2015, 17:26:48 UTC
a0c6c1c Issue #12285: Add test capturing failure. 30 August 2015, 17:22:56 UTC
back to top