[issue29591] expat 2.2.0: Various security vulnerabilities in bundled expat (CVE-2016-0718 and CVE-2016-4472)

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset 5777e79ecbd1f2adf36456e09f210608ee221691 by Ned Deily (Victor Stinner) in branch '3.6': [3.6] bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) (#2349) https://github.com/python/cpython/commit/5777e79ecbd1f2adf36456e09f2106

[issue30604] co_extra_freefuncs is stored thread locally and can lead to crashes

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset c794b643c9172d69afa46f85982befd82511d9df by Ned Deily (Victor Stinner) in branch '3.6': bpo-30704, bpo-30604: Fix memleak in code_dealloc() (#2455) (#2456) https://github.com/python/cpython/commit/c794b643c9172d69afa46f85982bef

[issue30730] [security] Injecting environment variable in subprocess on Windows

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset a9b16cff35811f88cdfeb4f50758140dfff36ebc by Ned Deily (Serhiy Storchaka) in branch '3.6': [3.6] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2360) https://github.com/python/cpyt

[issue30726] [Windows] Warnings in elementtree due to new expat

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset 5777e79ecbd1f2adf36456e09f210608ee221691 by Ned Deily (Victor Stinner) in branch '3.6': [3.6] bpo-30726: PCbuild _elementtree: remove duplicate defines (#2348) (#2349) https://github.com/python/cpython/commit/5777e79ecbd1f2adf36456e09f2106

[issue30797] ./pyconfig.h:1438:0: warning: "_GNU_SOURCE" redefined [enabled by default]

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset bdabd7666032ce356d550da21c35e4bee5b3448c by Ned Deily in branch '3.6': bpo-30797, bpo-30694: Avoid _GNU_SOURCE redefined warning in xmlparse.c (#2615) https://github.com/python/cpython/commit/bdabd7666032ce356d550da21c35e4

[issue30687] build.bat should locate msbuild.exe rather than vcvarsall.bat

2017-07-07 Thread Ned Deily
Ned Deily added the comment: New changeset 00134f64d982561750f57f1a0bb7bb073f9f237c by Ned Deily (Steve Dower) in branch '3.6': bpo-30687: Fixes build scripts to find msbuild.exe and stop relying on vcvarsall.bat (#2252) (#2280) https://github.com/python/cpyt

[issue30914] test_alpn_protocols (test.test_ssl.ThreadedTests) fails on Fedora 26

2017-07-12 Thread Ned Deily
Ned Deily added the comment: Thanks for the report. This problem has already been reported in bpo-30714. -- nosy: +ned.deily resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> test_ssl fails with op

[issue30925] RPM build lacks ability to include other files similar to doc_files

2017-07-13 Thread Ned Deily
Changes by Ned Deily : -- components: +Distutils nosy: +dstufft, merwok ___ Python tracker <http://bugs.python.org/issue30925> ___ ___ Python-bugs-list mailin

[issue30925] RPM build lacks ability to include other files similar to doc_files

2017-07-13 Thread Ned Deily
Changes by Ned Deily : -- nosy: +ncoghlan ___ Python tracker <http://bugs.python.org/issue30925> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
New submission from Ned Deily: [..]/sphinx/util/compat.py:40: RemovedInSphinx17Warning: sphinx.util.compat.Directive is deprecated and will be removed in Sphinx 1.7, please use docutils' instead. RemovedInSphinx17Warning) The solution is to import Directive directly from docutils.

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2780 ___ Python tracker <http://bugs.python.org/issue30939> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Ned Deily added the comment: New changeset 50f58163a69abe2f35e91044d1df165ee7bdbb42 by Ned Deily in branch 'master': bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) https://github.com/python/cpython/commit/50f58163a69abe2f35e91044d1df16

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2782 ___ Python tracker <http://bugs.python.org/issue30939> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Ned Deily added the comment: New changeset bbd0f423d2a19c6a4a9cda6914fc60b87e17250b by Ned Deily in branch '3.6': bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2722) https://github.com/python/cpython/commit/bbd0f423d2a19c6a4a9cda6914fc60

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2783 ___ Python tracker <http://bugs.python.org/issue30939> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Ned Deily added the comment: New changeset ada3f31365d0634d0cd8eeacfacd98291e34a8cc by Ned Deily in branch '3.5': bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2723) https://github.com/python/cpython/commit/ada3f31365d0634d0cd8eeacfacd98

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2784 ___ Python tracker <http://bugs.python.org/issue30939> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2785 ___ Python tracker <http://bugs.python.org/issue30939> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-15 Thread Ned Deily
Ned Deily added the comment: New changeset 64a9f3d961084819335ea011063eb8cb41733882 by Ned Deily in branch '2.7': bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2725) https://github.com/python/cpython/commit/64a9f3d961084819335ea011063eb8

[issue23844] test_ssl: fails on recent libressl version with BAD_DH_P_LENGTH

2017-07-16 Thread Ned Deily
Ned Deily added the comment: New changeset b52c0075511f8330f57c81520ee0287241d3653f by Ned Deily in branch '3.3': bpo-23844: Fix test_dh_params failure https://github.com/python/cpython/commit/b52c0075511f8330f57c81520ee0287241d3653f -- nosy:

[issue30694] Update embedded copy of expat to 2.2.1

2017-07-16 Thread Ned Deily
Ned Deily added the comment: New changeset ab90986600ba7dea2aa41e5c1773791070725453 by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2204) https://github.com/python/cpyt

[issue30726] [Windows] Warnings in elementtree due to new expat

2017-07-16 Thread Ned Deily
Ned Deily added the comment: New changeset ab90986600ba7dea2aa41e5c1773791070725453 by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2204) https://github.com/python/cpyt

[issue29591] expat 2.2.0: Various security vulnerabilities in bundled expat (CVE-2016-0718 and CVE-2016-4472)

2017-07-16 Thread Ned Deily
Ned Deily added the comment: New changeset ab90986600ba7dea2aa41e5c1773791070725453 by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2204) https://github.com/python/cpyt

[issue30797] ./pyconfig.h:1438:0: warning: "_GNU_SOURCE" redefined [enabled by default]

2017-07-16 Thread Ned Deily
Changes by Ned Deily : -- resolution: -> fixed stage: backport needed -> resolved status: open -> closed ___ Python tracker <http://bugs.python.or

[issue30694] Update embedded copy of expat to 2.2.1

2017-07-16 Thread Ned Deily
Changes by Ned Deily : -- priority: deferred blocker -> resolution: -> fixed stage: needs patch -> resolved status: open -> closed ___ Python tracker <http://bugs.python

[issue26617] Assertion failed in gc with __del__ and weakref

2017-07-16 Thread Ned Deily
Ned Deily added the comment: If it's also reproducible with 3.3, I'd take a 3.3 PR for it. -- ___ Python tracker <http://bugs.python.org/issue26617> ___ ___

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-16 Thread Ned Deily
Ned Deily added the comment: > I wonder if we should pin sphinx directly instead of the approximate pin we > have now to prevent this sort of thing in the future? Perhaps. OTOH, we will find out about Sphinx incompatibilities pretty quickly that way, rather than having doc builds poten

[issue30955] \\N in f-string causes next { to be literal if not escaped

2017-07-17 Thread Ned Deily
Ned Deily added the comment: Thanks for the report. This problem has been fixed in Python 3.6.2 which was just released. I believe it was fixed by the changes for Issue29104. -- nosy: +ned.deily resolution: -> out of date stage: -> resolved status: open -&g

[issue30958] Scripts folder is empty

2017-07-18 Thread Ned Deily
Ned Deily added the comment: Sorry, but you are going to have supply more information for anyone to attempt to give an answer. Please indicated exactly how you are trying to install Python (building from source, with one of the binary installers, etc), which operating system and version

[issue30585] [security][3.3] Backport smtplib fix for TLS stripping vulnerability, CVE-2016-0772

2017-07-18 Thread Ned Deily
Ned Deily added the comment: New changeset 3625f7fd11679ecb390ffa58ef36d487acc8159b by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-30585: [security] raise an error when STARTTLS fails (#225) https://github.com/python/cpython/commit/3625f7fd11679ecb390ffa58ef36d4

[issue30585] [security][3.3] Backport smtplib fix for TLS stripping vulnerability, CVE-2016-0772

2017-07-18 Thread Ned Deily
Ned Deily added the comment: Merged for release in 3.3.7rc1 -- priority: release blocker -> resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <http://bugs.python

[issue30958] Scripts folder is empty

2017-07-18 Thread Ned Deily
Changes by Ned Deily : -- resolution: -> not a bug stage: -> resolved status: open -> closed ___ Python tracker <http://bugs.python.org/issue30958> ___

[issue30730] [security] Injecting environment variable in subprocess on Windows

2017-07-18 Thread Ned Deily
Ned Deily added the comment: New changeset e46f1c19642ea1882f427d8246987ba49351a97d by Ned Deily (Serhiy Storchaka) in branch '3.3': [security][3.3] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2363) https://github.com/python/cpyt

[issue29225] distutils.command.install_lib.get_outputs() wrong with extensions built inplace

2017-07-19 Thread Ned Deily
Ned Deily added the comment: Now has PR waiting for review. Thanks, Elvis. -- nosy: +ned.deily stage: -> patch review ___ Python tracker <http://bugs.python.org/issu

[issue30231] test_imaplib needs a TLS server accepting self-signed certificates

2017-07-20 Thread Ned Deily
Ned Deily added the comment: New changeset b5f20ea91ec4d9dc7e1c31629903888c651bd02c by Ned Deily (Victor Stinner) in branch '3.3': [3.3] Backport CI config from master and remove skipped imaplib tests (#2481) https://github.com/python/cpython/commit/b5f20ea91ec4d9dc7e1c3162990388

[issue22928] HTTP header injection in urrlib2/urllib/httplib/http.client (CVE-2016-5699)

2017-07-21 Thread Ned Deily
Ned Deily added the comment: Getting to be the last chance to backport this for 3.3.x. -- nosy: +ned.deily ___ Python tracker <http://bugs.python.org/issue22

[issue30993] IDLE: Document, fix, and complete configdialog font tests

2017-07-23 Thread Ned Deily
Changes by Ned Deily : -- nosy: +ned.deily ___ Python tracker <http://bugs.python.org/issue30993> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29572] Upgrade installers to OpenSSL 1.0.2k

2017-07-24 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2882 ___ Python tracker <http://bugs.python.org/issue29572> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29572] Upgrade installers to OpenSSL 1.0.2k

2017-07-24 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2883 ___ Python tracker <http://bugs.python.org/issue29572> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29572] Upgrade installers to OpenSSL 1.0.2k

2017-07-24 Thread Ned Deily
Ned Deily added the comment: New changeset 002f778ecab98f4725a08f35d68f78559a13e47a by Ned Deily in branch '3.5': bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) (#2835) https://github.com/python/cpython/commit/002f778ecab98f4725a08f35d68f78

[issue29572] Upgrade installers to OpenSSL 1.0.2k

2017-07-24 Thread Ned Deily
Ned Deily added the comment: New changeset 8d41de62b9e21090c3a1ccb951ba7034a2b74180 by Ned Deily in branch '2.7': bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) (#2836) https://github.com/python/cpython/commit/8d41de62b9e21090c3a1ccb951ba70

[issue29572] Upgrade installers to OpenSSL 1.0.2k

2017-07-24 Thread Ned Deily
Changes by Ned Deily : -- resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <http://bugs.python.org/issue29572> ___

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

2017-07-24 Thread Ned Deily
Changes by Ned Deily : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <http://bugs.python.or

[issue30876] SystemError on importing module from unloaded package

2017-07-24 Thread Ned Deily
Ned Deily added the comment: When running tests from installed location, test_import now fails on master, 3.6, and 3.5 (including v3.5.4rc1) with: == ERROR: test_import_from_unloaded_package

[issue30814] Import dotted name as alias breaks with concurrency

2017-07-24 Thread Ned Deily
Ned Deily added the comment: When running tests from installed location, test_import now fails on master and 3.6 with: == ERROR: test_concurrency (test.test_import.ImportTests

[issue30814] Import dotted name as alias breaks with concurrency

2017-07-24 Thread Ned Deily
Ned Deily added the comment: > Which Git revisions are you testing? On master, do you have my latest commit > e72b1359f81d1dd42bd8a5c5cc2b3928b74f8023 ? Yes, this is with current top of trunk of both branches. Perhaps I wasn't clear about "installed location". The test

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: We should be able to fix the Makefile recipe to handle either case, i.e. when Misc/NEWS.d is not present (as in the release tarballs), don't try to run blurb. -- versions: -Python 3.3 ___ Python tracker

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: > blurb should be only used when there is a release of python, and in this > case, only by the release manager. No, that's not the case. Blurb needs to be used whenever the docs are built because the NEWS file is used in the Docs build to

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: Unfortunately, updates to the Doc build process doc have not yet been made but the intended process is to provide blurb via the "make venv" Doc build recipe which now also pip-installs blurb from PyPI. It is the necessary to use that venv to build the d

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: Please let Larry have a chance to look at this before we spend a lot of energy here rehashing discussions. We'll fix it, it's not hard! -- ___ Python tracker <http://bugs.python.o

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: Working on it. -- ___ Python tracker <http://bugs.python.org/issue31036> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: The good news is that the released tarballs starting now and going forward will already have a generated Misc/NEWS just like they always have had. So blurb is not needed if you are building docs from such tarballs (like 3.5.4rc1). We did forget about building

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: (Of course the above also applies to installed copies of Misc/NEWS, like Debian's /usr/share/doc/pythonx.x/NEWS.gz. The vanilla main Python Makefile doesn't install NEWS.) -- ___ Python tracker <http://bu

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2925 ___ Python tracker <http://bugs.python.org/issue31036> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: I just pushed PR 2874 (for 3.5) for review. I think it will solve the tarball problem. Review comments welcome. I'm still thinking about how to make blurb more easily "discoverable". That would b

[issue31036] building the python docs requires the blurb module

2017-07-25 Thread Ned Deily
Ned Deily added the comment: > I expect that in a tarball, Misc/NEWS and Misc/NEWS.d contain exactly the > same entries. They don't. See for yourself :) https://www.python.org/ftp/python/3.5.4/Python-3.5.4rc1.tgz -- ___ Python tra

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- nosy: +haypo status: pending -> open ___ Python tracker <http://bugs.python.org/issue30119> ___ ___ Python-bugs-list mailing list Un

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- status: open -> pending ___ Python tracker <http://bugs.python.org/issue30119> ___ ___ Python-bugs-list mailing list Unsubscrib

[issue23404] 'make touch' does not work with git clones of the source repository

2017-07-25 Thread Ned Deily
Ned Deily added the comment: There still might be time to get this into 3.5.4 final, if Larry agrees. -- ___ Python tracker <http://bugs.python.org/issue23

[issue1732367] Document the constants in the socket module

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- assignee: georg.brandl -> versions: +Python 3.7 -Python 2.6 ___ Python tracker <http://bugs.python.org/issue1732367> ___ ___ Python-

[issue30500] [security] urllib connects to a wrong host

2017-07-25 Thread Ned Deily
Ned Deily added the comment: New changeset 052f9d6860c48c5abcff8e16212e77cf4249d66c by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2292) https://github.com/python/cpyt

[issue30500] [security] urllib connects to a wrong host

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- assignee: -> haypo resolution: -> fixed stage: -> resolved status: open -> closed ___ Python tracker <http://bugs.python

[issue27945] Various segfaults with dict

2017-07-25 Thread Ned Deily
Ned Deily added the comment: New changeset 8fbdab50fc8f2b71f19b54f3a0208cfbf2be7713 by Ned Deily (Serhiy Storchaka) in branch '3.3': [3.3] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) (GH-1678) (#2396) https://github.com/python/cpyt

[issue27945] Various segfaults with dict

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- priority: release blocker -> resolution: -> fixed stage: commit review -> resolved status: open -> closed ___ Python tracker <http://bugs.python

[issue22928] HTTP header injection in urrlib2/urllib/httplib/http.client (CVE-2016-5699)

2017-07-25 Thread Ned Deily
Ned Deily added the comment: New changeset 8e88f6b5e2a35ee458c161aa3f2b7f1f17fb45d1 by Ned Deily (Serhiy Storchaka) in branch '3.3': [3.3] bpo-22928: Disabled HTTP header injections in http.client. (#2817) https://github.com/python/cpython/commit/8e88f6b5e2a35ee458c161aa3f2b7f

[issue22928] HTTP header injection in urrlib2/urllib/httplib/http.client (CVE-2016-5699)

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- assignee: georg.brandl -> priority: release blocker -> resolution: -> fixed stage: backport needed -> resolved status: open -> closed ___ Python tracker <http://bugs.pyt

[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows

2017-07-25 Thread Ned Deily
Ned Deily added the comment: New changeset 7b92f9fa47df754b50c64aac84cf1c09693571af by Ned Deily (Victor Stinner) in branch '3.3': bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) (#2860) https://github.com/python/cpyt

[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows

2017-07-25 Thread Ned Deily
Changes by Ned Deily : -- versions: +Python 3.3, Python 3.4 ___ Python tracker <http://bugs.python.org/issue26657> ___ ___ Python-bugs-list mailing list Unsub

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-25 Thread Ned Deily
Ned Deily added the comment: Just FYI, if the backports to 3.5, 3.4, and 3.3 happen *really* fast, we *might* be able to get them into the current round of releases, if Larry approves for 3.5.4 final and 3.4.7 final. If the 3.3 backport doesn't happen soon, 3.3 will reach end of life wi

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-25 Thread Ned Deily
Ned Deily added the comment: New changeset a4e774f86224cd8c997deaa4e71312cf1a7b023c by Ned Deily (Dong-hee Na) in branch '3.3': [3.3] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2885) https://github.com/python/cpyt

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-26 Thread Ned Deily
Ned Deily added the comment: New changeset 19b2890014d3098147d16475c492a47a43893768 by Ned Deily (Dong-hee Na) in branch '3.5': [3.5] [security] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2887) https://github.com/python/cpyt

[issue31049] macOS Python package receipts do not have version numbers

2017-07-26 Thread Ned Deily
Ned Deily added the comment: Thanks for the report. Issue24502 has already reported this issue. Feel free to add yourself to the Nosy List there. -- resolution: -> duplicate stage: -> resolved status: open -> closed superseder: -> OS X installer provides flat sub-pack

[issue24502] OS X installer provides flat sub-packages with no version numbers

2017-07-26 Thread Ned Deily
Changes by Ned Deily : -- versions: +Python 3.7 -Python 3.5 ___ Python tracker <http://bugs.python.org/issue24502> ___ ___ Python-bugs-list mailing list Unsub

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- priority: release blocker -> resolution: -> fixed stage: backport needed -> resolved status: open -> closed ___ Python tracker <http://bugs.python

[issue31058] FileFinder fails to find modules for import if modules are created at runtime and don't result in a directory mtime update

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- nosy: +brett.cannon, eric.snow, ncoghlan ___ Python tracker <http://bugs.python.org/issue31058> ___ ___ Python-bugs-list mailin

[issue31054] Python 2.7.8 Release does not update the system Path variable

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- components: +Windows -Installation nosy: +paul.moore, steve.dower, tim.golden, zach.ware versions: +Python 2.7 ___ Python tracker <http://bugs.python.org/issue31

[issue31036] building the python docs requires the blurb module

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2977 ___ Python tracker <http://bugs.python.org/issue31036> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31036] building the python docs requires the blurb module

2017-07-27 Thread Ned Deily
Ned Deily added the comment: New changeset 362e9fb0de4321bf265dbca290f7dc1f383a4a47 by Ned Deily in branch '3.4': [3.5] bpo-31036: use an existing Misc/NEWS rather than trying to use blurb (#2874) (#2926) https://github.com/python/cpython/commit/362e9fb0de4321bf265dbca290f7dc

[issue29585] site.py imports relatively large `sysconfig` module.

2017-07-27 Thread Ned Deily
Ned Deily added the comment: test_get_path fails on macOS installed framework builds: == FAIL: test_get_path (test.test_site.HelperFunctionsTests) -- Traceback

[issue29585] site.py imports relatively large `sysconfig` module.

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2979 ___ Python tracker <http://bugs.python.org/issue29585> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue28095] test_startup_imports of test_site fails on OS X due to new import of enum in re

2017-07-27 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +2978 ___ Python tracker <http://bugs.python.org/issue28095> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue29585] site.py imports relatively large `sysconfig` module.

2017-07-28 Thread Ned Deily
Ned Deily added the comment: New changeset c22bd58d933efaec26d1f77f263b2845473b7e15 by Ned Deily in branch 'master': bpo-28095: Re-enable temporarily disabled part of test_startup_imports on macOS (#2927) https://github.com/python/cpython/commit/c22bd58d933efaec26d1f77f263b28

[issue28095] test_startup_imports of test_site fails on OS X due to new import of enum in re

2017-07-28 Thread Ned Deily
Ned Deily added the comment: New changeset c22bd58d933efaec26d1f77f263b2845473b7e15 by Ned Deily in branch 'master': bpo-28095: Re-enable temporarily disabled part of test_startup_imports on macOS (#2927) https://github.com/python/cpython/commit/c22bd58d933efaec26d1f77f263b28

[issue28095] test_startup_imports of test_site fails on OS X due to new import of enum in re

2017-07-28 Thread Ned Deily
Ned Deily added the comment: The changes for bpo-29585 to speed up startup removed the import of _osx_support, and of re, from site.py so the disabled test does not fail in 3.7 and is now re-enabled. It's not appropriate to try to backport the startup speedup changes to 3.6, so the dis

[issue30992] Invalid PGP Key Prevents Archive Validation

2017-07-28 Thread Ned Deily
Ned Deily added the comment: Thanks for the report. I have opened https://github.com/python/pythondotorg/pull/1109 to remove the obsolete MD5 key from the pubkeys file. Until the updated file is deployed and the website page updated, another workaround may be to use the --allow-weak-digest

[issue30992] Invalid PGP Key Prevents Archive Validation

2017-07-28 Thread Ned Deily
Ned Deily added the comment: P.S., the pubkeys.txt file on python.org and the "OpenPGP Public Keys" section of https://www.python.org/downloads/ have now been updated. -- ___ Python tracker <http://bugs.python.o

[issue31085] Add option for namedtuple to name its result type automatically

2017-07-30 Thread Ned Deily
Changes by Ned Deily : -- nosy: +rhettinger ___ Python tracker <http://bugs.python.org/issue31085> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue30876] SystemError on importing module from unloaded package

2017-08-07 Thread Ned Deily
Ned Deily added the comment: Just to clarify: the revision added since 3.5.4rc1, f9fbed19a964e55ee703005823d8a7408f83d7f4 ([3.5] bpo-30876: Add new import test files to projects) fixes a test failure seen on all non-Windows platforms when running tests from an installed Python. It&#

[issue31045] Add a language switch to the Python documentation

2017-08-08 Thread Ned Deily
Ned Deily added the comment: For future reference, please make sure to include current release managers on proposed changes like this since doc building and distribution is part of the release process. -- nosy: +ned.deily ___ Python tracker <h

[issue31146] Docs: On non-public translations, language picker fallback to "English"

2017-08-08 Thread Ned Deily
Changes by Ned Deily : -- nosy: +ned.deily ___ Python tracker <http://bugs.python.org/issue31146> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31142] python shell crashed while input quotes in print()

2017-08-11 Thread Ned Deily
Ned Deily added the comment: Note that the web page states you need to use Tcl/Tk 8.5.18, and not 8.6.x. Both are available from ActiveState here: https://www.activestate.com/activetcl/downloads Try installing 8.5.18 (you don't need to uninstall 8.6.x) and your crashes should go

[issue31232] Backport the new custom "print >> sys.stderr" error message?

2017-08-18 Thread Ned Deily
Ned Deily added the comment: I am OK with adding it to 3.6.x. -- ___ Python tracker <http://bugs.python.org/issue31232> ___ ___ Python-bugs-list mailing list Unsub

[issue27099] IDLE: turn builting extensions into regular modules

2017-08-25 Thread Ned Deily
Changes by Ned Deily : -- nosy: -ned.deily ___ Python tracker <http://bugs.python.org/issue27099> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue31113] Stack overflow with large program

2017-08-30 Thread Ned Deily
Ned Deily added the comment: I agree with Antoine's comment on the PR: this seems like this should only go into 3.7. From the description here, it sounds like this is an edge-case problem that hasn't come up before as an issue. Let's do the right thing in master (for 3.7) and

[issue12383] subprocess.Popen(..., env={}) fails to pass empty env.

2017-09-03 Thread Ned Deily
Changes by Ned Deily : -- pull_requests: +3321 ___ Python tracker <http://bugs.python.org/issue12383> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue12383] subprocess.Popen(..., env={}) fails to pass empty env.

2017-09-03 Thread Ned Deily
Ned Deily added the comment: New changeset 918edc0edb356d0561062c1dc267b1d68a684b70 by Ned Deily in branch 'master': bpo-12383: Also ignore __PYVENV_LAUNCHER__ (#3278) https://github.com/python/cpython/commit/918edc0edb356d0561062c1dc267b1

[issue31355] Remove Travis CI job: rely on buildbots

2017-09-05 Thread Ned Deily
Ned Deily added the comment: Since Travis CI time is a bottleneck for the ongoing sprint, I agree that it makes sense to disable the macOS build checks for now. Longer term, it would be nice to resolve the problem but we certainly could rely on our own macOS buildbots; I'm not aware of

[issue31170] Update to expat 2.2.4 (expat: utf8_toUtf8 cannot properly handle exhausting buffer)

2017-09-05 Thread Ned Deily
Ned Deily added the comment: New changeset 297516ea509c72d8ebed3a9b3ce200f023aca0b7 by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3352) https://github.com/python/cpython/commit/297516ea509c72d8ebed3a9b3ce200

[issue30947] Update embeded copy of libexpat from 2.2.1 to 2.2.3

2017-09-05 Thread Ned Deily
Ned Deily added the comment: New changeset 297516ea509c72d8ebed3a9b3ce200f023aca0b7 by Ned Deily (Victor Stinner) in branch '3.3': [3.3] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3352) https://github.com/python/cpython/commit/297516ea509c72d8ebed3a9b3ce200

[issue31355] Remove Travis CI macOS job: rely on buildbots

2017-09-05 Thread Ned Deily
Ned Deily added the comment: New changeset 11453524ed26ee449275c32bedfd86ef19dd91ee by Ned Deily (Victor Stinner) in branch '3.6': bpo-31355: Travis CI: remove the macOS job (#3367) https://github.com/python/cpython/commit/11453524ed26ee449275c32bedfd86

<    22   23   24   25   26   27   28   29   30   31   >