lp:ubuntu/natty-security/python3.1

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

27. By Jamie Strandboge on 2012-10-23

* SECURE UPDATE: http://bugs.python.org/issue13512
  - debian/patches/CVE-2011-4944.diff: create ~/.pypirc securely
  - CVE-2011-4944
* SECURITY UPDATE: xmlrpc: Fix an endless loop in SimpleXMLRPCServer upon
  malformed POST request
  - debian/patches/CVE-2012-0845.diff: break if don't receive EOF in
    Lib/SimpleXMLRPCServer.py
  - CVE-2012-0845
* SECURITY UPDATE: fix hash randomization DoS
  - debian/patches/CVE-2012-1150.diff: add -R command-line option and
    PYTHONHASHSEED environment variable, to provide an opt-in way to protect
    against denial of service attacks due to hash collisions within the dict
    and set types.
  - CVE-2012-1150
* SECURITY UPDATE: http://bugs.python.org/issue14579
  - debian/patches/CVE-2012-2135.diff: fix vulnerability in the utf-16
    decoder after error handling
  - CVE-2012-2135

26. By Jamie Strandboge on 2011-12-09

* SECURITY UPDATE: only process Location headers for http, https, and ftp
  - http://bugs.python.org/issue11662
  - CVE-2011-1521

25. By Matthias Klose on 2011-03-25

Search libraries in multiarch directories too. LP: #738213.

24. By Matthias Klose on 2010-11-28

* Python 3.1.3 release.
  - Issue #10391: Don't dereference invalid memory in error messages
    in the ast module.
  - Issue #10459: Update CJK character names to Unicode 5.1.
  - Issue #10092: Properly reset locale in calendar.Locale*Calendar classes.
  - Issue #6098: Don't claim DOM level 3 conformance in minidom.
  - Issue #5762: Fix AttributeError raised by ``xml.dom.minidom`` when
    an empty XML namespace attribute is encountered.
  - Issue #1710703: Write structures for an empty ZIP archive when a ZipFile
    is created in modes 'a' or 'w' and then closed without adding any files.
    Raise BadZipfile (rather than IOError) when opening small non-ZIP files.
  - Issue #4493: urllib.request adds '/' in front of path components which
    does not start with '/. Common behavior exhibited by browsers and other
    clients.
  - Issue #6378: idle.bat now runs with the appropriate Python version
    rather than the system default. Patch by Sridhar Ratnakumar.
  - Issue #10407: Fix two NameErrors in distutils.
  - Issue #10198: fix duplicate header written to wave files when
    writeframes() is called without data.
  - Issue #10467: Fix BytesIO.readinto() after seeking into a position after
    the end of the file.
  - Issue #1682942: configparser supports alternative option/value delimiters.
  - Backport r83399 to allow test_distutils to pass on installed versions.
  - Accept Oracle Berkeley DB 4.8, 5.0 and 5.1 as backend for the dbm
    extension.
  - Issue #10299: List the built-in functions in a table in functions.rst.

23. By Matthias Klose on 2010-11-14

* Python 3.1.3 release candidate 1.
  - Issue #10221: dict.pop(k) now has a key error message that includes the
    missing key (same message d[k] returns for missing keys).
  - Issue #5437: A preallocated MemoryError instance should not hold
    traceback data (including local variables caught in the stack trace)
    alive infinitely.
  - Issue #10077: Fix logging of site module errors at startup.
  - Issue #10186: Fix the SyntaxError caret when the offset is equal
    to the length of the offending line.
  - Issue #9713, #10114: Parser functions (eg. PyParser_ASTFromFile) expects
    filenames encoded to the filesystem encoding with surrogateescape error
    handler (to support undecodable bytes), instead of UTF-8 in strict mode.
  - Issue #9997: Don't let the name "top" have special significance in scope
    resolution.
  - Issue #10068: Global objects which have reference cycles with
    their module's dict are now cleared again.
  - Issue #4471: Properly shutdown socket in IMAP.shutdown().
  - Fix IMAP.login() to work properly.
  - Issue #10126: Fix distutils' test_build when Python was built with
    --enable-shared.
  - Fix typo in one sdist option (medata-check).
  - Issue #9199: Fix incorrect use of distutils.cmd.Command.announce.
  - Issue #1718574: Fix options that were supposed to accept arguments but did
    not in build_clib.
  - Issue #9281: Prevent race condition with mkdir in distutils.
  - Issue #10229: Fix caching error in gettext.
  - Issue #10252: Close file objects in a timely manner in distutils code and
    tests.
  - Issue #10311: The signal module now restores errno before returning from
    its low-level signal handler.
  - The keyword only restriction for the places argument in
    unittest.TestCase.assert[Not]AlmostEqual methods has been removed.
  - Issue 6706: asyncore accept() method no longer raises
    EWOULDBLOCK/ECONNABORTED on incomplete connection attempt but returns
    None instead.
  - Issue #10266: uu.decode didn't close in_file explicitly when it was given
    as a filename.
  - Issue #10246: uu.encode didn't close file objects explicitly when
    filenames were given to it.
  - Issue #10253: FileIO leaks a file descriptor when trying to open a file
    for append that isn't seekable.
  - Issue #5027: The standard ``xml`` namespace is now understood by
    xml.sax.saxutils.XMLGenerator as being bound to
    http://www.w3.org/XML/1998/namespace.
  - Issue #5117: Case normalization was needed on ntpath.relpath(). And
    fixed root directory issue on posixpath.relpath(). (Ported working fixes
    from ntpath)
  - Issue #10041: The signature of optional arguments in socket.makefile()
    didn't match that of io.open(), and they also didn't get forwarded
    properly to TextIOWrapper in text mode.
  - Issue #6612: Fix site and sysconfig to catch os.getcwd() error, eg. if the
    current directory was deleted.
  - Issue #9054: Fix a crash occurring when using the pyexpat module
    with expat version 2.0.1.
* Move the Makefile into the -min package, required by sysconfig.
  Addresses: #603237.

22. By Matthias Klose on 2010-10-12

* Update to the 3.1 release branch, 20101012.
  - Issue #10006: type.__abstractmethods__ now raises an AttributeError.
    As a result metaclasses can now be ABCs (see #9533).
  - Issue #9759: GzipFile now raises ValueError when an operation is
    attempted after the file is closed.
  - Issue #9042: Fix interaction of custom translation classes and caching
    in gettext.
  - Issue #9065: tarfile no longer uses "root" as the default for the uname
    and gname field.
  - Issue #8980: Fixed a failure in distutils.command check that was shadowed
    by an environment that does not have docutils.
  - Issue #1050268: parseaddr now correctly quotes double quote and backslash
    characters that appear inside quoted strings in email addresses.
  - Issue #10004: quoprimime no longer generates a traceback when confronted
    with invalid characters after '=' in a Q-encoded word.
  - Issue #9950: Fix socket.sendall() crash or misbehaviour when a signal is
    received. Now sendall() properly calls signal handlers if necessary,
    and retries sending if these returned successfully, including on sockets
    with a timeout.
  - Issue #10003: Allow handling of SIGBREAK on Windows. Fixes a regression
    introduced by issue #9324.
  - Issue #10054: Some platforms provide uintptr_t in inttypes.h.
  - Issue #10055: Make json C89-compliant in UCS4 mode.
  - Issue #6244: Allow detect_tkinter to look for Tcl/Tk 8.6.

21. By Matthias Klose on 2010-09-17

Disable test_threading test on powerpc, which fail on the buildds.

20. By Matthias Klose on 2010-09-16

Fix typo in last patch.

19. By Matthias Klose on 2010-09-16

Assume working semaphores, don't rely on running kernel for the check.
LP: #630511.

18. By Matthias Klose on 2010-09-15

* Update to the 3.1 release branch, 20100915.
* Add copyright information for expat, libffi and zlib. Addresses: #596276.
* Apply proposed fix for issue 9054, configure --with-system-expat.
* Provide Lib/plat-gnukfreebsd[78] (Jakub Wilk). Addresses: #593818.