https://github.com/python/cpython

sort by:
Revision Author Date Message Commit Date
ea67321 Python 3.8.13, take two This reverts commit e5f711f5eeb6db4290db1b747f42f5d723d12ed3. 16 March 2022, 12:22:54 UTC
4d8e08b bpo-31327: Update time documentation to reflect possible errors (GH-31460) (GH-31827) As per the comments, this mirrors the [datetime documentation](https://docs.python.org/3/library/datetime.htmlGH-datetime.datetime.fromtimestamp). ``` >>> import time >>> time.localtime(999999999999999999999) Traceback (most recent call last): File "<stdin>", line 1, in <module> OverflowError: timestamp out of range for platform time_t >>> time.localtime(-3600) Traceback (most recent call last): File "<stdin>", line 1, in <module> OSError: [Errno 22] Invalid argument ``` (cherry picked from commit c83fc9c02c9846ec3a2d0123999c98e02f00b3f5) Co-authored-by: slateny <46876382+slateny@users.noreply.github.com> 16 March 2022, 10:12:50 UTC
2b97cfd bpo-46948: Fix launcher installer build failure due to first part of fix (GH-31920) (GH-31924) (cherry picked from commit 708812085355c92f32e547d1f1d1f29aefbbc27e) Co-authored-by: Steve Dower <steve.dower@python.org> 16 March 2022, 10:11:36 UTC
e5f711f Post 3.8.13 15 March 2022, 22:41:31 UTC
f1c3816 Python 3.8.13 15 March 2022, 21:43:42 UTC
e8b72fc [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912) * bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. * Revert inadvertent sqlite downgrade 15 March 2022, 20:53:48 UTC
7a315d8 bpo-46985: Upgrade bundled pip to 22.0.4 (GH-31819) (GH-31851) (cherry picked from commit d87f1b787ed38dfd307d82452f2efe9dc5b93942) Co-authored-by: Pradyun Gedam <pgedam@bloomberg.net> 15 March 2022, 14:39:50 UTC
dea270a bpo-45405: Prevent internal configure error when running configure with recent versions of clang. (GH-28845) (GH-31889) Change the configure logic to function properly on macOS when the compiler outputs a platform triplet for option --print-multiarch. The Apple Clang included with Xcode 13.3 now supports --print-multiarch causing configure to fail without this change. Co-authored-by: Ned Deily <nad@python.org> (cherry picked from commit 9c4766772cda67648184f8ddba546a5fc0167f91) Co-authored-by: David Bohman <debohman@gmail.com> Automerge-Triggered-By: GH:ned-deily (cherry picked from commit 9901d153c201d852d27dc9d3074e283c26468f6d) Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> 15 March 2022, 14:39:20 UTC
ccbc31e bpo-46784: Add newly exported expat symbols to the namespace. (GH-31397) (GH-31419) The libexpat 2.4.1 upgrade from introduced the following new exported symbols: * `testingAccountingGetCountBytesDirect` * `testingAccountingGetCountBytesIndirect` * `unsignedCharToPrintable` * `XML_SetBillionLaughsAttackProtectionActivationThreshold` * `XML_SetBillionLaughsAttackProtectionMaximumAmplification` We need to adjust [Modules/expat/pyexpatns.h](https://github.com/python/cpython/blob/master/Modules/expat/pyexpatns.h) (The newer libexpat upgrade has no new symbols). Automerge-Triggered-By: GH:gpshead (cherry picked from commit 6312c1052c0186b4596fc45c42fd3ade9f8f5911) Co-authored-by: Yilei "Dolee" Yang <yileiyang@google.com> 08 March 2022, 09:35:47 UTC
28ad79e Update copyright year to 2022. (GH-30335) (GH-31478) Automerge-Triggered-By: GH:benjaminp (cherry picked from commit ba00f0d93a4aea85ae8089f139856a7c450584d7) Co-authored-by: Benjamin Peterson <benjamin@python.org> 08 March 2022, 09:35:32 UTC
6649519 bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31734) 08 March 2022, 09:04:59 UTC
cff1b78 bpo-46948: Fix CVE-2022-26488 by ensuring the Windows Installer correctly uses the install path during repair (GH-31729) 08 March 2022, 09:04:24 UTC
c3ec5bc bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31740) (cherry picked from commit 176835c3d5c70f4c1b152cc2062b549144e37094) Co-authored-by: Steve Dower <steve.dower@python.org> 08 March 2022, 09:03:18 UTC
1c9701a bpo-46756: Fix authorization check in urllib.request (GH-31353) (GH-31572) Fix a bug in urllib.request.HTTPPasswordMgr.find_user_password() and urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated() which allowed to bypass authorization. For example, access to URI "example.org/foobar" was allowed if the user was authorized for URI "example.org/foo". (cherry picked from commit e2e72567a1c94c548868f6ee5329363e6036057a) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 02 March 2022, 13:50:32 UTC
eb6c840 bpo-46794: Bump up the libexpat version into 2.4.6 (GH-31487) (GH-31520) (cherry picked from commit 1935e1cc284942bec8006287c939e295e1a7bf13) Co-authored-by: Dong-hee Na <donghee.na@python.org> 02 March 2022, 09:19:33 UTC
438f8cd Don't test with OpenSSL 3.0 on 3.8 22 February 2022, 20:57:53 UTC
899eb41 Force use of `windows-2019` on GHA to continue using the v140 platform toolkit 22 February 2022, 20:57:53 UTC
fdfd7a9 bpo-46811: Make test suite support Expat >=2.4.5 (GH-31453) Curly brackets were never allowed in namespace URIs according to RFC 3986, and so-called namespace-validating XML parsers have the right to reject them a invalid URIs. libexpat >=2.4.5 has become strcter in that regard due to related security issues; with ET.XML instantiating a namespace-aware parser under the hood, this test has no future in CPython. References: - https://datatracker.ietf.org/doc/html/rfc3968 - https://www.w3.org/TR/xml-names/ Also, test_minidom.py: Support Expat >=2.4.5 (cherry picked from commit 2cae93832f46b245847bdc252456ddf7742ef45e) Co-authored-by: Sebastian Pipping <sebastian@pipping.org> 22 February 2022, 20:57:53 UTC
c60414d bpo-46400: Update libexpat from 2.4.1 to 2.4.4 (GH-31022) (GH-31297) Co-authored-by: Cyril Jouve <jv.cyril@gmail.com> 21 February 2022, 15:02:38 UTC
4c48cac bpo-41028: Doc: Move switchers to docsbuild-scripts. (GH-20969) (GH-30344) (cherry picked from commit ee2549c2ba8bae00f2b2fea8a39c6dfbd1d06520) Co-authored-by: Julien Palard <julien@palard.fr> 17 February 2022, 18:55:23 UTC
b1bc04d bpo-44949: Fix test_readline auto history tests (GH-27813) (GH-31118) (cherry picked from commit 6fb62b42f4db56ed5efe0ca4c1059049276c1083) Co-authored-by: Victor Stinner <vstinner@python.org> 17 February 2022, 08:32:03 UTC
8a84aef [3.8] bpo-46474: Avoid REDoS in EntryPoint.pattern (sync with importlib_metadata 4.10.1) (GH-30803). (#30829) (cherry picked from commit 51c3e28c8a163e58dc753765e3cc51d5a717e70d) Co-authored-by: Jason R. Coombs <jaraco@jaraco.com> 14 February 2022, 17:56:03 UTC
f87e616 bpo-46648: Skip test_urllib2.test_issue16464() (GH-31161) (GH-31173) POST requests to http://www.example.com/ fail randomly. (cherry picked from commit 1578de2fcd685c71f9c84e09bac32901dea192c1) Co-authored-by: Victor Stinner <vstinner@python.org> 08 February 2022, 09:52:39 UTC
7c5b01b bpo-45859: Mark test_field_descriptor in test_collections as CPython-only (GH-29691) (GH-29710) (cherry picked from commit 4fad314246399b69ef0c57ba8527d9efade99069) Co-authored-by: Carl Friedrich Bolz-Tereick <cfbolz@gmx.de> 11 December 2021, 00:02:00 UTC
c37a0d9 bpo-45792: Fix contextvar.Token's intersphinx FQN (GH-29533) (GH-29537) Since `.. module:: contextvars` sets the module using `.. class:: contextvars.Token`, intersphinx records it as `contextvars.contextvars.Token`. (cherry picked from commit e501d70b347c5093018d12482c30a7a98aab86d0) Co-authored-by: Hynek Schlawack <hs@ox.cx> 16 November 2021, 09:56:56 UTC
10b0c67 bpo-44828: Avoid leaving a zombie Save panel (GH-29372) Patch by Marc Culler of the Tk project. 04 November 2021, 20:21:25 UTC
76658e5 bpo-45583: Correct datamodel documentation of int() (GH-29182) (GH-29287) It should be noted that this part of the documentation is redundant with function.rst's documentation of int. This one was correctly updated with Python 3.8. (cherry picked from commit d9c1868c25ec6466e8d8ae21fe9315a8a03836ab) Co-authored-by: Arthur Milchior <arthur@milchior.fr> 28 October 2021, 20:02:07 UTC
f19c1a1 bpo-44828: Avoid tkinter file dialog failure on macOS 12 Monterey (GH-29276) (GH-29279) when using the Tk 8.6.11 provided by python.org macOS installers. Patch by Marc Culler of the Tk project. (cherry picked from commit be8318be05e1a874215fa75b8845ede74b2c69b6) Co-authored-by: Ned Deily <nad@python.org> 28 October 2021, 19:10:15 UTC
f240714 [3.9] bpo-45618: Fix documentation build by pinning Docutils version to 0.17.1 (GH-29230) (GH-29241) (GH-29245) Co-authored-by: Maciej Olko <maciej.olko@yougov.com> Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 28 October 2021, 19:08:42 UTC
2ce3816 bpo-45436: Fix tkinter tests with Tcl/Tk 8.6.11+ (GH-29077) (GH-29093) Since v8.6.11, a few configuration options seem to accept an empty value where they did not previously; particularly the `type` of a `Menu` widget, and the `compound` of any ttk widget with a label. Providing an explicit expected error message to `checkEnumParam` bypasses the check of an empty value, which no longer raises `TclError`. (cherry picked from commit 4fe454c6f54b0948af67b53af6c2f35af6377e69) Co-authored-by: Zachary Ware <zach@python.org> 20 October 2021, 14:08:43 UTC
67e10be bpo-44849: Fix os.set_inheritable() on FreeBSD 14 with O_PATH (GH-27623) (GH-28978) Fix the os.set_inheritable() function on FreeBSD 14 for file descriptor opened with the O_PATH flag: ignore the EBADF error on ioctl(), fallback on the fcntl() implementation. (cherry picked from commit c24896c0e3b32c8a9f614ef51366007b67d5c665) Co-authored-by: Victor Stinner <vstinner@python.org> 19 October 2021, 19:15:29 UTC
7f70ba3 bpo-45310: Fix parrallel shared memory tests (GH-28661) (GH-28979) Add a PID to names of POSIX shared memory objects to allow running multiprocessing tests (test_multiprocessing_fork, test_multiprocessing_spawn, etc) in parallel. (cherry picked from commit eb4495e8e275c83d691add116c4f2b74e73e3cc8) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 19 October 2021, 19:15:06 UTC
1d8cb01 bpo-45195: Fix test_readline.test_nonascii() (GH-28329) (GH-28984) Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don't expect it in the output. (cherry picked from commit 797c8eb9ef511f0c25f10a453b35c4d2fe383c30) Co-authored-by: Victor Stinner <vstinner@python.org> 19 October 2021, 19:14:36 UTC
90004fc [3.8] bpo-44394: Ensure libexpat is linked against libm (GH-28617) (GH-28620) (cherry picked from commit 6c1154b9de29e1c9cd3d05f5289543e5cff73895) Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com> Co-authored-by: Łukasz Langa <lukasz@langa.pl> 29 September 2021, 14:35:53 UTC
456d6d9 bpo-45220: Avoid automatically selecting the Windows 11 SDK preview when building (GH-28393) (GH-28622) (cherry picked from commit f4b94b1f57827083990272b5f282aa1493ae2bf4) Co-authored-by: Steve Dower <steve.dower@python.org> 29 September 2021, 13:54:47 UTC
8344fef [docs] Update documentation for `multiprocessing.get_start_method` (GH-18170) (GH-28535) (cherry picked from commit af90b5498b8c6acd67b50fdad007d26dfd1c5823) Co-authored-by: Sam Sneddon <me@gsnedders.com> 23 September 2021, 21:39:26 UTC
5a42a49 bpo-45104: Clarify when __init__ is called (GH-28210) (GH-28213) (cherry picked from commit fa15df77f02ba4a66ba0b71989381a426038be01) Co-authored-by: Raymond Hettinger <rhettinger@users.noreply.github.com> 07 September 2021, 16:21:23 UTC
8c3a10e bpo-45022: Pin current libffi build to fixed version in preparation for upcoming update (GH-27982) (GH-28001) Also improve the build script for libffi, which is not used as part of the regular build. (cherry picked from commit 969ae7f7356584e30667b4e490ffa2ffa1810429) Co-authored-by: Steve Dower <steve.dower@python.org> 03 September 2021, 16:53:12 UTC
9d318ad Post 3.8.12 30 August 2021, 17:03:50 UTC
07119dd Python 3.8.12 30 August 2021, 14:26:41 UTC
8371290 [3.8] bpo-45007: Update multissl to openssl 1.1.1l as well (GH-28044) (GH-28063) This was missed while upgrading CI.. (cherry picked from commit d6cb5dd9e19210f5963ff8beadde7ca2fda71574) Co-authored-by: Łukasz Langa <lukasz@langa.pl> Co-authored-by: Łukasz Langa <lukasz@langa.pl> 30 August 2021, 13:08:12 UTC
1f89e51 bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) (GH-28059) (cherry picked from commit 94b2639fad50d7ff8acd12c11e5fe5f9a6e1da5c) Co-authored-by: Ned Deily <nad@python.org> 30 August 2021, 09:50:25 UTC
7234e67 bpo-44689: ctypes.util.find_library() now finds macOS 11+ system libraries when built on older macOS systems (GH-27251) (GH-28054) Previously, when built on older macOS systems, `find_library` was not able to find macOS system libraries when running on Big Sur due to changes in how system libraries are stored. (cherry picked from commit 71853a73024a98aa38a3c0444fe364dbd9709134) Co-authored-by: Tobias Bergkvist <tobias@bergkv.ist> 30 August 2021, 09:07:19 UTC
803c607 [3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28041) (cherry picked from commit d3bdbbf9a4352a24fc2bfc7a63a024b244b61aba) Co-authored-by: Steve Dower <steve.dower@python.org> 29 August 2021, 16:27:01 UTC
b93aea4 [3.8] bpo-43124: Fix smtplib multiple CRLF injection (GH-25987) (GH-28036) Co-authored-by: Łukasz Langa <lukasz@langa.pl> (cherry picked from commit 0897253f426068ea6a6fbe0ada01689af9ef1019) Co-authored-by: Miguel Brito <5544985+miguendes@users.noreply.github.com> 29 August 2021, 15:04:17 UTC
c9c2a0b bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28033) Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 "Billion Laughs" vulnerability. This copy is most used on Windows and macOS. Co-authored-by: Łukasz Langa <lukasz@langa.pl> (cherry picked from commit 3fc5d84046ddbd66abac5b598956ea34605a4e5d) Co-authored-by: Victor Stinner <vstinner@python.org> 29 August 2021, 14:31:27 UTC
193443b bpo-42278: Use tempfile.TemporaryDirectory rather than tempfile.mktemp in pydoc (GH-23200) (GH-28026) Co-authored-by: Łukasz Langa <lukasz@langa.pl> (cherry picked from commit c9227df5a9d8e958a2324cf0deba8524d1ded26a) Co-authored-by: E-Paine <63801254+E-Paine@users.noreply.github.com> 29 August 2021, 12:57:05 UTC
44dd2ec Fix typo in a comment in Modules/_ssl.c: s/validata/validate/ (GH-27993) (GH-27999) (cherry picked from commit 28db1f61f20352c02e4ae1518e5aeb6505df3045) Co-authored-by: Adam Dangoor <adamdangoor@gmail.com> 27 August 2021, 12:33:33 UTC
9c74678 bpo-44997: macOS does not support loadable SQLite extensions (GH-27979) (GH-27996) Authored-by: Ronald Oussoren <ronaldoussoren@mac.com> (cherry picked from commit 2ec9428e3516b6e7c6583687aa3b39fb96925577) Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 27 August 2021, 11:27:45 UTC
81148c6 bpo-45001: Make email date parsing more robust against malformed input (GH-27946) (GH-27974) Various date parsing utilities in the email module, such as email.utils.parsedate(), are supposed to gracefully handle invalid input, typically by raising an appropriate exception or by returning None. The internal email._parseaddr._parsedate_tz() helper used by some of these date parsing routines tries to be robust against malformed input, but unfortunately it can still crash ungracefully when a non-empty but whitespace-only input is passed. This manifests as an unexpected IndexError. In practice, this can happen when parsing an email with only a newline inside a ‘Date:’ header, which unfortunately happens occasionally in the real world. Here's a minimal example: $ python Python 3.9.6 (default, Jun 30 2021, 10:22:16) [GCC 11.1.0] on linux Type "help", "copyright", "credits" or "license" for more information. >>> import email.utils >>> email.utils.parsedate('foo') >>> email.utils.parsedate(' ') Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python3.9/email/_parseaddr.py", line 176, in parsedate t = parsedate_tz(data) File "/usr/lib/python3.9/email/_parseaddr.py", line 50, in parsedate_tz res = _parsedate_tz(data) File "/usr/lib/python3.9/email/_parseaddr.py", line 72, in _parsedate_tz if data[0].endswith(',') or data[0].lower() in _daynames: IndexError: list index out of range The fix is rather straight-forward: guard against empty lists, after splitting on whitespace, but before accessing the first element. (cherry picked from commit 989f6a3800f06b2bd31cfef7c3269a443ad94fac) Co-authored-by: wouter bolsterlee <wouter@bolsterl.ee> 26 August 2021, 15:49:12 UTC
6ebfe8d [3.8] bpo-36384: [doc] Correct typos in CVE-2021-29921 fix description (GH-27825) 19 August 2021, 08:50:40 UTC
03dd89d [3.8] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) (GH-27801) Reverts commit e653d4d8e820a7a004ad399530af0135b45db27a and makes parsing even more strict. Like socket.inet_pton() any leading zero is now treated as invalid input. Signed-off-by: Christian Heimes <christian@python.org> Co-authored-by: Łukasz Langa <lukasz@langa.pl> 17 August 2021, 23:46:37 UTC
d7f5796 bpo-33930: Fix typo in the test name. (GH-27735) bpo-33930: Fix typo in the test name. (GH-27733) (cherry picked from commit f08e6d1bb3c5655f184af88c6793e90908bb6338) Co-authored-by: Benjamin Peterson <benjamin@python.org> Co-authored-by: Benjamin Peterson <benjamin@python.org> 12 August 2021, 02:17:23 UTC
09d814b [3.8] bpo-33930: Fix segfault with deep recursion when cleaning method objects (GH-27678) (GH-27721) (cherry picked from commit bfc2d5a5c4550ab3a2fadeb9459b4bd948ff61a2) Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com> 11 August 2021, 15:35:38 UTC
7f88aea bpo-44854: Add .editorconfig file to help enforce `make patchcheck` (GH-27638) (GH-27713) (cherry picked from commit c0ab59f7de1906feee21c057ad433fad924d1e38) Co-authored-by: Łukasz Langa <lukasz@langa.pl> 10 August 2021, 17:08:59 UTC
b019ffe bpo-44872: use new trashcan macros in framobject.c (GH-27683) (GH-27692) 10 August 2021, 07:55:46 UTC
0a42309 bpo-44856: Possible reference leak in error paths of update_bases() and __build_class__ (GH-27647) (GH-27652) (cherry picked from commit a40675c659cd8c0699f85ee9ac31660f93f8c2f5) Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com> 07 August 2021, 11:17:16 UTC
af441df Spell out 's.pop() or s.pop(i)' (GH-27398) (GH-27414) (cherry picked from commit 2ff5bb4908975976031ba738866de619cafadc4d) Co-authored-by: Dennis Sweeney <36520290+sweeneyde@users.noreply.github.com> 28 July 2021, 13:41:51 UTC
54d3871 bpo-30511: Add note on thread safety to shutil.make_archive() (GH-26933) (#27276) Co-authored-by: Łukasz Langa <lukasz@langa.pl> (cherry picked from commit 64f54b7ccd49764b0304e076bfd79b5482988f53) Co-authored-by: andrei kulakov <andrei.avk@gmail.com> 21 July 2021, 09:04:52 UTC
0389426 bpo-44022: Improve the regression test. (GH-26503) (#26506) It wasn't actually detecting the regression due to the assertion being too lenient. (cherry picked from commit e60ab843cbb016fb6ff8b4f418641ac05a9b2fcc) Co-authored-by: Gregory P. Smith <greg@krypto.org> 12 July 2021, 15:09:01 UTC
ae5dcf5 Post 3.8.11 28 June 2021, 10:11:14 UTC
c3ffbbd Python 3.8.11 28 June 2021, 10:08:34 UTC
634da2d [3.8] bpo-43882 - Mention urllib.parse changes in Whats new section. (#26277) 28 June 2021, 10:05:21 UTC
71ba16b bpo-44229: Ignore spurious EPROTOTYPE on macOS in test_ssl (GH-26893) (GH-26895) (cherry picked from commit b5a52eef67997246b4235b5407e52a01e822ce56) Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 24 June 2021, 14:34:34 UTC
af5fb67 bpo-38323: Skip SubprocessMultiLoopWatcherTest as they can hang the test suite (GH-26542) (GH-26670) (cherry picked from commit f171877ebe276749f31386baed5841ce37cbee2e) Co-authored-by: Pablo Galindo <Pablogsal@gmail.com> 12 June 2021, 17:45:10 UTC
4844abd [3.8] bpo-44061: Fix pkgutil.iter_modules regression when passed a pathlib.Path object (GH-25964). (GH-26056) (cherry picked from commit e9d7f88d5643f7e6387bf994c130503766d7eb92) Co-authored-by: Miguel Brito <5544985+miguendes@users.noreply.github.com> 12 May 2021, 10:18:07 UTC
378211f bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules (GH-26025) (#26028) 12 May 2021, 09:57:37 UTC
8a12f46 bpo-40297: Fix test_socket.CANTest.testSendFrame (GH-19548) (#25957) The address tuple for CAN_RAW no longer returns the address family after the introduction of CAN ISO-TP support in a30f6d45ac3. However, updating test_socket.CANTest.testSendFrame was missed as part of the change, so the test incorrectly attempts to index past the last tuple item to retrieve the address family. This removes the now-redundant check for equality against socket.AF_CAN, as the tuple will not contain the address family. (cherry picked from commit 355bae88822bee4de6092b63d69c5a5dad393a16) Co-authored-by: karl ding <karlding@users.noreply.github.com> 07 May 2021, 13:54:42 UTC
f396864 bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916) (#25933) Fixes http.client potential denial of service where it could get stuck reading lines from a malicious server after a 100 Continue response. Co-authored-by: Gregory P. Smith <greg@krypto.org> (cherry picked from commit 47895e31b6f626bc6ce47d175fe9d43c1098909d) Co-authored-by: Gen Xu <xgbarry@gmail.com> 06 May 2021, 08:52:26 UTC
515a7bc [3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595) (#25726) Co-authored-by: Gregory P. Smith <greg@krypto.org> Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> (cherry picked from commit 76cd81d60310d65d01f9d7b48a8985d8ab89c8b4) Co-authored-by: Senthil Kumaran <senthil@uthcode.com> Co-authored-by: Senthil Kumaran <skumaran@gatech.edu> 05 May 2021, 17:25:29 UTC
44f6b9a Post 3.8.10 03 May 2021, 14:01:33 UTC
705c615 Merge tag 'v3.8.10' into 3.8 Python 3.8.10 03 May 2021, 14:01:24 UTC
8ab272f bpo-42800: Add audit events for f_code and tb_frame (GH-24182) Accessing the following attributes will now fire PEP 578 style audit hooks as (object.__getattr__, obj, name): * PyTracebackObject: tb_frame * PyFrameObject: f_code * PyGenObject: gi_code, gi_frame * PyCoroObject: cr_code, cr_frame * PyAsyncGenObject: ag_code, ag_frame (cherry picked from commit bb2f3ff7a8f0c3565ccc1946dba7e09a3f7dc209) Co-authored-by: Steve Dower <steve.dower@python.org> 03 May 2021, 13:24:05 UTC
3d8993a Python 3.8.10 03 May 2021, 09:47:56 UTC
10665ac bpo-43434: Move sqlite3.connect audit events to sqlite3.Connection.__init__ (GH-25818) (cherry picked from commit c96cc089f60d2bf7e003c27413c3239ee9de2990) Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 02 May 2021, 22:55:33 UTC
db3ce79 bpo-32745: Fix a regression in the handling of ctypes' c_wchar_p type (GH-8721) (#25811) Embedded nulls would cause a ValueError to be raised. Thanks go to Eryk Sun for their analysis. Co-authored-by: Łukasz Langa <lukasz@langa.pl> (cherry picked from commit 73766b0341674f3920f4ea86a6f8288b801960f9) Co-authored-by: Zackery Spytz <zspytz@gmail.com> 02 May 2021, 11:03:23 UTC
78e5588 bpo-44009: Provide "python3.x-intel64" for Apple Silicon Macs (GH-25810) This allows reliably forcing macOS universal2 framework builds to run under Rosetta 2 Intel-64 emulation on Apple Silicon Macs if needed for testing or when universal2 wheels are not yet available. (cherry picked from commit 0cb33da1cc9cebb9b2d67d446feb1cfd36fe7f55) Co-authored-by: Ned Deily <nad@python.org> Automerge-Triggered-By: GH:ned-deily Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com> 02 May 2021, 10:55:04 UTC
b29d0a5 [3.8] bpo-41100: Support macOS 11 Big Sur and Apple Silicon Macs (#25806) * bpo-41100: Support macOS 11 and Apple Silicon on Python 3.8 This is a partial backport of bpo-41100 changes `e8b1c038b14b5fc8120aab62c9bf5fb840274cb6` and `96d906b144e6e6aa96c5ffebecbcc5d38034bbda` for Python 3.8. We introduce the ability to build Python from source for `arm64` on macOS, but we do not make a promise of support. This allows us to omit support for Universal2 binaries as well as weak-linking of symbols from the macOS SDK based on the deployment target, which are larger changes much more difficult to merge. This also includes a backport of subsequent bpo-42688 change `7e729978fa08a360cbf936dc215ba7dd25a06a08` to fix build errors with external `libffi`. * bpo-41116: Ensure system supplied libraries are found on macOS 11 (GH-23301) (GH-23455) On macOS system provided libraries are in a shared library cache and not at their usual location. This PR teaches distutils to search in the SDK, even if there was no "-sysroot" argument in the compiler flags. (cherry picked from commit 404a719b5127602c1a948f8e189ab61cd3f147d8) * bpo-42504: fix for MACOSX_DEPLOYMENT_TARGET=11 (GH-23556) macOS releases numbering has changed as of macOS 11 Big Sur. Previously, major releases were of the form 10.x, 10.x+1, 10.x+2, etc; as of Big Sur, they are now x, x+1, etc, so, for example, 10.15, 10.15.1, ..., 10.15.7, 11, 11.0.1, 11.1, ..., 12, 12.1, etc. Allow Python to build with single-digit deployment target values. Patch provided by FX Coudert. (cherry picked from commit 5291639e611dc3f55a34666036f2c3424648ba50) * bpo-42504: Ensure that get_config_var('MACOSX_DEPLOYMENT_TARGET') is a string (GH-24341) (GH-24410) * bpo-42504: Ensure that get_config_var('MACOSX_DEPLOYMENT_TARGET') is a string (cherry picked from commit 49926cf2bcc8b44d9b8f148d81979ada191dd9d5) Co-authored-by: Ronald Oussoren <ronaldoussoren@mac.com> Co-authored-by: FX Coudert <fxcoudert@gmail.com> Co-authored-by: Max Bélanger <aeromax@gmail.com> 02 May 2021, 09:18:58 UTC
d8ec61f Fix broken name in build.yml (GH-25759) (GH-25797) (cherry picked from commit 29282b2825545e2823bde94290a80f7c0fd7068e) 02 May 2021, 02:31:06 UTC
ce081fb Fix exceptions mentioned in os.setxattr() docs (GH-25742) (GH-25795) (cherry picked from commit 779232413a367cd3357482e675a5518de102a90e) Co-authored-by: Shreyash Sharma <shreyash.sharma@philips.com> Co-authored-by: Shreyash Sharma <shreyash.sharma@philips.com> 01 May 2021, 20:56:53 UTC
3519ac4 Fixing doc for callback for lambda (GH-25779) (GH-25789) Fixing callback for lambda when no return value is provided (cherry picked from commit 50c21ad35372983680b44130be560d856c5f27ca) Co-authored-by: Shreyash Sharma <shreyash.sharma@philips.com> Co-authored-by: Shreyash Sharma <shreyash.sharma@philips.com> 01 May 2021, 18:26:46 UTC
6034c4a [3.8] bpo-43993: Update vendored pip to 21.1.1 (GH-25761). (GH-25783) 01 May 2021, 15:50:07 UTC
606bb1c bpo-43971: Add spaces around annotated arg default '=' (GH-25702) Result: "quantity_on_hand: int = 0". (cherry picked from commit e726a902b7c73a7056b7421d801e47ffff255873) Co-authored-by: Mohamed Moselhy <look4d@gmail.com> Co-authored-by: Mohamed Moselhy <look4d@gmail.com> 01 May 2021, 00:31:00 UTC
e377ecf bpo-43935: Fix typo in Turtle.back() docstring (GH-25581) 'e ,' to 'e, '. (cherry picked from commit 0048c60f01deec4435748e851f9ec21b504d2d2f) Co-authored-by: Tarjei Bærland <tarjeibaerland@gmail.com> 30 April 2021, 22:35:45 UTC
ea6ec96 [3.8] bpo-42589: Change URL for 'from' link when used in a raised exc… (GH-25755) …eption (GH-23872) Links for 'raise Exception from x' target to 'The raise statement' (7.8) section instead of 'The import statement' (7.11) section. There are more modified links than in the bug report because I searched some other ones which can get the same improvement.. (cherry picked from commit 2fd928c8c1328424130cb9c51fc02ad5f9a66328) This PR is a cherry pick to python 3.8 from https://github.com/python/cpython/pull/23872. The fix was the removal of the change in the other file because the fixed section was introduced in 3.9. So the file does not need to be fixed in 3.8. Co-authored-by: sblondon <sblondon@users.noreply.github.com> Automerge-Triggered-By: GH:Mariatta 30 April 2021, 16:25:51 UTC
e010031 [doc] Be more clear on super() regarding multiple base classes methods (GH-21789) (GH-25707) (cherry picked from commit 69a733bda34d413d3ad545ef3132240e5d2a7c0c) Co-authored-by: Andre Delfino <adelfino@gmail.com> Co-authored-by: Andre Delfino <adelfino@gmail.com> 29 April 2021, 01:13:20 UTC
cc1dcb6 [doc] Do some polishing in IDEs section (GH-22070) (GH-25704) (cherry picked from commit 08a4803863856db47a1dde830e56f83e5c6811a2) Co-authored-by: Andre Delfino <adelfino@gmail.com> Co-authored-by: Andre Delfino <adelfino@gmail.com> 29 April 2021, 01:09:14 UTC
b52cc7c bpo-43960: test_pdb resets breakpoints to make tests deterministic (GH-25691) (GH-25692) (cherry picked from commit 2dc6b1789ec86dc80ea290fe33edd61140e47f6f) Co-authored-by: Irit Katriel <iritkatriel@yahoo.com> Co-authored-by: Irit Katriel <iritkatriel@yahoo.com> 28 April 2021, 15:43:01 UTC
ff7266e bpo-43959: clarify the documentation of the PyContextVar C-API (GH-25671) (GH-25690) (cherry picked from commit 4c49be766897968e509c41397e0e624c25b1675d) 28 April 2021, 15:11:53 UTC
77db337 bpo-43962: Fix _PyInterpreterState_IDIncref() (GH-25683) (GH-25686) _PyInterpreterState_IDIncref() now calls _PyInterpreterState_IDInitref() and always increments id_refcount. (cherry picked from commit 32c5a174445ec93747240cd8472012276ed27acf) 28 April 2021, 13:46:57 UTC
7f7cfc4 [3.8] bpo-43492: Upgrade Windows installer to use SQLite 3.35.5 (GH-25641) (cherry picked from commit bf0c7c0147b73738cac63eb27ef48430284ff121) Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 27 April 2021, 19:57:24 UTC
e013d8d bpo-43492: Update macOS installer to use SQLite 3.35.5 (GH-25640) (cherry picked from commit ce827816442613f982c356aa2f434c3c8a0c8917) Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no> 27 April 2021, 17:36:58 UTC
1d7a537 [doc] Remove duplicated operator.itemgetter example (GH-24178) (#25647) * Remove duplicated itemgetter example * Add spaces (cherry picked from commit 743e2bae10d2010fd1e29b772c9da64efc7c9c47) Co-authored-by: Andre Delfino <adelfino@gmail.com> 27 April 2021, 04:16:33 UTC
a808aab Use the zero argument form of super() in examples for Python3 docs. (GH-22314) (GH-25639) (cherry picked from commit 52cd6d5e1b2bece0d8efb58b1af41071c914ebe6) Co-authored-by: Andre Delfino <adelfino@gmail.com> 26 April 2021, 22:16:08 UTC
10ad7eb [3.8] bpo-28577: Special case added to IP v4 and v6 hosts for /32 and /128 networks (GH-18757) (#25536) The `.hosts()` method now returns the single address present in a /32 or /128 network.. (cherry picked from commit 8e9c47a947954c997d4b725f4551d50a1d896722) Co-authored-by: Pete Wicken <2273100+JamoBox@users.noreply.github.com> 26 April 2021, 19:57:04 UTC
196b8f3 Fix thread locks in zlib module may go wrong in rare case (#22132) Setting `next_in` before acquiring the thread lock may mix up compress/decompress state in other threads. 26 April 2021, 19:48:20 UTC
b570fea bpo-41661: Document os.path.relpath() exception on Windows with different drives (GH-25346) (#25367) (cherry picked from commit 67c0b3d89c4da9750fdb43fc66d3924681b22d2e) Co-authored-by: Zackery Spytz <zspytz@gmail.com> 26 April 2021, 19:46:14 UTC
2760a67 bpo-17305: Link to the third-party idna package. (GH-25208) (#25211) So long as we don't have idna2008 in the standard library, we should at least point people to the third-party solution. (cherry picked from commit 1d023e374cf96d143b065242131ddc9b889f9a1e) Co-authored-by: Gregory P. Smith <greg@krypto.org> 26 April 2021, 19:45:45 UTC
727bed6 [3.8] bpo-34463: Make python tracebacks identical to C tracebacks for (#23899) * [3.8] bpo-34463: Make python tracebacks identical to C tracebacks for SyntaxErrors without a lineno (GH-23427) (cherry picked from commit 069560b1171eb6385121ff3b6331e8814a4e7454) Co-authored-by: Irit Katriel <iritkatriel@yahoo.com> * 📜🤖 Added by blurb_it. * added missing newline in test Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com> 26 April 2021, 19:42:40 UTC
e1203e8 bpo-42924: Fix incorrect copy in bytearray_repeat (GH-24208) (#24212) Before, using the * operator to repeat a bytearray would copy data from the start of the internal buffer (ob_bytes) and not from the start of the actual data (ob_start). (cherry picked from commit 61d8c54f43a7871d016f98b38f86858817d927d5) Co-authored-by: Tobias Holl <TobiasHoll@users.noreply.github.com> 26 April 2021, 19:40:38 UTC
back to top