Staging
v0.5.1
https://github.com/python/cpython

sort by:
Revision Author Date Message Commit Date
72995c5 bpo-38623: Doc: Add section for site module CLI. (GH-17858) (cherry picked from commit ca94677a6216e2d41b04574986ce49d31a0b329c) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 07 January 2020, 08:04:32 UTC
3218520 Doc: Change Python 2 status to EOL. (GH-17885) (cherry picked from commit f4800b8ed3dbe15a0078869a836d968ab3362b8c) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 07 January 2020, 06:58:19 UTC
676b16c bpo-39041: Fix coverage upload command for GitHub Actions (GH-17873) https://bugs.python.org/issue39041 Automerge-Triggered-By: @zooba (cherry picked from commit b1ce22d086660d2505010694c8813cc67adf8f9e) Co-authored-by: Steve Dower <steve.dower@python.org> 06 January 2020, 21:42:37 UTC
acf5e5f bpo-39041: Add GitHub Actions support (GH-17594) (cherry picked from commit a76ba362c4d86adf5e7f8254398135d12d7afd25) Co-authored-by: Steve Dower <steve.dower@python.org> 06 January 2020, 16:47:06 UTC
54bcd65 Minor formatting improvements and fixes to idle.rst (GH-17165) (cherry picked from commit d6c08db8538d046d783db44fe4e70a60af0fb02e) Co-authored-by: Tal Einat <taleinat+github@gmail.com> 06 January 2020, 08:24:25 UTC
b853a7c Fix the parameter list of object. _rpow_ (GH-GH-16477) (cherry picked from commit abc0c4fa9970931849b3da598c5980a5b170661e) Co-authored-by: HongWeipeng <961365124@qq.com> 05 January 2020, 22:37:37 UTC
cb4ed24 Replace links in howto/pyporting.rst with sphinx references (GH-17781) Signed-off-by: Oleg Höfling <oleg.hoefling@gmail.com> (cherry picked from commit e6ae90dede07e8599cc6906417ca4aa99d8aa6e4) Co-authored-by: Oleg Höfling <hoefling@users.noreply.github.com> 05 January 2020, 22:13:44 UTC
6234301 bpo-39152: add missing ttk.Scale.configure return value (GH-17815) tkinter.ttk.Scale().configure([name]) now returns a configuration tuple for name or a list thereof for all options. Based on patch Giovanni Lombardo. (cherry picked from commit 5ea7bb25e3b192d6c49a49c9e3b316f8559602aa) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 05 January 2020, 16:49:48 UTC
43fbc70 bpo-39056: Fix handling invalid warning category in the -W option. (GH-17618) No longer import the re module if it is not needed. (cherry picked from commit 41ec17e45d54473d32f543396293256f1581e44d) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 05 January 2020, 12:34:58 UTC
3bdb2d9 bpo-39055: Reject a trailing \n in base64.b64decode() with validate=True. (GH-17616) (cherry picked from commit b19c0d77e6f25ea831ab608c71f15d0d9266c8c4) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 05 January 2020, 12:32:45 UTC
880a17a bpo-39057: Fix urllib.request.proxy_bypass_environment(). (GH-17619) Ignore leading dots and no longer ignore a trailing newline. (cherry picked from commit 6a265f0d0c0a4b3b8fecf4275d49187a384167f4) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> 05 January 2020, 12:31:44 UTC
9c145e1 [3.7] bpo-39191: Don't spawn a task before failing (GH-17796) (#17821) (cherry picked from commit 3a5de511596f17575de082dcb8d43d63b2bd2da9) Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com> 04 January 2020, 09:49:32 UTC
83638fe Update copyright year in macOS installer license copy (GH-17806) (cherry picked from commit 32f1443aa98db769d87db497b45bd0dcb732445b) Co-authored-by: Ned Deily <nad@python.org> 03 January 2020, 03:47:00 UTC
8978ae9 [3.7] Bring Python into the next decade. (GH-17801). (GH-17803) (cherry picked from commit 946b29ea0b3b386ed05e87e60b8617c9dc19cd53) Co-authored-by: Benjamin Peterson <benjamin@python.org> 03 January 2020, 03:39:21 UTC
3959638 bpo-39183: Fix formatting in library/ensurepip (GH-17787) Remove extra space to fix formatting and avoid from splitting text in to strings. https://bugs.python.org/issue39183 (cherry picked from commit 149175c6dfc8455023e4335575f3fe3d606729f9) Co-authored-by: Rafael Fontenelle <rffontenelle@users.noreply.github.com> 01 January 2020, 22:32:17 UTC
0e0e4ac bpo-39142: Avoid converting namedtuple instances to ConvertingTuple. (GH-17773) (GH-17786) (cherry picked from commit 46abfc1416ff8e450999611ef8f231ff871ab133) 01 January 2020, 20:07:31 UTC
88938e4 Fix idlelib README typo. (GH-17770) (cherry picked from commit ba82ee894cf0f6ec9e9f6a313c870ffd2db377e6) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 31 December 2019, 18:51:23 UTC
53f11ba [3.7] bpo-38588: Fix possible crashes in dict and list when calling P… (GH-17765) * [3.7] bpo-38588: Fix possible crashes in dict and list when calling PyObject_RichCompareBool (GH-17734) Take strong references before calling PyObject_RichCompareBool to protect against the case where the object dies during the call.. (cherry picked from commit 2d5bf568eaa5059402ccce9ba5a366986ba27c8a) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com> * methane's suggestion methane's suggestion Co-Authored-By: Inada Naoki <songofacandy@gmail.com> Co-authored-by: Inada Naoki <songofacandy@gmail.com> 31 December 2019, 04:15:10 UTC
c9c17cc bpo-34118: memoryview, range, and tuple are classes (GH-17761) Tag memoryview, range, and tuple as classes, the same as list, etcetera, in the library manual built-in functions list. (cherry picked from commit ee9ff05ec22ecd47dbffdd361967ccd55963dad2) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 30 December 2019, 22:22:24 UTC
296d45e [3.7] bpo-38610: Fix possible crashes in several list methods (GH-17022) (GH-17759) Hold strong references to list elements while calling PyObject_RichCompareBool().. (cherry picked from commit d9e561d23d994e3ed15f4fcbd7ee5c8fe50f190b) Co-authored-by: Zackery Spytz <zspytz@gmail.com> Co-authored-by: Zackery Spytz <zspytz@gmail.com> 30 December 2019, 19:58:31 UTC
177bda9 Fix typos and remove deprecated deprecation warning. (GH-17741) (cherry picked from commit 32a12aed6da41f49a5ca05e6de34f5f93ea1dc33) Co-authored-by: Antoine <43954001+awecx@users.noreply.github.com> 29 December 2019, 22:19:54 UTC
d794728 [3.7] bpo-39136: Fixed typos (GH-17720) focusses -> focuses; follwing -> following; Excape -> Escape. (cherry picked from commit 6c7bb38) 29 December 2019, 06:40:49 UTC
eeebc44 Reorder entries in Misc/ACKS (GH-17663) (GH-17672) 28 December 2019, 20:41:48 UTC
d7aa3d2 bpo-39144 Align ctags and etags behaviours in the makefile and include Python stdlib files (GH-17721) (cherry picked from commit ef7eaafc9d2e370cf79b3674e56f643bbfe239e2) Co-authored-by: Anthony Shaw <anthony.p.shaw@gmail.com> 28 December 2019, 02:51:37 UTC
5641b6d closes bpo-30364: Replace deprecated no_address_safety_analysis attribute. (GH-17702) (cherry picked from commit c0052f3fe3d19820b2d4f76e383035439affe32c) Co-authored-by: Batuhan Taşkaya <47358913+isidentical@users.noreply.github.com> 27 December 2019, 03:08:30 UTC
090bc14 Minor C API documentation improvements. (GH-17698) The added parentheses around the PyIter_Next assignment suppress the following warning which gcc throws without: ``` warning: using the result of an assignment as a condition without parentheses [-Wparentheses] ``` The other change is a typo fix (cherry picked from commit 5c7ed7550ec2da16d7679e538fcd7c1a5631811f) Co-authored-by: William Ayd <william.ayd@icloud.com> 25 December 2019, 04:35:20 UTC
59d06b9 [3.7] bpo-38878: Fix os.PathLike __subclasshook__ (GH-17336) (GH-17685) https://bugs.python.org/issue38878 23 December 2019, 18:31:15 UTC
0ffc900 bpo-38918: Add __module__ entry for function & method type in inspect docs table (GH-17408) Adds` __module__ ` entries for function & method types in inspect docs table. https://bugs.python.org/issue38918 (cherry picked from commit f522a6ddb67a238bab5673608111f74ec4e22205) Co-authored-by: Parth Sharma <parthsharma2@users.noreply.github.com> 20 December 2019, 19:26:16 UTC
917419f [3.7] bpo-38316: Fix co_stacksize documentation (GH-16983). (GH-17660) (cherry picked from commit d587272fe3b0fcad2f23a490e76f9f82ca7d64ef) Co-authored-by: Batuhan Taşkaya <47358913+isidentical@users.noreply.github.com> https://bugs.python.org/issue38316 Automerge-Triggered-By: @vstinner 19 December 2019, 14:41:49 UTC
54bd737 Post release updates 19 December 2019, 01:47:58 UTC
e5c7f46 Merge tag 'v3.7.6' into 3.7 19 December 2019, 01:41:32 UTC
b8bbdf0 bpo-38546: Fix concurrent.futures test_ressources_gced_in_workers() (GH-17652) (GH-17655) Fix test_ressources_gced_in_workers() of test_concurrent_futures: explicitly stop the manager to prevent leaking a child process running in the background after the test completes. (cherry picked from commit 673c39331f844a80c465efd7cff88ac55c432bfb) (cherry picked from commit b0eb046cbd0dbb7b17f16aad6de20fac5305f387) Co-authored-by: Victor Stinner <vstinner@python.org> 18 December 2019, 20:51:09 UTC
43364a7 3.7.6 18 December 2019, 18:48:49 UTC
13ee023 bpo-38295: prevent test_relative_path of test_py_compile failure on macOS Catalina (GH-17636) (cherry picked from commit bf3aa1060a29a05813abbe877193af16e3e7131e) Co-authored-by: Ned Deily <nad@python.org> 18 December 2019, 18:39:27 UTC
9346209 Fix warnings in test_asyncio.test_base_events (GH-17577) (GH-17580) Co-authored-by: tirkarthi (cherry picked from commit 1988344a6bff253f017e053f69318ecf03587294) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 18 December 2019, 18:39:14 UTC
3413f5c [3.7] Add whatsnew for removal of asyncio.loop.create_datagram_endpoint()'s *reuse_address* parameter (GH-17595). (GH-17631) (cherry picked from commit f501db2b93a9d3d840b6fb38d6bdda8bcc400d4a) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 18 December 2019, 18:38:51 UTC
9af4974 bpo-39035: travis: Don't use beta group (GH-17604) 18 December 2019, 18:38:36 UTC
b4f98f4 Add PYTHONUTF8 to commandline usage. (GH-17587) (GH-17599) Co-Authored-By: Victor Stinner <vstinner@python.org> (cherry picked from commit 95826c773a9004fc5b3c89de55f800504685ab21) 18 December 2019, 18:38:18 UTC
3dbfe0a bpo-38295: prevent test_relative_path of test_py_compile failure on macOS Catalina (GH-17636) (cherry picked from commit bf3aa1060a29a05813abbe877193af16e3e7131e) Co-authored-by: Ned Deily <nad@python.org> 17 December 2019, 09:23:55 UTC
c70c8ca Fix warnings in test_asyncio.test_base_events (GH-17577) (GH-17580) Co-authored-by: tirkarthi (cherry picked from commit 1988344a6bff253f017e053f69318ecf03587294) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 17 December 2019, 04:12:28 UTC
8a06c9e [3.7] Add whatsnew for removal of asyncio.loop.create_datagram_endpoint()'s *reuse_address* parameter (GH-17595). (GH-17631) (cherry picked from commit f501db2b93a9d3d840b6fb38d6bdda8bcc400d4a) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 17 December 2019, 04:08:49 UTC
be7489c bpo-39035: travis: Don't use beta group (GH-17604) 14 December 2019, 14:02:20 UTC
4b75466 [3.7] Fix elif start column offset when there is an else following (GH-17596) (GH-17601) (cherry picked from commit 5936a4ce914d42af97b9238e5090dedc8d5b0bd2) Co-authored-by: Lysandros Nikolaou <lisandrosnik@gmail.com> 14 December 2019, 10:55:00 UTC
26892c7 Add PYTHONUTF8 to commandline usage. (GH-17587) (GH-17599) Co-Authored-By: Victor Stinner <vstinner@python.org> (cherry picked from commit 95826c773a9004fc5b3c89de55f800504685ab21) 14 December 2019, 10:53:43 UTC
d321203 bpo-36406: Handle namespace packages in doctest (GH-12520) (GH-17592) (cherry picked from commit 8289e27393395ee903bd096d42e07c112d7f15c6) Co-authored-by: Xtreak <tir.karthi@gmail.com> 13 December 2019, 23:30:04 UTC
0ed45d0 [3.7] bpo-39031: Include elif keyword when producing lineno/col-offset info for if_stmt (GH-17582) (#17584) When parsing an "elif" node, lineno and col_offset of the node now point to the "elif" keyword and not to its condition, making it consistent with the "if" node. https://bugs.python.org/issue39031 Automerge-Triggered-By: @pablogsal. (cherry picked from commit 025a602af7ee284d8db6955c26016f3f27d35536) Co-authored-by: Lysandros Nikolaou <lisandrosnik@gmail.com> 13 December 2019, 14:04:14 UTC
85924a4 Post release updates 11 December 2019, 08:49:48 UTC
bd18254 3.7.6rc1 11 December 2019, 05:24:09 UTC
95157c6 bpo-37228: Fix loop.create_datagram_endpoint()'s usage of SO_REUSEADDR (GH-17311) (GH-17570) (cherry picked from commit ab513a38c98695f271e448fe2cb7c5e39eeaaaaf) Co-authored-by: Kyle Stanley <aeros167@gmail.com> 11 December 2019, 04:49:23 UTC
1b0e88d bpo-38943: Fix IDLE autocomplete window not always appearing (GH-17416) This has happened on some versions of Ubuntu. (cherry picked from commit bbc4162bafe018f07bab0b624b37974cc33daad9) Co-authored-by: JohnnyNajera <58344607+JohnnyNajera@users.noreply.github.com> 10 December 2019, 00:46:14 UTC
4e0e452 bpo-38944: Escape key now closes IDLE completion windows. (GH-17419) (cherry picked from commit 232689b40d8fcbbac27c8705607ff482ea5b46f8) Co-authored-by: JohnnyNajera <58344607+JohnnyNajera@users.noreply.github.com> 09 December 2019, 23:40:09 UTC
66d7a5d bpo-34776: Fix dataclasses to support __future__ "annotations" mode (GH-9518) (#17532) (cherry picked from commit d219cc4180e7589807ebbef7421879f095e72a98) Co-authored-by: Yury Selivanov <yury@magic.io> 09 December 2019, 16:07:54 UTC
a0078d9 bpo-39006: Fix asyncio when the ssl module is missing (GH-17524) Fix asyncio when the ssl module is missing: only check for ssl.SSLSocket instance if the ssl module is available. (cherry picked from commit 82b4950b5e92bec343a436b3f9c116400b66e1b9) Co-authored-by: Victor Stinner <vstinner@python.org> 09 December 2019, 14:20:27 UTC
21e1138 bpo-38916: Document array.array deprecation (GH-17523) array.array: Document that tostring() and fromstring() deprecated aliases will be removed in Python 3.9. (cherry picked from commit 0381ea79ac2da03179c8512c581cac588b69cff9) Co-authored-by: Victor Stinner <vstinner@python.org> 09 December 2019, 13:52:07 UTC
188d5ae bpo-38673: dont switch to ps2 if the line starts with comment or whitespace (GH-17421) (GH-17522) https://bugs.python.org/issue38673 (cherry picked from commit 109fc2792a490ee5cd8a423e17d415fbdedec5c8) Co-authored-by: Batuhan Taşkaya <47358913+isidentical@users.noreply.github.com> 09 December 2019, 11:38:36 UTC
b9f4b49 bpo-38547: Fix test_pty if the process is the session leader (GH-17519) Fix test_pty: if the process is the session leader, closing the master file descriptor raises a SIGHUP signal: simply ignore SIGHUP when running the tests. (cherry picked from commit a1838ec2592e5082c75c77888f2a7a3eb21133e5) Co-authored-by: Victor Stinner <vstinner@python.org> 09 December 2019, 11:15:07 UTC
41973c9 bpo-38669: patch.object now raises a helpful error (GH17511) This means a clearer message is now shown when patch.object is called with two string arguments, rather than a class and a string argument. (cherry picked from commit cd90a52983db34896a6335a572d55bdda274778f) Co-authored-by: Elena Oat <oat.elena@gmail.com> 09 December 2019, 06:59:23 UTC
9baa870 bpo-38979: fix ContextVar "__class_getitem__" method (GH-17497) now contextvars.ContextVar "__class_getitem__" method returns ContextVar class, not None. https://bugs.python.org/issue38979 Automerge-Triggered-By: @asvetlov (cherry picked from commit 28c91631c24e53713ad0e8a2bbae716373f5e53d) Co-authored-by: AMIR <31338382+amiremohamadi@users.noreply.github.com> 08 December 2019, 11:53:07 UTC
a197f8a [3.7] bpo-38820: OpenSSL 3.0.0 compatibility. (GH-17190) (GH-17500) test_openssl_version now accepts version 3.0.0. getpeercert() no longer returns IPv6 addresses with a trailing new line. Signed-off-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue38820 (cherry picked from commit 2b7de6696bf2f924cd2cd9ff0a539c8aa37c6244) Co-authored-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue38820 Automerge-Triggered-By: @tiran 07 December 2019, 17:20:43 UTC
a85066d bpo-37404: Raising value error if an SSLSocket is passed to asyncio functions (GH-16457) https://bugs.python.org/issue37404 (cherry picked from commit 892f9e0777f262d366d4747a54c33a1c15a49da6) Co-authored-by: idomic <michael.ido@gmail.com> 07 December 2019, 12:45:07 UTC
8ce85a3 [3.7] Make repr of C accelerated TaskWakeupMethWrapper the same as of pure Python version (GH-17484) (GH-17494) (cherry picked from commit 969ae7aca809a8dacafee04c261110eea0ac1945) Co-authored-by: Andrew Svetlov <andrew.svetlov@gmail.com> 07 December 2019, 11:46:18 UTC
5ba591f bpo-36820: Break unnecessary cycle in socket.py, codeop.py and dyld.py (GH-13135) Break cycle generated when saving an exception in socket.py, codeop.py and dyld.py as they keep alive not only the exception but user objects through the ``__traceback__`` attribute. https://bugs.python.org/issue36820 Automerge-Triggered-By: @pablogsal (cherry picked from commit b64334cb93d0ddbb551c8cd712942bab2fc72772) Co-authored-by: Mario Corchero <mcorcherojim@bloomberg.net> 06 December 2019, 15:01:31 UTC
5044c88 bpo-38965: Fix faulthandler._stack_overflow() on GCC 10 (GH-17467) Use the "volatile" keyword to prevent tail call optimization on any compiler, rather than relying on compiler specific pragma. (cherry picked from commit 8b787964e0a647caa0558b7c29ae501470d727d9) Co-authored-by: Victor Stinner <vstinner@python.org> 04 December 2019, 20:29:22 UTC
e0f148e bpo-33684: json.tool: Use utf-8 for infile and outfile. (GH-17460) (cherry picked from commit 808769f3a4cbdc47cf1a5708dd61b1787bb192d4) Co-authored-by: Inada Naoki <songofacandy@gmail.com> 04 December 2019, 10:26:22 UTC
55a7046 bpo-27873: Update docstring for multiprocessing.Pool.map (GH-17436) Update docstring for `multiprocessing.Pool.map` to mention `pool.starmap()`. Prev PR: https://github.com/python/cpython/pull/17367 @aeros https://bugs.python.org/issue27873 (cherry picked from commit eb48a451e3844185b9a8751c9badffbddc89689d) Co-authored-by: An Long <aisk@users.noreply.github.com> 03 December 2019, 23:36:47 UTC
87f2d26 bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format (GH-17418) (cherry picked from commit a62ad4730c9b575f140f24074656c0257c86a09a) Co-authored-by: Matthew Rollings <1211162+stealthcopter@users.noreply.github.com> 02 December 2019, 22:43:15 UTC
1f4f28c bpo-38815: Accept TLSv3 default in min max test (GH-NNNN) (GH-17437) Make ssl tests less strict and also accept TLSv3 as the default maximum version. This change unbreaks test_min_max_version on Fedora 32. https://bugs.python.org/issue38815 (cherry picked from commit 34864d1cffdbfc620f8517dab9a68ae9a37b8c53) Co-authored-by: torsava <torsava@redhat.com> 02 December 2019, 16:35:50 UTC
926eabb bpo-38449: Add URL delimiters test cases (GH-16729) * bpo-38449: Add tricky test cases * bpo-38449: Reflect codereview (cherry picked from commit 2fe4c48917c2d1b40cf063c6ed22ae2e71f4cb62) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com> 01 December 2019, 23:23:32 UTC
cbac6ee document threading.Lock.locked() (GH-17427) (cherry picked from commit fdafa1d0ed0a8930b52ee81e57c931cc4d5c2388) Co-authored-by: idomic <michael.ido@gmail.com> 01 December 2019, 20:13:18 UTC
7e9bbbe bpo-38524: clarify example a bit and improve formatting (GH-17406) (cherry picked from commit 02519f75d15b063914a11351da30178ca4ceb54b) Co-authored-by: Tal Einat <taleinat+github@gmail.com> 28 November 2019, 05:28:37 UTC
e65b3fa bpo-26730: Fix SpooledTemporaryFile data corruption (GH-17400) SpooledTemporaryFile.rollback() might cause data corruption when it is in text mode. Co-Authored-By: Serhiy Storchaka <storchaka@gmail.com>. (cherry picked from commit ea9835c5d154ab6a54eed627958473b6768b28cc) 28 November 2019, 05:23:58 UTC
cd27d22 bpo-38524: document implicit and explicit calling of descriptors' __set_name__ (GH-17364) (cherry picked from commit 1bddf890e595a865414645c6041733043c4081f8) Co-authored-by: Florian Dahlitz <f2dahlitz@freenet.de> 27 November 2019, 08:52:39 UTC
2fb9719 [3.7] bpo-38862: IDLE Strip Trailing Whitespace fixes end newlines (GH-17366) (#17379) Extra newlines are removed at the end of non-shell files. If the file only has newlines after stripping other trailing whitespace, all are removed, as is done by patchcheck.py. (cherry picked from commit 6bf644ec82f14cceae68278dc35bafb00875efae) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 27 November 2019, 01:12:56 UTC
2f24893 bpo-21063: Improve module synopsis for distutils (GH-17363) (#17381) (cherry picked from commit f8a6316778faff3991144c3aec4fa92d7b30a72b) Co-authored-by: Sanchit Khurana <54467174+GeniusLearner@users.noreply.github.com> 26 November 2019, 20:02:24 UTC
1f86401 Remove use of deprecated `array.fromstring` method (GH-17332) (cherry picked from commit 386d00cc341b549800776b906bfc6b20ea40c7db) Co-authored-by: David Coles <coles.david@gmail.com> 26 November 2019, 06:37:31 UTC
07432c3 bpo-38686: fix HTTP Digest handling in request.py (GH-17045) * fix HTTP Digest handling in request.py There is a bug triggered when server replies to a request with `WWW-Authenticate: Digest` where `qop="auth,auth-int"` rather than mere `qop="auth"`. Having both `auth` and `auth-int` is legitimate according to the `qop-options` rule in §3.2.1 of [[https://www.ietf.org/rfc/rfc2617.txt|RFC 2617]]: > qop-options = "qop" "=" <"> 1GH-qop-value <"> > qop-value = "auth" | "auth-int" | token > **qop-options**: [...] If present, it is a quoted string **of one or more** tokens indicating the "quality of protection" values supported by the server. The value `"auth"` indicates authentication; the value `"auth-int"` indicates authentication with integrity protection This is description confirmed by the definition of the [//n//]`GH-`[//m//]//rule// extended-BNF pattern defined in §2.1 of [[https://www.ietf.org/rfc/rfc2616.txt|RFC 2616]] as 'a comma-separated list of //rule// with at least //n// and at most //m// items'. When this reply is parsed by `get_authorization`, request.py only tests for identity with `'auth'`, failing to recognize it as one of the supported modes the server announced, and claims that `"qop 'auth,auth-int' is not supported"`. * 📜🤖 Added by blurb_it. * bpo-38686 review fix: remember why. * fix trailing space in Lib/urllib/request.py Co-Authored-By: Brandt Bucher <brandtbucher@gmail.com> (cherry picked from commit 14a89c47983f2fb9e7fdf33c769e622eefd3a14a) Co-authored-by: PypeBros <PypeBros@users.noreply.github.com> 22 November 2019, 23:38:37 UTC
c58a811 closes bpo-29275: Remove Y2K reference from time module docs (GH-17321) The Y2K reference is not needed as it only points out that Python's use of C standard functions doesn't generally suffer from Y2K issues; the point regarding conventions for conversion of 2-digit years in :func:`strptime` is still valid. (cherry picked from commit 42bc60ead39c7be9f6bb7329977826e962f601eb) Co-authored-by: Callum Ward <wards.callum@gmail.com> 22 November 2019, 17:03:04 UTC
cb60851 bpo-38804: Fix REDoS in http.cookiejar (GH-17157) The regex http.cookiejar.LOOSE_HTTP_DATE_RE was vulnerable to regular expression denial of service (REDoS). LOOSE_HTTP_DATE_RE.match is called when using http.cookiejar.CookieJar to parse Set-Cookie headers returned by a server. Processing a response from a malicious HTTP server can lead to extreme CPU usage and execution will be blocked for a long time. The regex contained multiple overlapping \s* capture groups. Ignoring the ?-optional capture groups the regex could be simplified to \d+-\w+-\d+(\s*\s*\s*)$ Therefore, a long sequence of spaces can trigger bad performance. Matching a malicious string such as LOOSE_HTTP_DATE_RE.match("1-c-1" + (" " * 2000) + "!") caused catastrophic backtracking. The fix removes ambiguity about which \s* should match a particular space. You can create a malicious server which responds with Set-Cookie headers to attack all python programs which access it e.g. from http.server import BaseHTTPRequestHandler, HTTPServer def make_set_cookie_value(n_spaces): spaces = " " * n_spaces expiry = f"1-c-1{spaces}!" return f"b;Expires={expiry}" class Handler(BaseHTTPRequestHandler): def do_GET(self): self.log_request(204) self.send_response_only(204) GH- Don't bother sending Server and Date n_spaces = ( int(self.path[1:]) GH- Can GET e.g. /100 to test shorter sequences if len(self.path) > 1 else 65506 GH- Max header line length 65536 ) value = make_set_cookie_value(n_spaces) for i in range(99): GH- Not necessary, but we can have up to 100 header lines self.send_header("Set-Cookie", value) self.end_headers() if __name__ == "__main__": HTTPServer(("", 44020), Handler).serve_forever() This server returns 99 Set-Cookie headers. Each has 65506 spaces. Extracting the cookies will pretty much never complete. Vulnerable client using the example at the bottom of https://docs.python.org/3/library/http.cookiejar.html : import http.cookiejar, urllib.request cj = http.cookiejar.CookieJar() opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(cj)) r = opener.open("http://localhost:44020/") The popular requests library was also vulnerable without any additional options (as it uses http.cookiejar by default): import requests requests.get("http://localhost:44020/") * Regression test for http.cookiejar REDoS If we regress, this test will take a very long time. * Improve performance of http.cookiejar.ISO_DATE_RE A string like "444444" + (" " * 2000) + "A" could cause poor performance due to the 2 overlapping \s* groups, although this is not as serious as the REDoS in LOOSE_HTTP_DATE_RE was. (cherry picked from commit 1b779bfb8593739b11cbb988ef82a883ec9d077e) Co-authored-by: bcaller <bcaller@users.noreply.github.com> 22 November 2019, 14:42:13 UTC
d4d7920 bpo-22367: Update test_fcntl.py for spawn process mode (GH-17154) (GH-17253) (cherry picked from commit 9960230f76eb555d6dfbe8a324efed35610c85f9) Co-authored-by: Dong-hee Na <donghee.na92@gmail.com> 22 November 2019, 14:15:42 UTC
bff5255 bpo-36854: Fix reference counter in PyInit__testcapi() (GH-17338) Increment properly Py_True/Py_False reference counter for _testcapi.WITH_PYMALLOC variable. (cherry picked from commit 84c36c152a2bdf98f9cc7ce0e1db98e1f442a05e) Co-authored-by: Victor Stinner <vstinner@python.org> 22 November 2019, 12:56:59 UTC
91c15a5 [3.7] bpo-16576: Add checks for bitfields passed by value to functions. (GH-17097) (GH-17224) (cherry picked from commit 106271568c58cfebae58f0c52b640dbe716ba2ce) 21 November 2019, 21:47:22 UTC
30e5bd8 bpo-37838: get_type_hints for wrapped functions with forward reference (GH-17126) https://bugs.python.org/issue37838 (cherry picked from commit 0aca3a3a1e68b4ca2d334ab5255dfc267719096e) Co-authored-by: benedwards14 <53377856+benedwards14@users.noreply.github.com> 21 November 2019, 17:43:13 UTC
97c301b bpo-36277: Add document for pdb debug and retval commands (GH-12872) https://bugs.python.org/issue36277 Automerge-Triggered-By: @csabella (cherry picked from commit 9391f6c3ef24f7962c534c42ccb792debdbef509) Co-authored-by: Dave Nguyen <dv@dvnguyen.com> 21 November 2019, 01:56:43 UTC
7efeb75 Fixed an incorrect sentence in the docs (GH-17205) Fixed an incorrect sentence in Doc/c-api/mapping.rst I fell on while translating the file. skip issue Automerge-Triggered-By: @csabella (cherry picked from commit 06ca2a2be9374ac390e9407685ccce941ab9ffa2) Co-authored-by: Aveheuzed <a.masson555@ntymail.com> 21 November 2019, 01:24:51 UTC
ecb2afc bpo-38821: Fix crash in argparse when using gettext (GH-17192) (cherry picked from commit be5c79e0338005d675a64ba6e5b137e850d556d1) Co-authored-by: Federico Bond <federicobond@gmail.com> 20 November 2019, 13:48:20 UTC
1d7245c bpo-38823: Fix refleak in _tracemalloc init error handling (GH-17235) (cherry picked from commit d51a363a4379385fdfe9c09a56324631465ede29) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 20 November 2019, 10:26:54 UTC
63f09e7 bpo-38823: Fix refleak in marshal init error path (GH-17260) (cherry picked from commit 33b671e72450bf4b5a946ce0dde6b7fe21150108) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 20 November 2019, 10:15:22 UTC
755caaa bpo-38636: Fix IDLE tab toggle and file indent width (GH-17008) These Format menu functions (default shortcuts Alt-T and Alt-U) were mistakenly disabled in 3.7.5 and 3.8.0. (cherry picked from commit b8462477bfd01ff21461065d5063e6b0238ca809) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu> 20 November 2019, 06:37:09 UTC
5bd2af9 bpo-38823: Fix refleaks in faulthandler init error path on Windows (GH-17250) (cherry picked from commit ac2235432c607ce2c0faf6dff5d9b2534d2f6652) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 19 November 2019, 23:30:02 UTC
4ffc569 bpo-35409: Ignore GeneratorExit in async_gen_athrow_throw (GH-14755) Ignore `GeneratorExit` exceptions when throwing an exception into the `aclose` coroutine of an asynchronous generator. https://bugs.python.org/issue35409 (cherry picked from commit 8e0de2a4808d7c2f4adedabff89ee64e0338790a) Co-authored-by: Vincent Michel <vxgmichel@gmail.com> 19 November 2019, 14:12:12 UTC
2b928d9 bpo-38809: Windows build scripts use python.exe from virtual envs (GH-17164) https://bugs.python.org/issue38809 (cherry picked from commit ee703cbb418b7458bebb1d26a5e19d6b55280b28) Co-authored-by: Tal Einat <taleinat+github@gmail.com> 18 November 2019, 17:53:14 UTC
3f4e7f7 Correct the description of the 3.7 change in urllib.parse.quote (GH-17065) `~` is now treated as an unreserved character (i.e. it doesn't get quoted), not a reserved one. (cherry picked from commit f49f6baa6bf7916ac039194c24b59d2eff5b180a) Co-authored-by: Роман Донченко <dpb@corrigendum.ru> 18 November 2019, 15:42:20 UTC
9e4d031 bpo-38823: Clean up refleaks in _tkinter initialization. (GH-17206) https://bugs.python.org/issue38823 (cherry picked from commit 289cf0fbf78c4f38c38ac71ac8b772be7ec2672f) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 18 November 2019, 15:09:43 UTC
9a4c5c3 [3.7] bpo-38830: Correct slot signature in Qt example. (GH-17220) (GH-17222) (cherry picked from commit 5383956583bb758f3828513bcdd011871f24a0e8) 18 November 2019, 12:24:16 UTC
d2faac6 bpo-38678: Improve argparse example in tutorial (GH-17207) (GH-17213) (cherry picked from commit 04c79d6088a22d467f04dbe438050c26de22fa85) Co-authored-by: Raymond Hettinger <rhettinger@users.noreply.github.com> 18 November 2019, 06:17:28 UTC
72321c7 bpo-25866: Minor cleanups to "sequence" in docs (GH-17177) (GH-17209) (cherry picked from commit 4544e78ec4558b75bf95e5b7dfc1b5bbb07ae5f0) Co-authored-by: alclarks <57201106+alclarks@users.noreply.github.com> 17 November 2019, 22:07:48 UTC
8a334af bpo-38823: Clean up refleaks in _contextvars initialization. (GH-17198) https://bugs.python.org/issue38823 (cherry picked from commit 143a97f64128070386b12a0ee589bdaad5e51f40) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 17 November 2019, 00:14:45 UTC
825e91b bpo-38823: Clean up refleaks in _asyncio initialization. (GH-17195) https://bugs.python.org/issue38823 (cherry picked from commit c3f6bdc332d23588102eba749a5929dd5bb67c9d) Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> 16 November 2019, 22:45:24 UTC
5469bc0 Fix typo in Lib/socketserver.py (GH-17024) changed 'This is bad class design, but save some typing' into 'This is bad class design, but saves some typing'. (cherry picked from commit d0acdfcf345b44b01e59f3623dcdab6279de686a) Co-authored-by: Jason (Perry) Taylor <jtaylor@seek.com.au> 16 November 2019, 18:32:37 UTC
208a6a1 [3.7] Updated missing periods in cmdline.rst (GH-17173). (GH-17182) (cherry picked from commit 0fe0b88d6eb597c9a929e14ad47a5a9bd99bfe53) Co-authored-by: Jules Lasne (jlasne) <jules.lasne@gmail.com> 15 November 2019, 22:47:17 UTC
back to top