Created by Ubuntu Package Importer and last modified
Get this branch:
bzr branch lp:ubuntu/natty-security/python3.1
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Ubuntu branches
Review team:
Ubuntu Development Team

Recent revisions

27. By Jamie Strandboge on 2012-10-23

* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
  - CVE-2012-0845
* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: http://bugs.python.org/issue14579
  - debian/patches/CVE-2012-2135.diff: fix vulnerability in the utf-16
    decoder after error handling
  - CVE-2012-2135

26. By Jamie Strandboge on 2011-12-09

* SECURITY UPDATE: only process Location headers for http, https, and ftp
  - http://bugs.python.org/issue11662
  - CVE-2011-1521

25. By Matthias Klose on 2011-03-25

Search libraries in multiarch directories too. LP: #738213.

24. By Matthias Klose on 2010-11-28

* Python 3.1.3 release.
  - Issue #10391: Don't dereference invalid memory in error messages
    in the ast module.
  - Issue #10459: Update CJK character names to Unicode 5.1.
  - Issue #10092: Properly reset locale in calendar.Locale*Calendar classes.
  - Issue #6098: Don't claim DOM level 3 conformance in minidom.
  - Issue #5762: Fix AttributeError raised by ``xml.dom.minidom`` when
    an empty XML namespace attribute is encountered.
  - Issue #1710703: Write structures for an empty ZIP archive when a ZipFile
    is created in modes 'a' or 'w' and then closed without adding any files.
    Raise BadZipfile (rather than IOError) when opening small non-ZIP files.
  - Issue #4493: urllib.request adds '/' in front of path components which
    does not start with '/. Common behavior exhibited by browsers and other
  - Issue #6378: idle.bat now runs with the appropriate Python version
    rather than the system default. Patch by Sridhar Ratnakumar.
  - Issue #10407: Fix two NameErrors in distutils.
  - Issue #10198: fix duplicate header written to wave files when
    writeframes() is called without data.
  - Issue #10467: Fix BytesIO.readinto() after seeking into a position after
    the end of the file.
  - Issue #1682942: configparser supports alternative option/value delimiters.
  - Backport r83399 to allow test_distutils to pass on installed versions.
  - Accept Oracle Berkeley DB 4.8, 5.0 and 5.1 as backend for the dbm
  - Issue #10299: List the built-in functions in a table in functions.rst.

23. By Matthias Klose on 2010-11-14

* Python 3.1.3 release candidate 1.
  - Issue #10221: dict.pop(k) now has a key error message that includes the
    missing key (same message d[k] returns for missing keys).
  - Issue #5437: A preallocated MemoryError instance should not hold
    traceback data (including local variables caught in the stack trace)
    alive infinitely.
  - Issue #10077: Fix logging of site module errors at startup.
  - Issue #10186: Fix the SyntaxError caret when the offset is equal
    to the length of the offending line.
  - Issue #9713, #10114: Parser functions (eg. PyParser_ASTFromFile) expects
    filenames encoded to the filesystem encoding with surrogateescape error
    handler (to support undecodable bytes), instead of UTF-8 in strict mode.
  - Issue #9997: Don't let the name "top" have special significance in scope
  - Issue #10068: Global objects which have reference cycles with
    their module's dict are now cleared again.
  - Issue #4471: Properly shutdown socket in IMAP.shutdown().
  - Fix IMAP.login() to work properly.
  - Issue #10126: Fix distutils' test_build when Python was built with
  - Fix typo in one sdist option (medata-check).
  - Issue #9199: Fix incorrect use of distutils.cmd.Command.announce.
  - Issue #1718574: Fix options that were supposed to accept arguments but did
    not in build_clib.
  - Issue #9281: Prevent race condition with mkdir in distutils.
  - Issue #10229: Fix caching error in gettext.
  - Issue #10252: Close file objects in a timely manner in distutils code and
  - Issue #10311: The signal module now restores errno before returning from
    its low-level signal handler.
  - The keyword only restriction for the places argument in
    unittest.TestCase.assert[Not]AlmostEqual methods has been removed.
  - Issue 6706: asyncore accept() method no longer raises
    EWOULDBLOCK/ECONNABORTED on incomplete connection attempt but returns
    None instead.
  - Issue #10266: uu.decode didn't close in_file explicitly when it was given
    as a filename.
  - Issue #10246: uu.encode didn't close file objects explicitly when
    filenames were given to it.
  - Issue #10253: FileIO leaks a file descriptor when trying to open a file
    for append that isn't seekable.
  - Issue #5027: The standard ``xml`` namespace is now understood by
    xml.sax.saxutils.XMLGenerator as being bound to
  - Issue #5117: Case normalization was needed on ntpath.relpath(). And
    fixed root directory issue on posixpath.relpath(). (Ported working fixes
    from ntpath)
  - Issue #10041: The signature of optional arguments in socket.makefile()
    didn't match that of io.open(), and they also didn't get forwarded
    properly to TextIOWrapper in text mode.
  - Issue #6612: Fix site and sysconfig to catch os.getcwd() error, eg. if the
    current directory was deleted.
  - Issue #9054: Fix a crash occurring when using the pyexpat module
    with expat version 2.0.1.
* Move the Makefile into the -min package, required by sysconfig.
  Addresses: #603237.

22. By Matthias Klose on 2010-10-12

* Update to the 3.1 release branch, 20101012.
  - Issue #10006: type.__abstractmethods__ now raises an AttributeError.
    As a result metaclasses can now be ABCs (see #9533).
  - Issue #9759: GzipFile now raises ValueError when an operation is
    attempted after the file is closed.
  - Issue #9042: Fix interaction of custom translation classes and caching
    in gettext.
  - Issue #9065: tarfile no longer uses "root" as the default for the uname
    and gname field.
  - Issue #8980: Fixed a failure in distutils.command check that was shadowed
    by an environment that does not have docutils.
  - Issue #1050268: parseaddr now correctly quotes double quote and backslash
    characters that appear inside quoted strings in email addresses.
  - Issue #10004: quoprimime no longer generates a traceback when confronted
    with invalid characters after '=' in a Q-encoded word.
  - Issue #9950: Fix socket.sendall() crash or misbehaviour when a signal is
    received. Now sendall() properly calls signal handlers if necessary,
    and retries sending if these returned successfully, including on sockets
    with a timeout.
  - Issue #10003: Allow handling of SIGBREAK on Windows. Fixes a regression
    introduced by issue #9324.
  - Issue #10054: Some platforms provide uintptr_t in inttypes.h.
  - Issue #10055: Make json C89-compliant in UCS4 mode.
  - Issue #6244: Allow detect_tkinter to look for Tcl/Tk 8.6.

21. By Matthias Klose on 2010-09-17

Disable test_threading test on powerpc, which fail on the buildds.

20. By Matthias Klose on 2010-09-16

Fix typo in last patch.

19. By Matthias Klose on 2010-09-16

Assume working semaphores, don't rely on running kernel for the check.
LP: #630511.

18. By Matthias Klose on 2010-09-15

* Update to the 3.1 release branch, 20100915.
* Add copyright information for expat, libffi and zlib. Addresses: #596276.
* Apply proposed fix for issue 9054, configure --with-system-expat.
* Provide Lib/plat-gnukfreebsd[78] (Jakub Wilk). Addresses: #593818.

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
This branch contains Public information 
Everyone can see this information.