| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Blurb release and pydoc topics for 3.4.7 final. | Larry Hastings | 2017-08-09 | 1 | -12863/+78 |
| | | |||||
| * | [3.4] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal ↵ | Dong-hee Na | 2017-07-27 | 2 | -1/+7 |
| | | | | | command (#1214) (#2893) | ||||
| * | Update pydoc topics and susp-ignored for 3.4.7rc1. | Larry Hastings | 2017-07-24 | 1 | -78/+12863 |
| | | |||||
| * | [3.4] Backport CI config from master (#2475) | Victor Stinner | 2017-07-22 | 3 | -15/+9 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Issues #23808, #25911: Trying to fix walk tests on Windows. On Windows a symlink can has the FILE_ATTRIBUTE_DIRECTORY flag. (cherry picked from commit 388b90f28e029daaf06aae8026b596e2f20a1cd3) * bpo-30231: Remove skipped test_imaplib tests (#1419) (#2193) The public cyrus.andrew.cmu.edu IMAP server (port 993) doesn't accept TLS connection using our self-signed x509 certificate. Remove the two tests which are already skipped. (cherry picked from commit 7895a0585b4b6a1c8082d17227307c6ce2c8bb8b) * Backport CI config from master * Add .travis.yml for Travis CI * Add .github/ for AppVeyor and CodeCov. * Travis CI: remove "make regen-all" check The regen-all Makefile rule doesn't exist in Python 3.4, only since Python 3.5 and newer (and 2.7). * appveyor: replace --slowest with --slow * Travis CI: remove the GCC coverage job * Travis CI: remove tzdata resource from regrtest tzdata resource doesn't exist in Python 3.4. * Travis CI: remove the doc job Fixing Sphinx warnings requires to backport huge intrusive changes like: - commit d97b7dc94b19063f0589d401bdc4aaadc7030762 - commit 5c6793394066b012b9674681b0815667938ce4d9 * appveyor: set version to 3.4.6+ * bpo-30730: Fix test_os tests. Fix test_invalid_cmd() and test_invalid_env(), TypeError is raised on Python 3.4. (cherry picked from commit 5e22721e586344b547194f0f7ea67fd425f94e72) | ||||
| * | [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. ↵ | Serhiy Storchaka | 2017-07-22 | 1 | -0/+8 |
| | | | | | | | | | | (#2695) * [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (cherry picked from commit 8f657c35b978b681e6e919f08358992e1aed7dc1) * Rewrite a NEWS entry as a NEWS.d entry. | ||||
| * | bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) | Victor Stinner | 2017-07-12 | 2 | -3/+22 |
| | | | | | | | Based on patch by Philipp Hagemeister. This fixes a regression caused by revision f4377699fd47. (cherry picked from commit d274b3f1f1e2d8811733fb952c9f18d7da3a376a) | ||||
| * | bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2291) | Victor Stinner | 2017-07-12 | 2 | -13/+40 |
| | | | | | | | | | | The current regex based splitting produces a wrong result. For example:: http://abc#@def Web browsers parse that URL as ``http://abc/#@def``, that is, the host is ``abc``, the path is ``/``, and the fragment is ``#@def``. (cherry picked from commit 90e01e50ef8a9e6c91f30d965563c378a4ad26de) | ||||
| * | [3.4] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) ↵ | Serhiy Storchaka | 2017-07-11 | 1 | -0/+86 |
| | | | | | | | | (GH-1678) (#2248) Based on patches by Duane Griffin and Tim Mitchell. (cherry picked from commit 753bca3934a7618a4fa96e107ad1c5c18633a683). (cherry picked from commit 2f7f533cf6fb57fcedcbc7bd454ac59fbaf2c655) | ||||
| * | [security][3.4] bpo-30730: Prevent environment variables injection in ↵ | Serhiy Storchaka | 2017-07-11 | 2 | -2/+46 |
| | | | | | | | | | | | | subprocess on Windows. (GH-2325) (#2362) * [3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) Prevent passing other invalid environment variables and command arguments.. (cherry picked from commit d174d24a5d37d1516b885dc7c82f71ecd5930700) * Update NEWS | ||||
| * | Issues #27850 and #27766: Remove 3DES from ssl default cipher list and add ↵ | Victor Stinner | 2017-03-10 | 1 | -15/+21 |
| | | | | | | | | ChaCha20 Poly1305. (#224) Backport: replace 3.5.3 with 3.4.7 in the doc versionchanged. (cherry picked from commit 03d13c0cbfe912eb0f9b9a02987b9e569f25fe19) | ||||
| * | Regenerated pydoc topics for 3.4.6rc1. (Also fixed doc error, improved build.) | Larry Hastings | 2017-01-02 | 1 | -1/+1 |
| | | |||||
| * | Fix test failure so it's no longer dependent on example.com. | Larry Hastings | 2017-01-02 | 1 | -1/+1 |
| | | |||||
| * | Upgrade pip to 9.0.1 and setuptools to 28.8.0 | Donald Stufft | 2016-11-16 | 3 | -2/+2 |
| | | |||||
| * | Issue #28563: Make plural form selection more lenient and accepting | Serhiy Storchaka | 2016-11-14 | 2 | -8/+20 |
| |\ | | | | | | | non-integer numbers. Django tests depend on this. | ||||
| | * | Issue #28563: Make plural form selection more lenient and accepting | Serhiy Storchaka | 2016-11-14 | 2 | -8/+20 |
| | | | | | | | | | non-integer numbers. Django tests depend on this. | ||||
| * | | Issue #28563: Fixed possible DoS and arbitrary code execution when handle | Serhiy Storchaka | 2016-11-08 | 2 | -45/+212 |
| |\ \ | |/ | | | | | | | plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. | ||||
| | * | Issue #28563: Fixed possible DoS and arbitrary code execution when handle | Serhiy Storchaka | 2016-11-08 | 2 | -45/+212 |
| | | | | | | | | | | | plural form selections in the gettext module. The expression parser now supports exact syntax supported by GNU gettext. | ||||
| * | | Upgrade pip to 9.0 and setuptools to 28.7.1 | Donald Stufft | 2016-11-02 | 4 | -2/+2 |
| | | | |||||
| * | | Issue #27759: Fix selectors incorrectly retain invalid file descriptors. | Yury Selivanov | 2016-10-06 | 2 | -9/+40 |
| | | | | | | | | | (Backported to 3.4 as this bug might be exploited to for DoS) | ||||
| * | | Upgrade setuptools to 27.1.2 | Donald Stufft | 2016-09-09 | 2 | -1/+1 |
| | | | |||||
| * | | Upgrade setuptools to 27.1.1 | Donald Stufft | 2016-09-09 | 2 | -1/+1 |
| | | | |||||
| * | | Issue #27960: Revert state to 675e20c38fdac6, backing out all changes by ↵ | Jason R. Coombs | 2016-09-06 | 1 | -2/+5 |
| | | | | | | | | | developed for Issue #12885. | ||||
| * | | Issue #12885: Revert commits in 3.4 branch which is security-only fixes. | Jason R. Coombs | 2016-09-02 | 2 | -67/+29 |
| | | | |||||
| * | | Backed out changeset cc86e9e102e8 | Jason R. Coombs | 2016-09-02 | 1 | -2/+9 |
| | | | |||||
| * | | Issue #12285: Replace implementation of findall with implementation from ↵ | Jason R. Coombs | 2015-09-19 | 1 | -27/+21 |
| | | | | | | | | | Setuptools 7ce820d524db. | ||||
| * | | Sort result to avoid spurious errors due to order. | Jason R. Coombs | 2015-08-30 | 1 | -2/+2 |
| | | | |||||
| * | | Add docstring and additional test revealing nuances of the implementation as ↵ | Jason R. Coombs | 2015-09-19 | 1 | -0/+16 |
| | | | | | | | | | found in setuptools. | ||||
| * | | Add another test capturing the basic discovery expectation. | Jason R. Coombs | 2015-08-30 | 1 | -0/+11 |
| | | | |||||
| * | | Issue #12285: Add test capturing failure. | Jason R. Coombs | 2015-08-30 | 1 | -0/+10 |
| | | | |||||
| * | | Use modern mechanism for test discovery | Jason R. Coombs | 2015-08-30 | 1 | -5/+2 |
| | | | |||||
| * | | fail when negative values are passed to instr() | Benjamin Peterson | 2016-08-16 | 1 | -0/+2 |
| | | | |||||
| * | | Update setuptools/pip to 25.2.0/8.1.2 | Donald Stufft | 2016-08-14 | 3 | -2/+2 |
| | | | |||||
| * | | do not allow reading negative values with getstr() | Benjamin Peterson | 2016-08-14 | 1 | -0/+3 |
| | | | |||||
| * | | Issue #20160: Merged fix from 3.3. | Vinay Sajip | 2016-08-05 | 1 | -0/+35 |
| |\ \ | |/ | |||||
| | * | Issue #20160: Handled passing of large structs to callbacks correctly. | Vinay Sajip | 2016-08-05 | 1 | -0/+35 |
| | | | |||||
| * | | Merge 3.3 | Donald Stufft | 2016-08-03 | 3 | -5/+5 |
| |\ \ | |/ | |||||
| | * | Switch upload.pypi.io to upload.pypi.org | Donald Stufft | 2016-08-03 | 3 | -4/+4 |
| | | | |||||
| * | | [merge from 3.3] Prevent HTTPoxy attack (CVE-2016-1000110) | Senthil Kumaran | 2016-07-31 | 2 | -0/+20 |
| |\ \ | |/ | | | | | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. | ||||
| | * | Prevent HTTPoxy attack (CVE-2016-1000110) | Senthil Kumaran | 2016-07-31 | 2 | -0/+20 |
| | | | | | | | | | | | | | | | Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. Issue #27568 Reported and patch contributed by Rémi Rampin. | ||||
| * | | Issue #27369: Merge test_pyexpat from 3.3 into 3.4 | Martin Panter | 2016-07-14 | 1 | -4/+2 |
| |\ \ | |/ | |||||
| | * | Issue #27369: Merge test_pyexpat from 3.2 into 3.3 | Martin Panter | 2016-07-14 | 1 | -4/+2 |
| | |\ | |||||
| | | * | Issue #27369: Don’t test error message detail that changed in Expat 2.2.03.2 | Martin Panter | 2016-07-14 | 1 | -4/+2 |
| | | | | |||||
| | | * | #22758: fix regression in handling of secure cookies. | R David Murray | 2016-07-10 | 2 | -11/+58 |
| | | | | | | | | | | | | | | | | This backports the fix from #16611, per discussion with the release manager. | ||||
| | * | | Switch to the new upload url for PyPI | Donald Stufft | 2016-07-06 | 3 | -4/+4 |
| | | | | |||||
| | * | | Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. | Serhiy Storchaka | 2015-12-02 | 1 | -0/+17 |
| | | | | |||||
| * | | | Switch to the new upload url for PyPI | Donald Stufft | 2016-07-06 | 3 | -5/+5 |
| | | | | |||||
| * | | | Regenerate pydoc topics for 3.4.5 final. | Larry Hastings | 2016-06-25 | 1 | -1/+1 |
| | | | | |||||
| * | | | Issue #26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. | Matthias Klose | 2016-06-13 | 1 | -1/+2 |
| | | | | |||||
| * | | | Regenerate pydoc topics for 3.4.5rc1. | Larry Hastings | 2016-06-12 | 1 | -2/+2 |
| | | | | |||||
| * | | | raise an error when STARTTLS fails | Benjamin Peterson | 2016-06-11 | 1 | -0/+5 |
| | | | | |||||
