~ubuntu-branches/ubuntu/natty/python3.1/natty-security : changes

~ubuntu-branches/ubuntu/natty/python3.1/natty-security » Changes from revision 27

From Revision 27 to 8

Rev	Summary	Authors	Tags	Date
27	* SECURE UPDATE: http://bugs.python.org/issue13512 * SECURE UPDATE: http://bugs.python.org/issue13512 - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely - CVE-2011-4944 * SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon malformed POST request - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in Lib/SimpleXMLRPCServer.py - CVE-2012-0845 * SECURITY UPDATE: fix hash randomization DoS - debian/patches/CVE-2012-1150.diff: add -R command-line option and PYTHONHASHSEED environment variable, to provide an opt-in way to protect against denial of service attacks due to hash collisions within the dict and set types. - CVE-2012-1150 * SECURITY UPDATE: http://bugs.python.org/issue14579 - debian/patches/CVE-2012-2135.diff: fix vulnerability in the utf-16 decoder after error handling - CVE-2012-2135	Jamie Strandboge	3.1.3-1ubuntu1.2	11 years ago
26	* SECURITY UPDATE: only process Location headers for http, h... * SECURITY UPDATE: only process Location headers for http, https, and ftp - http://bugs.python.org/issue11662 - CVE-2011-1521	Jamie Strandboge	3.1.3-1ubuntu1.1	12 years ago
25	Search libraries in multiarch directories too. LP: #738213. Search libraries in multiarch directories too. LP: #738213.	Matthias Klose	3.1.3-1ubuntu1	13 years ago
24	* Python 3.1.3 release. * Python 3.1.3 release. - Issue #10391: Don't dereference invalid memory in error messages in the ast module. - Issue #10459: Update CJK character names to Unicode 5.1. - Issue #10092: Properly reset locale in calendar.Locale*Calendar classes. - Issue #6098: Don't claim DOM level 3 conformance in minidom. - Issue #5762: Fix AttributeError raised by ``xml.dom.minidom`` when an empty XML namespace attribute is encountered. - Issue #1710703: Write structures for an empty ZIP archive when a ZipFile is created in modes 'a' or 'w' and then closed without adding any files. Raise BadZipfile (rather than IOError) when opening small non-ZIP files. - Issue #4493: urllib.request adds '/' in front of path components which does not start with '/. Common behavior exhibited by browsers and other clients. - Issue #6378: idle.bat now runs with the appropriate Python version rather than the system default. Patch by Sridhar Ratnakumar. - Issue #10407: Fix two NameErrors in distutils. - Issue #10198: fix duplicate header written to wave files when writeframes() is called without data. - Issue #10467: Fix BytesIO.readinto() after seeking into a position after the end of the file. - Issue #1682942: configparser supports alternative option/value delimiters. - Backport r83399 to allow test_distutils to pass on installed versions. - Accept Oracle Berkeley DB 4.8, 5.0 and 5.1 as backend for the dbm extension. - Issue #10299: List the built-in functions in a table in functions.rst.	Matthias Klose	3.1.3-1	13 years ago
23	* Python 3.1.3 release candidate 1. * Python 3.1.3 release candidate 1. - Issue #10221: dict.pop(k) now has a key error message that includes the missing key (same message d[k] returns for missing keys). - Issue #5437: A preallocated MemoryError instance should not hold traceback data (including local variables caught in the stack trace) alive infinitely. - Issue #10077: Fix logging of site module errors at startup. - Issue #10186: Fix the SyntaxError caret when the offset is equal to the length of the offending line. - Issue #9713, #10114: Parser functions (eg. PyParser_ASTFromFile) expects filenames encoded to the filesystem encoding with surrogateescape error handler (to support undecodable bytes), instead of UTF-8 in strict mode. - Issue #9997: Don't let the name "top" have special significance in scope resolution. - Issue #10068: Global objects which have reference cycles with their module's dict are now cleared again. - Issue #4471: Properly shutdown socket in IMAP.shutdown(). - Fix IMAP.login() to work properly. - Issue #10126: Fix distutils' test_build when Python was built with --enable-shared. - Fix typo in one sdist option (medata-check). - Issue #9199: Fix incorrect use of distutils.cmd.Command.announce. - Issue #1718574: Fix options that were supposed to accept arguments but did not in build_clib. - Issue #9281: Prevent race condition with mkdir in distutils. - Issue #10229: Fix caching error in gettext. - Issue #10252: Close file objects in a timely manner in distutils code and tests. - Issue #10311: The signal module now restores errno before returning from its low-level signal handler. - The keyword only restriction for the places argument in unittest.TestCase.assert[Not]AlmostEqual methods has been removed. - Issue 6706: asyncore accept() method no longer raises EWOULDBLOCK/ECONNABORTED on incomplete connection attempt but returns None instead. - Issue #10266: uu.decode didn't close in_file explicitly when it was given as a filename. - Issue #10246: uu.encode didn't close file objects explicitly when filenames were given to it. - Issue #10253: FileIO leaks a file descriptor when trying to open a file for append that isn't seekable. - Issue #5027: The standard ``xml`` namespace is now understood by xml.sax.saxutils.XMLGenerator as being bound to http://www.w3.org/XML/1998/namespace. - Issue #5117: Case normalization was needed on ntpath.relpath(). And fixed root directory issue on posixpath.relpath(). (Ported working fixes from ntpath) - Issue #10041: The signature of optional arguments in socket.makefile() didn't match that of io.open(), and they also didn't get forwarded properly to TextIOWrapper in text mode. - Issue #6612: Fix site and sysconfig to catch os.getcwd() error, eg. if the current directory was deleted. - Issue #9054: Fix a crash occurring when using the pyexpat module with expat version 2.0.1. * Move the Makefile into the -min package, required by sysconfig. Addresses: #603237.	Matthias Klose	3.1.3~rc1-1	13 years ago
22	* Update to the 3.1 release branch, 20101012. * Update to the 3.1 release branch, 20101012. - Issue #10006: type.__abstractmethods__ now raises an AttributeError. As a result metaclasses can now be ABCs (see #9533). - Issue #9759: GzipFile now raises ValueError when an operation is attempted after the file is closed. - Issue #9042: Fix interaction of custom translation classes and caching in gettext. - Issue #9065: tarfile no longer uses "root" as the default for the uname and gname field. - Issue #8980: Fixed a failure in distutils.command check that was shadowed by an environment that does not have docutils. - Issue #1050268: parseaddr now correctly quotes double quote and backslash characters that appear inside quoted strings in email addresses. - Issue #10004: quoprimime no longer generates a traceback when confronted with invalid characters after '=' in a Q-encoded word. - Issue #9950: Fix socket.sendall() crash or misbehaviour when a signal is received. Now sendall() properly calls signal handlers if necessary, and retries sending if these returned successfully, including on sockets with a timeout. - Issue #10003: Allow handling of SIGBREAK on Windows. Fixes a regression introduced by issue #9324. - Issue #10054: Some platforms provide uintptr_t in inttypes.h. - Issue #10055: Make json C89-compliant in UCS4 mode. - Issue #6244: Allow detect_tkinter to look for Tcl/Tk 8.6.	Matthias Klose	3.1.2+20101012-1	13 years ago
21	Disable test_threading test on powerpc, which fail on the bu... Disable test_threading test on powerpc, which fail on the buildds.	Matthias Klose	3.1.2+20100915-0ubuntu4	13 years ago
20	Fix typo in last patch. Fix typo in last patch.	Matthias Klose	3.1.2+20100915-0ubuntu3	13 years ago
19	Assume working semaphores, don't rely on running kernel for ... Assume working semaphores, don't rely on running kernel for the check. LP: #630511.	Matthias Klose	3.1.2+20100915-0ubuntu2	13 years ago
18	* Update to the 3.1 release branch, 20100915. * Update to the 3.1 release branch, 20100915. * Add copyright information for expat, libffi and zlib. Addresses: #596276. * Apply proposed fix for issue 9054, configure --with-system-expat. * Provide Lib/plat-gnukfreebsd[78] (Jakub Wilk). Addresses: #593818.	Matthias Klose	3.1.2+20100915-0ubuntu1	13 years ago
17	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Regenerate the control file.	Matthias Klose	3.1.2+20100707-1ubuntu1	13 years ago
16	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Regenerate the control file.	Matthias Klose	3.1.2+20100706-2ubuntu1	13 years ago
15	* Merge with Debian; remaining changes: * Merge with Debian; remaining changes: - Regenerate the control file. - Add debian/patches/overwrite-semaphore-check for Lucid buildds.	Matthias Klose	3.1.2+20100706-1ubuntu1	13 years ago
14	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - Add debian/patches/overwrite-semaphore-check for Lucid buildds	Scott Kitterman	3.1.2-3ubuntu1	13 years ago
13	* Overwrite the sem_open autoconf check, depending on a newe... * Overwrite the sem_open autoconf check, depending on a newer kernel version not available on the buildd. LP: #556477. * debian/patches/issue8032.dpatch: Update to version from the trunk. Upload for beta2 to avoid apport errors. - Handle PyFrameObject's: LP: #543624, #548723. - Detect cycles in object reference graph and add extra protection: LP: #544823, LP: #552356.	Matthias Klose	3.1.2-0ubuntu2	14 years ago
12	* Python 3.1.2 release. * Python 3.1.2 release. * Fix issue #4961: Inconsistent/wrong result of askyesno function in tkMessageBox with Tcl8.5. LP: #462950. * Don't complain when /usr/local is not writable on installation. * Apply proposed patch for issue #8032, gdb7 hooks for debugging. * Backport issue #8140: Extend compileall to compile single files. Add -i option.	Matthias Klose	3.1.2-0ubuntu1	14 years ago
11	Python 3.1.2 release candidate 1. Python 3.1.2 release candidate 1.	Matthias Klose	3.1.2~rc1-0ubuntu1	14 years ago
10	* Update to the 3.1 release branch, 20091102. * Update to the 3.1 release branch, 20091102. * distutils install: Don't install into /usr/local/local, if option --prefix=/usr/local is present. LP: #456917. * python3.1-doc: Fix searching in local documentation. LP: #456025.	Matthias Klose	3.1.1-1ubuntu1	14 years ago
9	* Update to the 3.1 release branch, 20091011. * Update to the 3.1 release branch, 20091011. * Remove /usr/local/lib/python3.1 on package removal, if empty. * Build _hashlib as a builtin. LP: #445530. * python3.1-doc: Don't compress the sphinx inventory. * python3.1-doc: Fix jquery.js symlink. LP: #447370. * Run the benchmark with -C 2 -n 5 -w 4 on all architectures. * python3.1-dbg: Don't create debug subdirectory in /usr/local. No separate debug directory needed anymore.	Matthias Klose	3.1.1-0ubuntu4	14 years ago
8	* Update to the 3.1 release branch, 20090913. * Update to the 3.1 release branch, 20090913. * Fix title of devhelp document. LP: #423551.	Matthias Klose	3.1.1-0ubuntu3	14 years ago

Older »