[issue36173] spam

Change by Ned Deily : -- nosy: -Dianmatang, steven.daprano title: BROTHER PRINTER CENTER -> spam ___ Python tracker <https://bugs.python.org/issue36173> ___ _

[issue36231] no "proper" header files on macOS 10.14 Mojave

Ned Deily added the comment: Thanks for the report and for the PR offer but let's hold off on that for the moment: I'm planning to merge a somewhat different approach. -- assignee: -> ned.deily ___ Python tracker <https:/

[issue36331] check_output is returning non-zero exit status 1

Ned Deily added the comment: Did you try running the same command "screen -ls" with subprocess.run() so you can see the output from it? Or just from a terminal shell? If I do, I see: >>> subprocess.run(["screen", "-ls"]) No Sockets found in /var/fold

[issue36195] initializer is not a valid param in ThreadPoolExecutor

Ned Deily added the comment: New changeset e601ef0fa384d149f6759fff3c18762a8c63851e by Ned Deily (Harmandeep Singh) in branch '3.6': bpo-36195: Remove the ThreadPoolExecutor documentation mentioning the initializer feature added in Python 3.7 (GH-12182) https://github.com/pyth

[issue36195] initializer is not a valid param in ThreadPoolExecutor

Ned Deily added the comment: Thanks for the PR! -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.or

[issue36247] zipfile - extract truncates (existing) file when bad password provided (zip encryption weakness)

Ned Deily added the comment: I'll let it up to other coredevs to decide whether this is behavior that should be changed in master for the next feature release and/or whether a doc change is needed. But we are not going to change the behavior of 3.6 for sure so I am closing PR

[issue34461] Availability of parsers in etree initializer

Ned Deily added the comment: Thanks for the suggestion but, since there has been no agreement that this change is desirable, I am going to close the issue along with the submitted PRs. -- nosy: +ned.deily resolution: -> not a bug stage: patch review -> resolved status

[issue36344] install_certificates.command too complicated, copy from pip's dir instead

Ned Deily added the comment: Thanks for the suggestion but that is not a workable solution for two reasons. One, pip is an optional install with the python.org installer so we cannot depend on it being available. More importantly, from a packaging point of view, the internal composition of

[issue36340] 3.7.3rc1 Install Certificates fails on macOS

Ned Deily added the comment: At first glance, I'm not sure what happened here; we do try to make Install Certificates as bulletproof as possible. As you probably know, clicking on the file causes it to be opened with the macOS application that Launch Services determines is appropriate

[issue35564] [DOC] Sphinx 2.0 will require master_doc variable set in conf.py

Ned Deily added the comment: New changeset 4508bc37dd80c71adfaa0925a67c438389817076 by Ned Deily (Julien Palard) in branch '3.6': [3.6] bpo-35564: add master_doc='contents' to conf.py (GH-11290). (GH-12461) https://github.com/python/cpython/commit/4508bc37dd80c71adfaa

[issue36345] Deprecate Tools/scripts/serve.py in favour of python -m http.server -d

Ned Deily added the comment: The files in the Tools directory are installed on user systems by various distributions: for example, in Debian, as part of the python3.x-examples package and by the macOS python.org installer. If you move serve.py, it will no longer be available to end users

[issue36345] Deprecate Tools/scripts/serve.py in favour of python -m http.server -d

Ned Deily added the comment: Just dropping part-1 is fine with me, thanks. -- ___ Python tracker <https://bugs.python.org/issue36345> ___ ___ Python-bugs-list m

[issue36236] Python crash on macOS when CWD is invalid

Ned Deily added the comment: The fix for 3.7 works too: no more crashing. Thanks, everyone! -- stage: patch review -> resolved status: open -> closed ___ Python tracker <https://bugs.python.org/i

[issue34631] Upgrade to OpenSSL 1.1.1b

Ned Deily added the comment: [From the cited python-dev email]: "Python 3.7 and master (3.8) are affected. As of now, both branches use OpenSSL 1.1.0 and must be updated to 1.1.1 soonish. Ned has scheduled 3.7.3 release for 2019-03-25. That's still well within the release schedule

[issue35998] test_asyncio: test_start_tls_server_1() TimeoutError on Fedora 29

Ned Deily added the comment: I am changing the priority of this to "deferred blocker" as our current strategy outlined in Issue34631 is to target full support of OpenSSL 1.1.1 in 3.7.4 and prior to 3.8.0b1. -- nosy: +christian.heimes priority: release blocker -> def

[issue36205] Python 3.7 and 3.8 process_time is not reported correctly when built on older macOS versions

Ned Deily added the comment: @vstinner, ping -- ___ Python tracker <https://bugs.python.org/issue36205> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36344] install_certificates.command too complicated

Ned Deily added the comment: I do not disagree that the current manual Install Certificates step is not ideal but, again, for the reasons cited in my earlier response (and other reasons), adding a dependency on pip to provide certificates is not a good idea. But, since there does not seem

[issue36340] 3.7.3rc1 Install Certificates fails on macOS

Ned Deily added the comment: Ah, thanks for the further analysis, that makes more sense! The current requirement to manually launch Install Certificates is obviously less than ideal so I think the best way to avoid the race condition here is to eliminate the manual step and have the

[issue36356] Failure to build with address sanitizer

Ned Deily added the comment: For what it's worth, with current HEAD of master (commit 62be33870e2f8517314bf9c7275548e799296f7e which includes previously merged PRs from this issue), current macOS clang with address sanitizer and pydebug enabled gets an assertion failure in parse

[issue36174] Remove licenseUrl field from nuget packages

Ned Deily added the comment: New changeset 276dcc8cfbb012c932d86d2af60e1797b22b2d1c by Ned Deily (Miss Islington (bot)) in branch '3.7': bpo-36174: Update nuget authoring for new license field. (GH-12300) https://github.com/python/cpython/commit/276dcc8cfbb012c932d86d2af60e17

[issue36432] Running python test suite fails on macOS 10.14.4 with resource.RLIMIT_STACK error

New submission from Ned Deily : After upgrading my first macOS system to the newly released macOS 10.14.4 update, attempts to run the Python test suite via regrtest fail: $ /usr/local/bin/python3.7 -m test -uall -j3 -w Traceback (most recent call last): File "/Library/Frame

[issue36451] Docs zh-cn roots error in nav bar

Change by Ned Deily : -- assignee: -> mdk components: +Documentation ___ Python tracker <https://bugs.python.org/issue36451> ___ ___ Python-bugs-list mai

[issue36458] Compile errors --without-threads

Ned Deily added the comment: Thanks for the report. Unfortunately, Python 3.6.8 was the last bugfix release of 3.6 so we now only accept and fix security-related issues for it. I did a quick check and this does not appear to be a problem in 3.7.x but feel free to re-open the issue if it

[issue36464] Python 2.7 build install fails intermittently with -j on MacOS

Ned Deily added the comment: What version of macOS do you see this with and to what kind of macOS file system are you installing? Also, is the failure seem with Python 3.x installs? For what it's worth, I've never seen this and I do a *lot* of make installs on macOS but, while

[issue36468] Treeview: wrong color change

Ned Deily added the comment: Thanks for the report. The difference in behavior appears to be due to a change in Tk. Using the python.org 3.7.2 or .3 installers which use Tk 8.6.8, the colors are displayed. But if I use a Python linked with Tk 8.6.9, the bars are not colored. You can run

[issue36384] ipaddress Should not reject IPv4 addresses with leading zeroes as ambiguously octal

Ned Deily added the comment: ipaddress is behaving as documented: "The following constitutes a valid IPv4 address: A string in decimal-dot notation, consisting of four decimal integers in the inclusive range 0–255, separated by dots (e.g. 192.168.0.1). Each integer represents an octet

[issue36488] os.sendfile() on BSD OSs and macOS does not return bytes sent on EINTR

Change by Ned Deily : -- title: BSD/OSX: os.sendfile() does not return bytes sent on EINTR -> os.sendfile() on BSD OSs and macOS does not return bytes sent on EINTR versions: -Python 3.6 ___ Python tracker <https://bugs.python.org/issu

[issue36533] logging regression with threading + fork are mixed in 3.7.1rc2 (deadlock potential)

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg339506 ___ Python tracker <https://bugs.python.org/issue36533> ___ ___ Python-bugs-list m

[issue36707] The "m" ABI flag of SOABI for pymalloc is no longer needed

Ned Deily added the comment: This change has an impact on downstream packagers and users of Python 3.8 because the SOABI flag values are also used to construct a number of file names and directories names in an Unix or macOS framework install besides the extension module (*.so) file names

[issue36707] The "m" ABI flag of SOABI for pymalloc is no longer needed

Change by Ned Deily : -- assignee: -> vstinner ___ Python tracker <https://bugs.python.org/issue36707> ___ ___ Python-bugs-list mailing list Unsubscrib

[issue36707] The "m" ABI flag of SOABI for pymalloc is no longer needed

Ned Deily added the comment: No, you didn't document all the changed file names, See, for instance, /usr/bin/python3* for a start :) -- ___ Python tracker <https://bugs.python.org/is

[issue18075] Infinite recursion tests triggering a segfault

Change by Ned Deily : -- pull_requests: +12933 ___ Python tracker <https://bugs.python.org/issue18075> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue34602] python3 resource.setrlimit strange behaviour under macOS

Change by Ned Deily : -- keywords: +patch pull_requests: +12932 stage: -> patch review ___ Python tracker <https://bugs.python.org/issue34602> ___ ___ Python-

[issue34602] python3 resource.setrlimit strange behaviour under macOS

Ned Deily added the comment: New changeset 883dfc668f9730b00928730035b5dbd24b9da2a0 by Ned Deily in branch 'master': bpo-34602: Avoid failures setting macOS stack resource limit (GH-13011) https://github.com/python/cpython/commit/883dfc668f9730b00928730035b5db

[issue18075] Infinite recursion tests triggering a segfault

Ned Deily added the comment: New changeset 883dfc668f9730b00928730035b5dbd24b9da2a0 by Ned Deily in branch 'master': bpo-34602: Avoid failures setting macOS stack resource limit (GH-13011) https://github.com/python/cpython/commit/883dfc668f9730b00928730035b5dbd24b9da2a0 -

[issue36432] Running python test suite fails on macOS 10.14.4 with resource.RLIMIT_STACK error

Ned Deily added the comment: Thanks, Inada-san, for the pointer. Closing this as a duplicate of Issue34602 -- resolution: -> duplicate stage: test needed -> resolved status: open -> closed superseder: -> python3 resource.setrlimit strange behaviour

[issue34602] python3 resource.setrlimit strange behaviour under macOS

Ned Deily added the comment: New changeset fbe2a1394bf52f5a4455681e1b1f705a31559585 by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-34602: Avoid failures setting macOS stack resource limit (GH-13011) (GH-13014) https://github.com/python/cpyt

[issue18075] Infinite recursion tests triggering a segfault

Ned Deily added the comment: New changeset fbe2a1394bf52f5a4455681e1b1f705a31559585 by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-34602: Avoid failures setting macOS stack resource limit (GH-13011) (GH-13014) https://github.com/python/cpyt

[issue34602] python3 resource.setrlimit strange behaviour under macOS

Ned Deily added the comment: Thanks for the analyses everyone! Also see the discussion in duplicate Issue36432. I was never able to reproduce the failure on earlier versions of macOS but then it seemed to become a hard failure with the release of 10.14.4. I haven't gone back and

[issue35184] Makefile is not correctly generated when compiling pyextat with DXML_POOR_ENTROPY=1

Ned Deily added the comment: Thanks for the report and thanks for the PR. I am confused here as I cannot reproduce the failure. Can someone show what is invalid in the Makefile? Also, if the change really does need to be made to Setup.dist (3.7) or Setup (master -> 3.8), then setup

[issue9194] winreg:fixupMultiSZ should check that P < Q in the inner loop

Ned Deily added the comment: New changeset dadc3478950c389c120fb16f44e5a29cc43f by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-9194: Fix the bounds checking in winreg.c's fixupMultiSZ() (GH-12687) (GH-12910) https://github.com/python

[issue9194] winreg:fixupMultiSZ should check that P < Q in the inner loop

Change by Ned Deily : -- versions: +Python 3.6 ___ Python tracker <https://bugs.python.org/issue9194> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36742] urlsplit doesn't accept a NFKD hostname with a port number

Ned Deily added the comment: New changeset e5f9f4adb95233c66578e6f7ea176687af2f78ca by Ned Deily (Miss Islington (bot)) in branch '3.6': bpo-36742: Fixes handling of pre-normalization characters in urlsplit() (GH-13017) (GH-13024) https://github.com/python/cpyt

[issue35726] QueueHandler formatting affects other handlers

Ned Deily added the comment: New changeset 386b6f07a9703746590a5f29281b93c931c0e6d3 by Ned Deily (Xtreak) in branch '3.7': [3.7] bpo-35726: Prevented QueueHandler formatting from affecting other handlers (GH-11537) (GH-12716) https://github.com/python/cpyt

[issue35726] QueueHandler formatting affects other handlers

Ned Deily added the comment: New changeset 3f8f64ebf3ab05038ed0b5a4adc83d0a5e9fbb82 by Ned Deily (Miss Islington (bot)) in branch '3.7': bpo-35726: Add test for QueueHandler with multiple handlers (GH-11659) (GH-13061) https://github.com/python/cpyt

[issue35726] QueueHandler formatting affects other handlers

Change by Ned Deily : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed versions: +Python 3.8 ___ Python tracker <https://bugs.python.or

[issue34155] email.utils.parseaddr mistakenly parse an email

Ned Deily added the comment: @barry, @r.david.murray, With the additional info about attacks in the wild, should we now consider this a security issue? If so, someone needs to provide an actual PR. (Raising the priority to "deferred blocker" pending evaluation.) -

[issue35184] Makefile is not correctly generated when compiling pyextat with DXML_POOR_ENTROPY=1

Ned Deily added the comment: Thanks for the updates, Aaron. The plot thickens! If I perform the steps on a current macOS system, the result is: 273 pyexpat expat/xmlparse.c expat/xmlrole.c expat/xmltok.c pyexpat.c -I$(srcdir)/Modules/expat -DHAVE_EXPAT_CONFIG_H -DXML_POOR_ENTROPY=1

[issue36795] "make venv" failed in Docs

Change by Ned Deily : -- nosy: +mdk ___ Python tracker <https://bugs.python.org/issue36795> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue30458] [security][CVE-2019-9740][CVE-2019-9947] HTTP Header Injection (follow-up of CVE-2016-5699)

Ned Deily added the comment: New changeset c50d437e942d4c4c45c8cd76329b05340c02eb31 by Ned Deily (Miro Hrončok) in branch '3.6': bpo-30458: Disallow control chars in http URLs. (GH-12755) (GH-13155) https://github.com/python/cpython/commit/c50d437e942d4c4c45c8cd76329b05

[issue36816] self-signed.pythontest.net TLS certificate key is too weak

Ned Deily added the comment: New changeset 2b9d7abdbd4b41e2c624858f5bc80da59d8a681d by Ned Deily (Gregory P. Smith) in branch '3.6': [3.6] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (GH-13198) https://github.com/python/cpyt

[issue36868] New behavior of OpenSSL hostname verification not exposed, incorrectly documented

Change by Ned Deily : -- nosy: +ned.deily ___ Python tracker <https://bugs.python.org/issue36868> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36866] Certificate verification errors in urllib.request become URLError

Change by Ned Deily : -- nosy: +ned.deily ___ Python tracker <https://bugs.python.org/issue36866> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue36853] inconsistencies in docs builds (Sphinx 2)

Change by Ned Deily : -- nosy: +mdk ___ Python tracker <https://bugs.python.org/issue36853> ___ ___ Python-bugs-list mailing list Unsubscribe: https://mail.pyth

[issue26317] Build Problem with GCC + Macintosh OS X 10.11 El Capitain

Ned Deily added the comment: THe _scproxy.c compile error is a separate issue. The problem arises in an Apple-supplied include file and there are many reports on the web of clang vs gcc differences like this. I'm not sure what we could or should do about it other than forcing _scpro

[issue32592] Drop support of Windows Vista in Python 3.8

Change by Ned Deily : -- nosy: +lukasz.langa ___ Python tracker <https://bugs.python.org/issue32592> ___ ___ Python-bugs-list mailing list Unsubscribe:

[issue32981] Catastrophic backtracking in poplib (CVE-2018-1060) and difflib (CVE-2018-1061)

Ned Deily added the comment: New changeset 942cc04ae44825ea120e3a19a80c9b348b8194d0 by larryhastings (Ned Deily) in branch '3.4': [3.4] bpo-32981: Fix catastrophic backtracking vulns (GH-5955) (#6035) https://github.com/python/cpython/commit/942cc04ae44825ea120e3a19a80c9b

[issue30657] [security] CVE-2017-1000158: Unsafe arithmetic in PyString_DecodeEscape

Ned Deily added the comment: New changeset 6c004b40f9d51872d848981ef1a18bb08c2dfc42 by larryhastings (Miro Hrončok) in branch '3.4': bpo-30657: Fix CVE-2017-1000158 (#4758) https://github.com/python/cpython/commit/6c004b40f9d51872d848981ef1a18bb08c2dfc42 -- nosy:

[issue34656] [CVE-2018-20406] memory exhaustion in Modules/_pickle.c:1393

Ned Deily added the comment: New changeset 4b42d575bf0fb01192b3ec54b7e224b238691527 by larryhastings (Victor Stinner) in branch '3.4': [3.4] bpo-34656: Avoid relying on signed overflow in _pickle memos (GH-9261) (#11870) https://github.com/python/cpyt

[issue30694] Update embedded copy of expat to 2.2.1

Ned Deily added the comment: New changeset 71572bbe82aa0836c036d44d41c8269ba6a321be by larryhastings (Victor Stinner) in branch '3.4': [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2203) https://github.com/python/cpyt

[issue30730] [security] Injecting environment variable in subprocess on Windows

Ned Deily added the comment: New changeset fe82c46327effc124ff166e1fa1e611579e1176b by larryhastings (Serhiy Storchaka) in branch '3.4': [security][3.4] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2362) https://github.com/python/cpyt

[issue30726] [Windows] Warnings in elementtree due to new expat

Ned Deily added the comment: New changeset 71572bbe82aa0836c036d44d41c8269ba6a321be by larryhastings (Victor Stinner) in branch '3.4': [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2203) https://github.com/python/cpyt

[issue33329] sigaddset() can fail on some signal numbers

Ned Deily added the comment: New changeset 2226139aa2b69047cb54dbcfd79f5c2e36f98653 by larryhastings (Cheryl Sabella) in branch '3.4': [3.4] bpo-33329: Fix multiprocessing regression on newer glibcs (GH-6575) (#12145) https://github.com/python/cpyt

[issue32072] Issues with binary plists

Ned Deily added the comment: New changeset c59731d92dc73111d224876f1caa064097aad786 by larryhastings (Serhiy Storchaka) in branch '3.4': [3.4] bpo-32072: Fix issues with binary plists. (GH-4455) (#4658) https://github.com/python/cpython/commit/c59731d92dc73111d224876f1caa06

[issue30119] (ftplib) A remote attacker could possibly attack by containing the newline characters

Ned Deily added the comment: New changeset 2a5a26c87e82c7d9a348792891feccd1b5e9a769 by larryhastings (Dong-hee Na) in branch '3.4': [3.4] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2893) https://github.com/python/cpyt

[issue33001] Buffer overflow vulnerability in os.symlink on Windows (CVE-2018-1000117)

Ned Deily added the comment: New changeset 77c02cdce2d7b8360771be35b7676a4977e070c1 by larryhastings (Steve Dower) in branch '3.4': [3.4] bpo-33001: Prevent buffer overrun in os.symlink (GH-5989) (#5992) https://github.com/python/cpython/commit/77c02cdce2d7b8360771be35b7676a

[issue34623] _elementtree.c doesn't call XML_SetHashSalt()

Ned Deily added the comment: New changeset d16eaf36795da48b930b80b20d3805bc27820712 by larryhastings (stratakis) in branch '3.4': [3.4] bpo-34623: Use XML_SetHashSalt in _elementtree (#9953) https://github.com/python/cpython/commit/d16eaf36795da48b930b80b20d3805bc27820712 -

[issue27945] Various segfaults with dict

Ned Deily added the comment: New changeset f7344798e57da6b9c4ed9372e8eaecde80989c86 by larryhastings (Serhiy Storchaka) in branch '3.4': [3.4] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) (GH-1678) (#2248) https://github.com/python/cpyt

[issue32620] [3.5] Travis CI fails on Python 3.5 with "pyenv: version `3.5' not installed"

Ned Deily added the comment: New changeset 71b94e30b1d63c789908482b3b808cc613e57267 by larryhastings in branch '3.4': [3.4] [3.5] bpo-32620: Remove failing pyenv call from CI config (GH-5274) (#5533) https://github.com/python/cpython/commit/71b94e30b1d63c789908482b3b808c

[issue29572] Upgrade installers to OpenSSL 1.0.2k

Ned Deily added the comment: New changeset 092db6c3cb049052fbfca15efc85ad68093676e7 by larryhastings (Victor Stinner) in branch '3.4': bpo-29572: Update Windows build to OpenSSL 1.0.2k (GH-443) (#3445) https://github.com/python/cpython/commit/092db6c3cb049052fbfca15efc85ad

[issue35121] Cookie domain check returns incorrect results

Ned Deily added the comment: New changeset 42ad4101d3ba7ca3c371dadf0f8880764c9f15fb by larryhastings (Xtreak) in branch '3.4': [3.4] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (#12279) https://github.com/python/cpyt

[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows

Ned Deily added the comment: New changeset 6f6bc1da8aaae52664e7747e328d26eb59c0e74f by larryhastings (Victor Stinner) in branch '3.4': bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) https://github.com/python/cpyt

[issue35647] Cookie path check returns incorrect results

Ned Deily added the comment: New changeset e260f092cd0d8975c777e73ca6fb549d59b5d452 by larryhastings (Xtreak) in branch '3.4': bpo-35647: Fix path check in cookiejar (#11436) (#12278) https://github.com/python/cpython/commit/e260f092cd0d8975c777e73ca6fb54

[issue30500] [security] urllib connects to a wrong host

Ned Deily added the comment: New changeset cc54c1c0d2d05fe7404ba64c53df4b1352ed2262 by larryhastings (Victor Stinner) in branch '3.4': bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2291) https://github.com/python/cpyt

[issue34791] xml package does not obey sys.flags.ignore_environment

Ned Deily added the comment: New changeset 765d333512e9b58da4a4431595a0e81517ef0443 by larryhastings (Victor Stinner) in branch '3.4': bpo-34791: xml package obeys ignore env flags (GH-9544) (#11872) https://github.com/python/cpython/commit/765d333512e9b58da4a4431595a0e8

[issue31036] building the python docs requires the blurb module

Ned Deily added the comment: New changeset 362e9fb0de4321bf265dbca290f7dc1f383a4a47 by Ned Deily in branch '3.4': [3.5] bpo-31036: use an existing Misc/NEWS rather than trying to use blurb (#2874) (#2926) https://github.com/python/cpython/commit/362e9fb0de4321bf265dbca290f7dc

[issue26617] Assertion failed in gc with __del__ and weakref

Ned Deily added the comment: New changeset 34fae03cd6c9e304e02c571b3bf9e8df0cfe76be by larryhastings (Serhiy Storchaka) in branch '3.4': [3.4] bpo-26617: Ensure gc tracking is off when invoking weakref callbacks. (#2695) https://github.com/python/cpyt

[issue29591] expat 2.2.0: Various security vulnerabilities in bundled expat (CVE-2016-0718 and CVE-2016-4472)

Ned Deily added the comment: New changeset 71572bbe82aa0836c036d44d41c8269ba6a321be by larryhastings (Victor Stinner) in branch '3.4': [3.4] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2203) https://github.com/python/cpyt

[issue30939] Sphinx 1.6.3 deprecation warning for sphinx.util.compat.Directive in docs builds

Ned Deily added the comment: New changeset 3b3a5a5b70dc468dcfacb17a3d6b342820b480ff by larryhastings (Ned Deily) in branch '3.4': bpo-30939: Avoid Sphinx deprecation warning in docs build. (#2721) (#2724) https://github.com/python/cpython/commit/3b3a5a5b70dc468dcfacb17a3d6b34

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

Ned Deily added the comment: New changeset 6c655ce34ae54adb8eef22b73108e22cc381cb8d by larryhastings (Victor Stinner) in branch '3.4': bpo-35746: Fix segfault in ssl's cert parser (GH-11569) (#11868) https://github.com/python/cpython/commit/6c655ce34ae54adb8eef22b73

[issue30231] test_imaplib needs a TLS server accepting self-signed certificates

Ned Deily added the comment: New changeset b1549175ed30f2931e2bb980a7e3c360ed19e1c9 by larryhastings (Victor Stinner) in branch '3.4': [3.4] Backport CI config from master (#2475) https://github.com/python/cpython/commit/b1549175ed30f2931e2bb980a7e3c3

[issue29169] update zlib to 1.2.11

Ned Deily added the comment: New changeset d0e61bded5256e775e470e2c0da22367a1a81970 by larryhastings (Victor Stinner) in branch '3.4': bpo-29169: Update zlib to 1.2.11 (#3107) https://github.com/python/cpython/commit/d0e61bded5256e775e470e2c0da22367a1a81970 -- nosy:

[issue36216] CVE-2019-9636: urlsplit does not handle NFKC normalization

Ned Deily added the comment: New changeset 62d36547f97210a26cc6051da78714fd078e158c by larryhastings (Steve Dower) in branch '3.4': bpo-36216: Add check for characters in netloc that normalize to separators (GH-12201) (#12224) https://github.com/python/cpyt

[issue31170] Update to expat 2.2.4 (expat: utf8_toUtf8 cannot properly handle exhausting buffer)

Ned Deily added the comment: New changeset 86a713cb0c110b6798ca7f9e630fc511ee0a4028 by larryhastings (Victor Stinner) in branch '3.4': [3.4][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3353) https://github.com/python/cpyt

[issue30947] Update embeded copy of libexpat from 2.2.1 to 2.2.3

Ned Deily added the comment: New changeset 86a713cb0c110b6798ca7f9e630fc511ee0a4028 by larryhastings (Victor Stinner) in branch '3.4': [3.4][Security] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3353) https://github.com/python/cpyt

[issue25008] Deprecate smtpd (based on deprecated asyncore/asynchat)

Ned Deily added the comment: New changeset f37b0cb230069481609b0bb06891b5dd26320504 by Barry Warsaw in branch '3.4': bpo-25008: Deprecate smtpd and point to aiosmtpd (#274) (#280) https://github.com/python/cpython/commit/f37b0cb230069481609b0bb06891b5dd26320504 -- nosy:

[issue35746] [ssl][CVE-2019-5010] TALOS-2018-0758 Denial of Service

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342112 ___ Python tracker <https://bugs.python.org/issue35746> ___ ___ Python-bugs-list m

[issue32620] [3.5] Travis CI fails on Python 3.5 with "pyenv: version `3.5' not installed"

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342108 ___ Python tracker <https://bugs.python.org/issue32620> ___ ___ Python-bugs-list m

[issue29169] update zlib to 1.2.11

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342113 ___ Python tracker <https://bugs.python.org/issue29169> ___ ___ Python-bugs-list m

[issue30694] Update embedded copy of expat to 2.2.1

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342085 ___ Python tracker <https://bugs.python.org/issue30694> ___ ___ Python-bugs-list m

[issue26617] Assertion failed in gc with __del__ and weakref

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342107 ___ Python tracker <https://bugs.python.org/issue26617> ___ ___ Python-bugs-list m

[issue35121] Cookie domain check returns incorrect results

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342111 ___ Python tracker <https://bugs.python.org/issue35121> ___ ___ Python-bugs-list m

[issue30500] [security] urllib connects to a wrong host

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342098 ___ Python tracker <https://bugs.python.org/issue30500> ___ ___ Python-bugs-list m

[issue29572] Upgrade installers to OpenSSL 1.0.2k

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342106 ___ Python tracker <https://bugs.python.org/issue29572> ___ ___ Python-bugs-list m

[issue30947] Update embeded copy of libexpat from 2.2.1 to 2.2.3

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342105 ___ Python tracker <https://bugs.python.org/issue30947> ___ ___ Python-bugs-list m

[issue31170] Update to expat 2.2.4 (expat: utf8_toUtf8 cannot properly handle exhausting buffer)

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342109 ___ Python tracker <https://bugs.python.org/issue31170> ___ ___ Python-bugs-list m

[issue36216] CVE-2019-9636: urlsplit does not handle NFKC normalization

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342088 ___ Python tracker <https://bugs.python.org/issue36216> ___ ___ Python-bugs-list m

[issue33001] Buffer overflow vulnerability in os.symlink on Windows (CVE-2018-1000117)

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342103 ___ Python tracker <https://bugs.python.org/issue33001> ___ ___ Python-bugs-list m

[issue27945] Various segfaults with dict

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342104 ___ Python tracker <https://bugs.python.org/issue27945> ___ ___ Python-bugs-list m

[issue26657] Directory traversal with http.server and SimpleHTTPServer on windows

Change by Ned Deily : -- Removed message: https://bugs.python.org/msg342102 ___ Python tracker <https://bugs.python.org/issue26657> ___ ___ Python-bugs-list m

<    26   27   28   29   30   31   32   33   34   35   >