Skip to content

Commit 2b344d0

Browse files
gladkutkarsh2102
authored andcommitted
Import Debian changes 3.5.3-1+deb9u4
python3.5 (3.5.3-1+deb9u4) stretch-security; urgency=medium * Non-maintainer upload by the LTS Security Team. * CVE-2021-23336: only use '&' as a query string separator * CVE-2021-3426: remove the pydoc getfile feature * CVE-2021-3177: replace snprintf with Python unicode python3.5 (3.5.3-1+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the LTS Team. [ Thorsten Alteholz ] * CVE-2019-20907: In Lib/tarfile.py, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation * CVE-2020-26116: http.client allows CRLF injection if the attacker controls the HTTP request method [ Roberto C. Sánchez ] * Update expired SSL certificates in unit test suite. python3.5 (3.5.3-1+deb9u2) stretch-security; urgency=high * Non-maintainer upload by the LTS Security Team. * CVE-2018-20406: Modules/_pickle.c has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. * CVE-2018-20852: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. * Update test_ssl.py with newer certificate and openssl version handling * CVE-2019-5010: an exploitable denial-of-service vulnerability exists in the X509 certificate parser. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability. * CVE-2019-9636: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. * Fix functional regression introduced by CVE-2019-9636 fix, which in turn introduces CVE-2019-10160 * CVE-2019-10160: a security regression was discovered in python, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application. * CVE-2019-9740: an issue was discovered in urllib2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. * CVE-2019-9947: an issue was discovered in urllib2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. * CVE-2019-18348: an issue was discovered in urllib2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue * CVE-2019-9948: urllib supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call. * CVE-2019-16935: The documentation XML-RPC server has XSS via the server_title field. This occurs in Lib/xmlrpc/server.py. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server. * CVE-2019-16056: the email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally. * CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking. python3.5 (3.5.3-1+deb9u1) stretch-security; urgency=medium * CVE-2017-1000158 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 python3.5 (3.5.3-1) unstable; urgency=medium * Python 3.5.3 release. python3.5 (3.5.3~rc1-1) unstable; urgency=medium * Python 3.5.3 release candidate 1. - Issue #29073: bytearray formatting no longer truncates on first null byte. - Issue #28932: Do not include <sys/random.h> if it does not exist. - Issue #28147: Fix a memory leak in split-table dictionaries: setattr() must not convert combined table into split table. - Issue #25677: Correct the positioning of the syntax error caret for indented blocks. - Issue #29000: Fixed bytes formatting of octals with zero padding in alternate form. - Issue #15812: inspect.getframeinfo() now correctly shows the first line of a context. - Issue #29094: Offsets in a ZIP file created with extern file object and modes "w" and "x" now are relative to the start of the file. - Issue #13051: Fixed recursion errors in large or resized curses.textpad.Textbox. - Issue #29119: Fix weakrefs in the pure python version of collections.OrderedDict move_to_end() method. - Issue #9770: curses.ascii predicates now work correctly with negative integers. - Issue #28427: old keys should not remove new values from WeakValueDictionary when collecting from another thread. - Issue 28923: Remove editor artifacts from Tix.py. - Issue #28871: Fixed a crash when deallocate deep ElementTree. - Issue #19542: Fix bugs in WeakValueDictionary.setdefault() and WeakValueDictionary.pop() when a GC collection happens in another thread. - Issue #20191: Fixed a crash in resource.prlimit() when pass a sequence that doesn't own its elements as limits. - Issue #28990: Fix SSL hanging if connection is closed before handshake completed. * Update symbols files. python3.5 (3.5.2-9) unstable; urgency=medium * Update to 20161213 from the 3.5 branch. - Issue #28512: Fixed setting the offset attribute of SyntaxError by PyErr_SyntaxLocationEx() and PyErr_SyntaxLocationObject(). - Issue #5322: Fixed setting __new__ to a PyCFunction inside Python code. - Issue #28779: multiprocessing.set_forkserver_preload() would crash the forkserver process if a preloaded module instantiated some multiprocessing objects such as locks. - Issue #28847: dbm.dumb now supports reading read-only files and no longer writes the index file when it is not changed. - Issue #24142: Reading a corrupt config file left the parser in an invalid state. - Issue #28808: PyUnicode_CompareWithASCIIString() now never raises exceptions. * Update references in pdb(1). Closes: #840239. * Update symbols files. python3.5 (3.5.2-8) unstable; urgency=medium * Update to 20161121 from the 3.5 branch. - Issue #19398: Extra slash no longer added to sys.path components in case of empty compile-time PYTHONPATH components. - Issue #27942: Fix memory leak in codeobject.c - Issue #25659: In ctypes, prevent a crash calling the from_buffer() and from_buffer_copy() methods on abstract classes like Array. - Issue #28732: Fix crash in os.spawnv() with no elements in args. - Issue #28485: Always raise ValueError for negative compileall.compile_dir(workers=...) parameter, even when multithreading is unavailable. - Issue #28387: Fixed possible crash in _io.TextIOWrapper deallocator when the garbage collector is invoked in other thread. - Issue #28600: Optimize loop.call_soon(). - Issue #28613: Fix get_event_loop() return the current loop if called from coroutines/callbacks. - Issue #28639: Fix inspect.isawaitable to always return bool - Issue #28652: Make loop methods reject socket kinds they do not support. - Issue #28653: Fix a refleak in functools.lru_cache. - Issue #28703: Fix asyncio.iscoroutinefunction to handle Mock objects. - Issue #28666: Now test.support.rmtree is able to remove unwritable or unreadable directories. - Issue #23839: Various caches now are cleared before running every test file. - Issue #26359: Rename --with-optimiations to --enable-optimizations. python3.5 (3.5.2-7) unstable; urgency=medium * Update to 20161103 from the 3.5 branch. - Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug build. - Issue #23782: Fixed possible memory leak in _PyTraceback_Add() and exception loss in PyTraceBack_Here(). - Issue #28379: Added sanity checks and tests for PyUnicode_CopyCharacters(). - Issue #28376: The type of long range iterator is now registered as Iterator. - Issue #28376: The constructor of range_iterator now checks that step is not 0. - Issue #26906: Resolving special methods of uninitialized type now causes implicit initialization of the type instead of a fail. - Issue #18287: PyType_Ready() now checks that tp_name is not NULL. - Issue #24098: Fixed possible crash when AST is changed in process of compiling it. - Issue #28350: String constants with null character no longer interned. - Issue #26617: Fix crash when GC runs during weakref callbacks. - Issue #27942: String constants now interned recursively in tuples and frozensets. - Issue #21578: Fixed misleading error message when ImportError called with invalid keyword args. - Issue #28203: Fix incorrect type in error message from ``complex(1.0, {2:3})``. - Issue #27517: LZMA compressor and decompressor no longer raise exceptions if given empty data twice. - Issue #28549: Fixed segfault in curses's addch() with ncurses6. - Issue #28449: tarfile.open() with mode "r" or "r:" now tries to open a tar file with compression before trying to open it without compression. Otherwise it had 50% chance failed with ignore_zeros=True. - Issue #23262: The webbrowser module now supports Firefox 36+ and derived browsers. - Issue #27939: Fixed bugs in tkinter.ttk.LabeledScale and tkinter.Scale caused by representing the scale as float value internally in Tk. tkinter.IntVar now works if float value is set to underlying Tk variable. - Issue #28255: calendar.TextCalendar().prmonth() no longer prints a space at the start of new line after printing a month's calendar. - Issue #20491: The textwrap.TextWrapper class now honors non-breaking spaces. - Issue #28353: os.fwalk() no longer fails on broken links. - Issue #25464: Fixed HList.header_exists() in tkinter.tix module by addin a workaround to Tix library bug. - Issue #28488: shutil.make_archive() no longer add entry "./" to ZIP archive. - Issue #24452: Make webbrowser support Chrome on Mac OS X. - Issue #20766: Fix references leaked by pdb in the handling of SIGINT handlers. - Issue #26293: Fixed writing ZIP files that starts not from the start of the file. Offsets in ZIP file now are relative to the start of the archive in conforming to the specification. - Issue #28321: Fixed writing non-BMP characters with binary format in plistlib. - Issue #28322: Fixed possible crashes when unpickle itertools objects from incorrect pickle data. - Fix possible integer overflows and crashes in the mmap module with unusual usage patterns. - Issue #1703178: Fix the ability to pass the --link-objects option to the distutils build_ext command. - Issue #28253: Fixed calendar functions for extreme months: 0001-01 and 9999-12. - Issue #28275: Fixed possible use after free in the decompress() methods of the LZMADecompressor and BZ2Decompressor classes. - Issue #27897: Fixed possible crash in sqlite3.Connection.create_collation() if pass invalid string-like object as a name. - Issue #27611: Fixed support of default root window in the tkinter.tix module. - Issue #28368: Refuse monitoring processes if the child watcher has no loop attached. - Issue #28369: Raise RuntimeError when transport's FD is used with add_reader, add_writer, etc. - Issue #28370: Speedup asyncio.StreamReader.readexactly. - Issue #28371: Deprecate passing asyncio.Handles to run_in_executor. - Issue #28372: Fix asyncio to support formatting of non-python coroutines. - Issue #28399: Remove UNIX socket from FS before binding. - Issue #27972: Prohibit Tasks to await on themselves. - Issue #26923: Fix asyncio.Gather to refuse being cancelled once all children are done. - Issue #26796: Don't configure the number of workers for default threadpool executor. - Issue #15308: Add 'interrupt execution' (^C) to Shell menu. - Issue #28513: Documented command-line interface of zipfile. - Issue #28409: regrtest: fix the parser of command line arguments. - Issue #28444: Fix missing extensions modules when cross compiling. - Issue #28258: Fixed build with Estonian locale (python-config and distclean targets in Makefile). * Build using openssl 1.1. Closes: #835794. python3.5 (3.5.2-6) unstable; urgency=medium * Update to 20160922 from the 3.5 branch. - Issue #27955: Fallback on reading /dev/urandom device when the getrandom() syscall fails with EPERM, for example when blocked by SECCOMP. - Issue #28131: Fix a regression in zipimport's compile_source(). zipimport should use the same optimization level as the interpreter. - Issue #25221: Fix corrupted result from PyLong_FromLong(0) when Python is compiled with NSMALLPOSINTS = 0. - Issue #28189: dictitems_contains no longer swallows compare errors. - Issue #27348: In the traceback module, restore the formatting of exception messages like "Exception: None". This fixes a regression introduced in 3.5a2. - Issue #25651: Allow falsy values to be used for msg parameter of subTest(). - Fix UnboundLocalError in socket._sendfile_use_sendfile. - Issue #28075: Check for ERROR_ACCESS_DENIED in Windows implementation of os.stat(). - Issue #25270: Prevent codecs.escape_encode() from raising SystemError when an empty bytestring is passed. - Issue #28181: Get antigravity over HTTPS. - Issue #25895: Enable WebSocket URL schemes in urllib.parse.urljoin. - Issue #27599: Fixed buffer overrun in binascii.b2a_qp() and binascii.a2b_qp(). - Issue #19003:m email.generator now replaces only \r and/or \n line endings, per the RFC, instead of all unicode line endings. - Issue #28019: itertools.count() no longer rounds non-integer step in range between 1.0 and 2.0 to 1. - Issue #25969: Update the lib2to3 grammar to handle the unpacking generalizations added in 3.5. - Issue #17582: xml.etree.ElementTree nows preserves whitespaces in attributes. - Issue #27456: asyncio: Set TCP_NODELAY by default. - Issue #27906: Fix socket accept exhaustion during high TCP traffic. - Issue #28174: Handle when SO_REUSEPORT isn't properly supported. - Issue #26654: Inspect functools.partial in asyncio.Handle.__repr__. - Issue #26909: Fix slow pipes IO in asyncio. - Issue #28176: Fix callbacks race in asyncio.SelectorLoop.sock_connect. - Issue #27759: Fix selectors incorrectly retain invalid file descriptors. - Issue #27922: Stop IDLE tests from 'flashing' gui widgets on the screen. - Add version to title of IDLE help window. - Issue #25564: In section on IDLE -- console differences, mention that using exec means that __builtins__ is defined for each statement. - Issue #27952: Get Tools/scripts/fixcid.py working with Python 3 and the current "re" module, avoid invalid Python backslash escapes, and fix a bug parsing escaped C quote signs. - Issue #26661: setup.py now detects system libffi with multiarch wrapper. - Issue #28066: Fix the logic that searches build directories for generated include files when building outside the source tree. - Issue #15819: Remove redundant include search directory option for building outside the source tree. - Issue #27566: Fix clean target in freeze makefile. - Issue #27705: Update message in validate_ucrtbase.py * Don't build the fpectl module on hppa. Closes: #837314. python3.5 (3.5.2-5) unstable; urgency=medium * Update to 20160910 from the 3.5 branch. - Issue #25758: Prevents zipimport from unnecessarily encoding a filename. - Issue #27812: Properly clear out a generator's frame's backreference to the generator to prevent crashes in frame.clear(). - Issue #27811: Fix a crash when a coroutine that has not been awaited is finalized with warnings-as-errors enabled. - Issue #26020: set literal evaluation order did not match documented behaviour. - Issue #27936: The round() function accepted a second None argument for some types but not for others. Fixed the inconsistency by accepting None for all numeric types. - Issue #14977: mailcap now respects the order of the lines in the mailcap files ("first match"), as required by RFC 1542. - Issue #24594: Validates persist parameter when opening MSI database - Issue #28047: Fixed calculation of line length used for the base64 CTE in the new email policies. - Issue #27445: Don't pass str(_charset) to MIMEText.set_payload(). - Issue #22450: urllib now includes an "Accept: */*" header among the default headers. This makes the results of REST API requests more consistent and predictable especially when proxy servers are involved. - lib2to3.pgen3.driver.load_grammar() now creates a stable cache file between runs given the same Grammar.txt input regardless of the hash randomization setting. - Issue #27570: Avoid zero-length memcpy() etc calls with null source pointers in the "ctypes" and "array" modules. - Issue #22233: Break email header lines *only* on the RFC specified CR and LF characters, not on arbitrary unicode line breaks. This also fixes a bug in HTTP header parsing. - Issue 27988: Fix email iter_attachments incorrect mutation of payload list. - Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name fields in X.509 certs. - Issue #27850: Remove 3DES from ssl module's default cipher list to counter measure sweet32 attack (CVE-2016-2183). - Issue #27766: Add ChaCha20 Poly1305 to ssl module's default ciper list. (Required OpenSSL 1.1.0 or LibreSSL). - Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0. - Remove support for passing a file descriptor to os.access. It never worked but previously didn't raise. - Issue #12885: Fix error when distutils encounters symlink. - Issue #27881: Fixed possible bugs when setting sqlite3.Connection.isolation_level. - Issue #27706: Restore deterministic behavior of random.Random().seed() for string seeds using seeding version 1. Allows sequences of calls to random() to exactly match those obtained in Python 2. - Issue #27930: Improved behaviour of logging.handlers.QueueListener. - Issue #21201: Improves readability of multiprocessing error message. - Issue #27983: Cause lack of llvm-profdata tool when using clang as required for PGO linking to be a configure time error rather than make time when --with-optimizations is enabled. Also improve our ability to find the llvm-profdata tool on MacOS and some Linuxes. - Issue #26307: The profile-opt build now applys PGO to the built-in modules. - Issue #26359: Add the --with-optimizations configure flag. * Fix invalid code in pyhash/siphash24. LP: #1620754. Issue #28055. * Disable the Pgen cache tests; not shipping the pickled grammar files. * Update symbols files. python3.5 (3.5.2-4) unstable; urgency=medium * Update to 20160830 from the 3.5 branch. - Issue #27587: Fix another issue found by PVS-Studio: Null pointer check after use of 'def' in _PyState_AddModule(). - Issue #27782: Multi-phase extension module import now correctly allows the ``m_methods`` field to be used to add module level functions to instances of non-module types returned from ``Py_create_mod``. - Issue #27487: Warn if a submodule argument to "python -m" or runpy.run_module() is found in sys.modules after parent packages are imported, but before the submodule is executed. - Issue #27558: Fix a SystemError in the implementation of "raise" statement. In a brand new thread, raise a RuntimeError since there is no active exception to reraise. - Issue #27861: Fixed a crash in sqlite3.Connection.cursor() when a factory creates not a cursor. - Issue #19884: Avoid spurious output on OS X with Gnu Readline. - Issue #10513: Fix a regression in Connection.commit(). Statements should not be reset after a commit. - A new version of typing.py from https://github.com/python/typing: - Collection (only for 3.6) (Issue #27598) - Add FrozenSet to __all__ (upstream #261) - fix crash in _get_type_vars() (upstream #259) - Remove the dict constraint in ForwardRef._eval_type (upstream #252) - Issue #27539: Fix unnormalised ``Fraction.__pow__`` result in the case of negative exponent and negative base. - Issue #21718: cursor.description is now available for queries using CTEs. - Issue #2466: posixpath.ismount now correctly recognizes mount points which the user does not have permission to access. - Issue #27773: Correct some memory management errors server_hostname in _ssl.wrap_socket(). - Issue #26750: unittest.mock.create_autospec() now works properly for subclasses of property() and other data descriptors. - In the curses module, raise an error if window.getstr() or window.instr() is passed a negative value. - Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller. - Issue #27774: Fix possible Py_DECREF on unowned object in _sre. - Issue #27760: Fix possible integer overflow in binascii.b2a_qp. - Issue #27758: Fix possible integer overflow in the _csv module for large record lengths. - Issue #27714: text_textview and test_autocomplete now pass when re-run in the same process. This occurs when test_idle fails when run with the -w option but without -jn. Fix warning from test_config. - Issue #25507: IDLE no longer runs buggy code because of its tkinter imports. Users must include the same imports required to run directly in Python. - Issue #27452: add line counter and crc to IDLE configHandler test dump. - Issue #27787: Call gc.collect() before checking each test for "dangling threads", since the dangling threads are weak references. - Issue #27713: Suppress spurious build warnings when updating importlib's bootstrap files. - Issue #25825: Correct the references to Modules/python.exp and ld_so_aix, which are required on AIX. This updates references to an installation path that was changed in 3.2a4, and undoes changed references to the build tree that were made in 3.5.0a1. * Disable PGO build on armhf (bus errors in the python executable). python3.5 (3.5.2-3) unstable; urgency=medium * Update to 20160805 from the 3.5 branch. - Issue #27419: Standard __import__() no longer look up "__import__" in globals or builtins for importing submodules or "from import". Fixed handling an error of non-string package name. - Issue #27514: Make having too many statically nested blocks a SyntaxError instead of SystemError. - Issue #27473: Fixed possible integer overflow in bytes and bytearray concatenations. - Issue #27507: Add integer overflow check in bytearray.extend(). - Issue #27581: Don't rely on wrapping for overflow check in PySequence_Tuple(). - Issue #27443: __length_hint__() of bytearray iterators no longer return a negative integer for a resized bytearray. - Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates that the script is in CGI mode. - Issue #27656: Do not assume sched.h defines any SCHED_* constants. - Issue #27130: In the "zlib" module, fix handling of large buffers (typically 4 GiB) when compressing and decompressing. Previously, inputs were limited to 4 GiB, and compression and decompression operations did not properly handle results of 4 GiB. - Issue #27533: Release GIL in nt._isdir - Issue #17711: Fixed unpickling by the persistent ID with protocol 0. - Issue #27522: Avoid an unintentional reference cycle in email.feedparser. - Issue #26844: Fix error message for imp.find_module() to refer to 'path' instead of 'name'. - Issue #23804: Fix SSL zero-length recv() calls to not block and not raise an error about unclean EOF. - Issue #27466: Change time format returned by http.cookie.time2netscape, confirming the netscape cookie format and making it consistent with documentation. - Issue #26664: Fix activate.fish by removing mis-use of ``$``. - Issue #22115: Fixed tracing Tkinter variables: trace_vdelete() with wrong mode no longer break tracing, trace_vinfo() now always returns a list of pairs of strings, tracing in the "u" mode now works. - Fix a scoping issue in importlib.util.LazyLoader which triggered an UnboundLocalError when lazy-loading a module that was already put into sys.modules. - Issue #27079: Fixed curses.ascii functions isblank(), iscntrl() and ispunct(). - Issue #26754: Some functions (compile() etc) accepted a filename argument encoded as an iterable of integers. Now only strings and byte-like objects are accepted. - Issue #27048: Prevents distutils failing on Windows when environment variables contain non-ASCII characters - Issue #27330: Fixed possible leaks in the ctypes module. - Issue #27238: Got rid of bare excepts in the turtle module. - Issue #27122: When an exception is raised within the context being managed by a contextlib.ExitStack() and one of the exit stack generators catches and raises it in a chain, do not re-raise the original exception when exiting, let the new chained one through. This avoids the PEP 479 bug described in issue25782. - [Security] Issue #27278: Fix os.urandom() implementation using getrandom() on Linux. - Issue #26386: Fixed ttk.TreeView selection operations with item id's containing spaces. - [Security] Issue #22636: Avoid shell injection problems with ctypes.util.find_library(). - Issue #16182: Fix various functions in the "readline" module to use the locale encoding, and fix get_begidx() and get_endidx() to return code point indexes. - Issue #27392: Add loop.connect_accepted_socket(). - Issue #27245: IDLE: Cleanly delete custom themes and key bindings. - Issue #26754: PyUnicode_FSDecoder() accepted a filename argument encoded as an iterable of integers. Now only strings and bytes-like objects are accepted. - Issue #27369: In test_pyexpat, avoid testing an error message detail that changed in Expat 2.2.0. - Issue #27332: Fixed the type of the first argument of module-level functions generated by Argument Clinic. - Issue #27418: Fixed Tools/importbench/importbench.py. - Issue #27453: CPP invocation in configure must use CPPFLAGS. - Issue #27641: The configure script now inserts comments into the makefile to prevent the pgen and _freeze_importlib executables from being cross- compiled. - Issue #26662: Set PYTHON_FOR_GEN in configure as the Python program to be used for file generation during the build. * Revert the proposed patch for asyncio issue 366, doesn't work anymore, and not applied upstream.. python3.5 (3.5.2-2) unstable; urgency=medium * asyncio: Fix callbacks race in SelectorLoop.sock_connect, proposed patch taken from https://github.com/python/asyncio/pull/366. * asyncio: Fix NameError in asyncio.sslproto. Closes: #827453. python3.5 (3.5.2-1) unstable; urgency=medium * Python 3.5.2 release. - Issue #26867: Ubuntu's openssl OP_NO_SSLv3 is forced on by default; fix test. - Issue #27365: Allow non-ascii in idlelib/NEWS.txt. python3.5 (3.5.2~rc1-3) unstable; urgency=medium * Fix building with the wheel files in the source package. python3.5 (3.5.2~rc1-1) unstable; urgency=medium * Python 3.5.2 release candidate 1. - Issue #15657: Delete incorrect statement from PyMethodDef documentation. - Issue #27289: Prevent test_urllib2net failures due to EOFError raised by ftplib. - Issue #25455: Clean up reference loops created in tests for recursive. - Issue #27190: Raise NotSupportedError if sqlite3 is older than 3.3.1. - Issue #27188: Fix various sqlite3 documentation errors. - Issue #15476: Make "code object" its own entry in the index. - Issue #8491: Add link to Gnu Readline configuration documentation. - Issue #24617: Add comment for os.mkdir about mode quirks. - Issue #27280: Fix typo in IPv6Network documentation. - Issue #17500, and https://github.com/python/pythondotorg/issues/945: Remove unused and outdated icons. - Issue #20900: distutils register command now decodes HTTP responses correctly. - Issue #5124: Paste with selection should always replace. This is how paste work on Windows, Mac, modern Linux apps, and ttk widgets. The exception was X11 tk widgets. - Issue #27223: aio: Fix _read_ready and _write_ready to respect _conn_lost. - Issue #22970: asyncio: Fix inconsistency cancelling Condition.wait. - Issue #22558: Add remaining doc links to source code for Python-coded modules. - Issue #21386: Implement missing IPv4Address.is_global property. - Issue #27194: superfluous truncate calls in tarfile.py slow down extraction. - Issue #14209: pkgutil.iter_zipimport_modules ignores the prefix for packages. - Issue #24136: Document generalized unpacking, PEP 448. - Issue #27286: Fixed compiling BUILD_MAP_UNPACK_WITH_CALL opcode. Calling function with generalized unpacking (PEP 448) and conflicting keyword names could cause undefined behavior. - Issue #25455: Fixed a crash in repr of ElementTree.Element with recursive tag. * Extend debian/copyright to the files shipped in the wheel files. python3.5 (3.5.1-16) unstable; urgency=high * Restore the distutils-init patch, only applied on upstream trunk. python3.5 (3.5.1-15) unstable; urgency=high * Fix bad update of the distutils-install-layout patch. python3.5 (3.5.1-14) unstable; urgency=medium * Update to 20160609 from the 3.5 branch. - A new version of typing.py provides several new classes and features: @overload outside stubs, Reversible, DefaultDict, Text, ContextManager, Type[], NewType(), TYPE_CHECKING, and numerous bug fixes (note that some of the new features are not yet implemented in mypy or other static analyzers). Also classes for PEP 492 (Awaitable, AsyncIterable, AsyncIterator) have been added (in fact they made it into 3.5.1 but were never mentioned). - Issue #25738: Stop http.server.BaseHTTPRequestHandler.send_error() from sending a message body for 205 Reset Content. Also, don't send Content header fields in responses that don't have a body. - Issue #21313: Fix the "platform" module to tolerate when sys.version contains truncated build information. - Issue #26839: On Linux, :func:`os.urandom` now calls ``getrandom()`` with ``GRND_NONBLOCK`` to fall back on reading ``/dev/urandom`` if the urandom entropy pool is not initialized yet. Closes: #824379. - Issue #27164: In the zlib module, allow decompressing raw Deflate streams with a predefined zdict. - Issue #24291: Fix wsgiref.simple_server.WSGIRequestHandler to completely write data to the client. Previously it could do partial writes and truncate data. Also, wsgiref.handler.ServerHandler can now handle stdout doing partial writes, but this is deprecated. - Issue #26809: Add ``__all__`` to :mod:`string`. - Issue #26373: subprocess.Popen.communicate now correctly ignores BrokenPipeError when the child process dies before .communicate() is called in more/all circumstances. - Issue #24759: Make clear in idlelib.idle_test.__init__ that the directory is a private implementation of test.test_idle and tool for maintainers. - Issue #27196: Stop 'ThemeChanged' warnings when running IDLE tests. These persisted after other warnings were suppressed in #20567. - Issue #20567: Revise idle_test/README.txt with advice about avoiding tk warning messages from tests. Apply advice to several IDLE tests. - Issue #26884: Fix linking extension modules for cross builds. - Issue #26014: Update 3.x packaging documentation: * "See also" links to the new docs are now provided in the legacy pages * links to setuptools documentation have been updated - Issue #27229: Fix the cross-compiling pgen rule for in-tree builds. * Don't run multiprocessing tests during the profiling build. python3.5 (3.5.1-13) unstable; urgency=medium * Update to 20160603 from the 3.5 branch. - Issue #26168: Fixed possible refleaks in failing Py_BuildValue() with the "N" format unit. - Issue #26991: Fix possible refleak when creating a function with annotations. - Issue #27039: Fixed bytearray.remove() for values greater than 127. - Issue #23640: int.from_bytes() no longer bypasses constructors for subclasses. - Issue #27138: Fix the doc comment for FileFinder.find_spec(). - Issue #27147: Mention PEP 420 in the importlib docs. - Issue #21776: distutils.upload now correctly handles HTTPError. - Issue #27114: Fix SSLContext._load_windows_store_certs fails with PermissionError. - Issue #18383: Avoid creating duplicate filters when using filterwarnings and simplefilter. - Issue #27057: Fix os.set_inheritable() on Android, ioctl() is blocked by SELinux and fails with EACCESS. The function now falls back to fcntl(). - Issue #27014: Fix infinite recursion using typing.py. - Issue #14132: Fix urllib.request redirect handling when the target only has a query string. - Issue #17214: The "urllib.request" module now percent-encodes non-ASCII bytes found in redirect target URLs. Some servers send Location header fields with non-ASCII bytes, but "http.client" requires the request target to be ASCII-encodable, otherwise a UnicodeEncodeError is raised. - Issue #26892: Honor debuglevel flag in urllib.request.HTTPHandler. - Issue #22274: In the subprocess module, allow stderr to be redirected to stdout even when stdout is not redirected. - Issue #26807: mock_open 'files' no longer error on readline at end of file. - Issue #26977: Removed unnecessary, and ignored, call to sum of squares helper in statistics.pvariance. - Issue #26848: Fix asyncio/subprocess.communicate() to handle empty input. - Issue #27040: Add loop.get_exception_handler method - Issue #27041: asyncio: Add loop.create_future method * IDLE changes: - Issue #27117: Make colorizer htest and turtledemo work with dark themes. Move code for configuring text widget colors to a new function. - Issue #26673: When tk reports font size as 0, change to size 10. Such fonts on Linux prevented the configuration dialog from opening. - Issue #21939: Add test for IDLE's percolator. - Issue #21676: Add test for IDLE's replace dialog. - Issue #18410: Add test for IDLE's search dialog. - Issue #21703: Add test for IDLE's undo delegator. - Issue #27044: Add ConfigDialog.remove_var_callbacks to stop memory leaks. - Issue #23977: Add more asserts to test_delegator. - Issue #20640: Add tests for idlelib.configHelpSourceEdit. - In the 'IDLE-console differences' section of the IDLE doc, clarify how running with IDLE affects sys.modules and the standard streams. - Issue #25507: fix incorrect change in IOBinding that prevented printing. Augment IOBinding htest to include all major IOBinding functions. - Issue #25905: Revert unwanted conversion of ' to ’ RIGHT SINGLE QUOTATION MARK in README.txt and open this and NEWS.txt with 'ascii'. Re-encode CREDITS.txt to utf-8 and open it with 'utf-8'. * Rebuild to pick up the GNU triplet change on i386 archs. Addresses: #826128. python3.5 (3.5.1-12) unstable; urgency=medium * Update to 20160509 from the 3.5 branch. - Issue #26811: gc.get_objects() no longer contains a broken tuple with NULL pointer. - Issue #20120: Use RawConfigParser for .pypirc parsing, removing support for interpolation unintentionally added with move to Python 3. Behavior no longer does any interpolation in .pypirc files, matching behavior in Python 2.7 and Setuptools 19.0. - Issue #25745: Fixed leaking a userptr in curses panel destructor. - Issue #26881: The modulefinder module now supports extended opcode arguments. - Issue #23815: Fixed crashes related to directly created instances of types in _tkinter and curses.panel modules. - Issue #17765: weakref.ref() no longer silently ignores keyword arguments. - Issue #26873: xmlrpc now raises ResponseError on unsupported type tags instead of silently return incorrect result. - Issue #26881: modulefinder now works with bytecode with extended args. - Issue #26711: Fixed the comparison of plistlib.Data with other types. - Issue #24114: Fix an uninitialized variable in `ctypes.util`. - Issue #26864: In urllib.request, change the proxy bypass host checking against no_proxy to be case-insensitive, and to not match unrelated host names that happen to have a bypassed hostname as a suffix. - Issue #26634: recursive_repr() now sets __qualname__ of wrapper. - Issue #26804: urllib.request will prefer lower_case proxy environment variables over UPPER_CASE or Mixed_Case ones. - Issue #26837: assertSequenceEqual() now correctly outputs non-stringified differing items (like bytes in the -b mode). This affects assertListEqual() and assertTupleEqual(). - Issue #26041: Remove "will be removed in Python 3.7" from deprecation messages of platform.dist() and platform.linux_distribution(). - Issue #26822: itemgetter, attrgetter and methodcaller objects no longer silently ignore keyword arguments. - Issue #26733: Disassembling a class now disassembles class and static methods. - Issue #26801: Fix error handling in :func:`shutil.get_terminal_size`, catch :exc:`AttributeError` instead of :exc:`NameError`. - Issue #24838: tarfile's ustar and gnu formats now correctly calculate name and link field limits for multibyte character encodings like utf-8. - Issue #26657: Fix directory traversal vulnerability with http.server on Windows. - Issue #26736: Used HTTPS for external links in the documentation if possible. - Issue #22359: Disable the rules for running _freeze_importlib and pgen when cross-compiling. The output of these programs is normally saved with the source code anyway, and is still regenerated when doing a native build. Closes: #820509. - Issue #21668: Link audioop, _datetime, _ctypes_test modules to libm. - Issue #26799: Fix python-gdb.py: don't get C types once when the Python code is loaded, but get C types on demand. The C types can change if python-gdb.py is loaded before the Python executable. * Fix issue #26673, runtime error in idle3. LP: #1574892. * Update symbols files. python3.5 (3.5.1-11) unstable; urgency=medium * Update to 20160330 from the 3.5 branch. - Issue #26659: Make the builtin slice type support cycle collection. - Issue #26718: super.__init__ no longer leaks memory if called multiple times. NOTE: A direct call of super.__init__ is not endorsed! - Issue #25339: PYTHONIOENCODING now has priority over locale in setting the error handler for stdin and stdout. - Issue #26717: Stop encoding Latin-1-ized WSGI paths with UTF-8. - Issue #26735: Fix :func:`os.urandom` on Solaris 11.3 and newer when reading more than 1,024 bytes: call ``getrandom()`` multiple times with a limit of 1024 bytes per call. - Issue #16329: Add .webm to mimetypes.types_map. - Issue #13952: Add .csv to mimetypes.types_map. - Issue #26709: Fixed Y2038 problem in loading binary PLists. - Issue #23735: Handle terminal resizing with Readline 6.3+ by installing our own SIGWINCH handler. - Issue #26586: In http.server, respond with "413 Request header fields too large" if there are too many header fields to parse, rather than killing the connection and raising an unhandled exception. - Issue #22854: Change BufferedReader.writable() and BufferedWriter.readable() to always return False. - Issue #6953: Rework the Readline module documentation to group related functions together, and add more details such as what underlying Readline functions and variables are accessed. python3.5 (3.5.1-10) unstable; urgency=medium * Update to 20160330 from the 3.5 branch. python3.5 (3.5.1-9) unstable; urgency=medium * Update to 20160323 from the 3.5 branch. * Always build _math.o with -fPIC. python3.5 (3.5.1-8) unstable; urgency=medium * Update to 20160318 from the 3.5 branch. * Fix python3-venv with updated python-pip packages (Barry Warsaw). Closes: #815014, #815864. * Fix generating devhelp documentation (Simon McVittie). Closes: #816299. LP: #1553633. python3.5 (3.5.1-7) unstable; urgency=medium * Update to 20160224 from the 3.5 branch. * python3.5-venv: Drop the dependency on python-setuptools-whl, depend on python-pip-whl (>= 8.0.2-7). * Don't run the test_socket test, hangs on some buildds. python3.5 (3.5.1-6) unstable; urgency=medium * Update to 20160221 from the 3.5 branch. python3.5 (3.5.1-5) unstable; urgency=medium * Update to 20160113 from the 3.5 branch. python3.5 (3.5.1-4) unstable; urgency=medium * Update to 20160111 from the 3.5 branch. python3.5 (3.5.1-3) unstable; urgency=medium * Update to 20160105 from the 3.5 branch. * Fix maintainer scripts with findutils 4.6. Closes: #809079. python3.5 (3.5.1-2) unstable; urgency=medium * Disable LTO on Debian/s390x. * Don't run test_signal on alpha, currently breaks the testsuite. python3.5 (3.5.1-1) unstable; urgency=medium * Python 3.5.1 release. * Fix building architecture independent packages only. Closes: #806870. * Update symbols files for i386. * d/p/fix-sslv3-test.diff: properly handle Ubuntu's openssl having OP_NO_SSLv3 forced on by default (Marc Deslauriers). python3.5 (3.5.1~rc1-2) unstable; urgency=medium * Build-depend on time. python3.5 (3.5.1~rc1-1) unstable; urgency=medium * Python 3.5.1 release candidate 1. * Don't ship menu files anymore, just desktop files. * Update symbols file. python3.5 (3.5.0-4) unstable; urgency=medium * Update to 20151028 from the 3.5 branch. - Issue #25274: sys.setrecursionlimit() now raises a RecursionError if the new recursion limit is too low depending at the current recursion depth. Modify also the "lower-water mark" formula to make it monotonic. This mark is used to decide when the overflowed flag of the thread state is reset. - Issue #25447: The lru_cache() wrapper objects now can be copied and pickled (by returning the original object unchanged). - Issue #25390: typing: Don't crash on Union[str, Pattern]. - Issue #25441: asyncio: Raise error from drain() when socket is closed. - Issue #25410: Cleaned up and fixed minor bugs in C implementation of OrderedDict. - Issue #25411: Improved Unicode support in SMTPHandler through better use of the email package. - Issue #25407: Remove mentions of the formatter module being removed in Python 3.6. - Issue #25406: Fixed a bug in C implementation of OrderedDict.move_to_end() that caused segmentation fault or hang in iterating after moving several items to the start of ordered dict. - Issue #25380: Fixed protocol for the STACK_GLOBAL opcode in pickletools.opcodes. - Issue #25471: Sockets returned from accept() shouldn't appear to be nonblocking. - Issue #25440: Fix output of python-config --extension-suffix. python3.5 (3.5.0-3) unstable; urgency=medium * Update to 20151011 from the 3.5 branch. - Idle updates. - Issue #24402: Fix input() to prompt to the redirected stdout when sys.stdout.fileno() fails. - Issue #24806: Prevent builtin types that are not allowed to be subclassed from being subclassed through multiple inheritance. - Issue #24848: Fixed a number of bugs in UTF-7 decoding of misformed data. - Issue #25280: Import trace messages emitted in verbose (-v) mode are no longer formatted twice. - Issue #25003: On Solaris 11.3 or newer, os.urandom() now uses the getrandom() function instead of the getentropy() function. The getentropy() function is blocking to generate very good quality entropy, os.urandom() doesn't need such high-quality entropy. - Issue #25182: The stdprinter (used as sys.stderr before the io module is imported at startup) now uses the backslashreplace error handler. - Issue #25131: Make the line number and column offset of set/dict literals and comprehensions correspond to the opening brace. - Issue #25364: zipfile now works in threads disabled builds. - Issue #25328: smtpd's SMTPChannel now correctly raises a ValueError if both decode_data and enable_SMTPUTF8 are set to true. - Issue #25316: distutils raises OSError instead of DistutilsPlatformError when MSVC is not installed. - Issue #23972: Updates asyncio datagram create method allowing reuseport and reuseaddr socket options to be set prior to binding the socket. Mirroring the existing asyncio create_server method the reuseaddr option for datagram sockets defaults to True if the O/S is 'posix' (except if the platform is Cygwin). - Issue #25304: Add asyncio.run_coroutine_threadsafe(). This lets you submit a coroutine to a loop from another thread, returning a concurrent.futures.Future. - Issue #25232: Fix CGIRequestHandler to split the query from the URL at the first question mark (?) rather than the last. - Issue #24657: Prevent CGIRequestHandler from collapsing slashes in the query part of the URL as if it were a path. - Issue #24483: C implementation of functools.lru_cache() now calculates key's hash only once. - Issue #22958: Constructor and update method of weakref.WeakValueDictionary now accept the self and the dict keyword arguments. - Issue #22609: Constructor of collections.UserDict now accepts the self keyword argument. - Issue #25111: Fixed comparison of traceback.FrameSummary. - Issue #25262. Added support for BINBYTES8 opcode in Python implementation of unpickler. - Issue #25034: Fix string.Formatter problem with auto-numbering and nested format_specs. - Issue #25233: Rewrite the guts of asyncio.Queue and asyncio.Semaphore to be more understandable and correct. - Issue #25203: Failed readline.set_completer_delims() no longer left the module in inconsistent state. - Issue #23600: Default implementation of tzinfo.fromutc() was returning wrong results in some cases. - Issue #23329: Allow the ssl module to be built with older versions of LibreSSL. - Issue #25319: When threading.Event is reinitialized, the underlying condition should use a regular lock rather than a recursive lock. - Issue #25099: Make test_compileall not fail when a entry on sys.path cannot be written to. - Issue #23919: Prevents assert dialogs appearing in the test suite. * Back-out the local patch for issue 21264, supposed to be fixed by #25099. * Adjust setting DH_COMPAT for dh_movefiles with updated debhelper supporting globbing of arguments. Closes: #800247. * pydoc: use the pager command if available. Addresses: #799555. python3.5 (3.5.0-2) unstable; urgency=medium * Update to 20150924 from the 3.5 branch. * Expect the test_code_module test to fail in the autopkg tests. See upstream issue #25109. * Provide some user-friendly advice when `python3 -m venv` fails because the python3-venv package is not installed (Barry Warsaw). python3.5 (3.5.0-1) unstable; urgency=medium * Python 3.5.0 release. * Drop the no-zip-on-sys.path patch; not worth saving, and the test suite needs adjustments ... * Mark the test_site test as failing. Investigate why this fails. The package has one sitedir less than expected. python3.5 (3.5.0~rc3-1) unstable; urgency=medium * Python 3.5.0 release candidate 3. python3.5 (3.5.0~rc2-1) unstable; urgency=medium * Python 3.5.0 release candidate 2. python3.5 (3.5.0~rc1-1) unstable; urgency=medium * Python 3.5.0 release candidate 1. * Update symbols file. python3.5 (3.5.0~b4-1) unstable; urgency=medium * Python 3.5.0 beta 4. python3.5 (3.5.0~b3-2) unstable; urgency=medium * Fix expansion of makefile macros for _sysconfigdata. Issue #24705. LP: #1477759. python3.5 (3.5.0~b3-1) unstable; urgency=medium * Python 3.5.0 beta 3. python3.5 (3.5.0~b2-1) unstable; urgency=medium * Python 3.5.0 beta 2. * Make the build reproducible (Jérémy Bobbio). Closes: #786959. - Pass time of latest debian/changelog entry to sphinx via SPHINXOPTS. - Do not store a timestamps when compressing devhelp. * Pass DATE and TIME macros matching the current debian/changelog entry when building getbuildinfo.o. python3.5 (3.5.0~b1-1ubuntu1) wily; urgency=medium * Disable pgo optimization on i386. python3.5 (3.5.0~b1-1) unstable; urgency=medium * Python 3.5.0 beta 1. * Refresh patches. * Update symbols files. python3.5 (3.5.0~a4-5) unstable; urgency=medium * Update to 20150519 from the trunk. - Fix issue #24226, parsing of many sequential one-line 'def' statements. * Don't rename extensions when they already have the multiarch tag. python3.5 (3.5.0~a4-4) unstable; urgency=medium * Update to 20150518 from the trunk. - Fix build on big endian targets. * Work around issue #24226, byte compilation of IN.py. * Disable PGO (fails to build in unstable). python3.5 (3.5.0~a4-3) unstable; urgency=medium * Update to 20150517 from the trunk. python3.5 (3.5.0~a4-2) experimental; urgency=medium * Update to 20150421 from the trunk. * Fix renaming of extensions. Closes: #783090. python3.5 (3.5.0~a4-1) experimental; urgency=medium * Python 3.5.0 alpha 4. * Update to 20150420 from the trunk. * Build debug builds with -Og. python3.5 (3.5.0~a3-1) experimental; urgency=medium * Python 3.5.0 alpha 3. * Update to 20150415 from the trunk. python3.4 (3.4.3-3) experimental; urgency=medium * Update to 20150311 from the 3.4 branch. * Relax the version check for mpdecimal (all required patches applied in the distro version of mpdecimal 2.4.0). * When using GCC versions older than 4.9 for extension builds, automagically mangle -fstack-protector-strong to -fstack-protector. python3.4 (3.4.3-2) experimental; urgency=medium * debian/tests: Use init system agnostic "service" command instead of upstart specific "stop". Also drop unnecessary "status" call right after stopping apport (Martin Pitt). python3.4 (3.4.3-1) experimental; urgency=medium * Python 3.4.3 release. * Changes since 20141202 (3.4.2-4): - Issue #22896: Avoid using PyObject_AsCharBuffer(), PyObject_AsReadBuffer(), and PyObject_AsWriteBuffer(). - Issue #21295: Revert some changes (issue #16795) to AST line numbers and column offsets that constituted a regression. - Issue #21408: The default __ne__() now returns NotImplemented if __eq__() returned NotImplemented. - Issue #23321: Fixed a crash in str.decode() when error handler returned replacment string longer than mailformed input data. - Issue #23048: Fix jumping out of an infinite while loop in the pdb. - Issue #23165: Perform overflow checks before allocating memory in the _Py_char2wchar function. - Issue #23099: Closing io.BytesIO with exported buffer is rejected now to prevent corrupting exported buffer. - Issue #23363: Fix possible overflow in itertools.permutations. - Issue #23364: Fix possible overflow in itertools.product. - Issue #23366: Fixed possible integer overflow in itertools.combinations. - Issue #23369: Fixed possible integer overflow in _json.encode_basestring_ascii. - Issue #23353: Fix the exception handling of generators in PyEval_EvalFrameEx(). At entry, save or swap the exception state even if PyEval_EvalFrameEx() is called with throwflag=0. At exit, the exception state is now always restored or swapped, not only if why is WHY_YIELD or WHY_RETURN. - Issue #18518: timeit now rejects statements which can't be compiled outside a function or a loop (e.g. "return" or "break"). - Issue #23094: Fixed readline with frames in Python implementation of pickle. - Issue #23268: Fixed bugs in the comparison of ipaddress classes. - Issue #21408: Removed incorrect implementations of __ne__() which didn't returned NotImplemented if __eq__() returned NotImplemented. The default __ne__() now works correctly. - Issue #19996: :class:`email.feedparser.FeedParser` now handles (malformed) headers with no key rather than amusing the body has started. - Issue #23248: Update ssl error codes from latest OpenSSL git master. - Issue #23098: 64-bit dev_t is now supported in the os module. - Issue #23250: In the http.cookies module, capitalize "HttpOnly" and "Secure" as they are written in the standard. - Issue #23063: In the disutils' check command, fix parsing of reST with code or code-block directives. - Issue #23209, #23225: selectors.BaseSelector.close() now clears its internal reference to the selector mapping to break a reference cycle. - Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The availability of the function is checked during the compilation. - Issue #20896, #22935: The :func:`ssl.get_server_certificate` function now uses the :data:`~ssl.PROTOCOL_SSLv23` protocol by default, not :data:`~ssl.PROTOCOL_SSLv3`, for maximum compatibility and support platforms where :data:`~ssl.PROTOCOL_SSLv3` support is disabled. - Issue #23111: In the ftplib, make ssl.PROTOCOL_SSLv23 the default protocol version. - Issue #23132: Mitigate regression in speed and clarity in functools.total_ordering. - Issue #22585: On OpenBSD 5.6 and newer, os.urandom() now calls getentropy(), instead of reading /dev/urandom, to get pseudo-random bytes. - Issue #23112: Fix SimpleHTTPServer to correctly carry the query string and fragment when it redirects to add a trailing slash. - Issue #23093: In the io, module allow more operations to work on detached streams. - Issue #19104: pprint now produces evaluable output for wrapped strings. - Issue #23071: Added missing names to codecs.__all__. - Issue #15513: Added a __sizeof__ implementation for pickle classes. - Issue #19858: pickletools.optimize() now aware of the MEMOIZE opcode, can produce more compact result and no longer produces invalid output if input data contains MEMOIZE opcodes together with PUT or BINPUT opcodes. - Issue #22095: Fixed HTTPConnection.set_tunnel with default port. The port value in the host header was set to "None". - Issue #23016: A warning no longer produces an AttributeError when the program is run with pythonw.exe. - Issue #21775: shutil.copytree(): fix crash when copying to VFAT. An exception handler assumed that that OSError objects always have a 'winerror' attribute. That is not the case, so the exception handler itself raised AttributeError when run on Linux (and, presumably, any other non-Windows OS). - Issue #1218234: Fix inspect.getsource() to load updated source of reloaded module. - Issue #22959: In the constructor of http.client.HTTPSConnection, prefer the context's check_hostname attribute over the *check_hostname* parameter. - Issue #23009: Make sure selectors.EpollSelecrtor.select() works when no FD is registered. - Issue #20577: Configuration of the max line length for the FormatParagraph extension has been moved from the General tab of the Idle preferences dialog to the FormatParagraph tab of the Config Extensions dialog. - Issue #16893: Update Idle doc chapter to match current Idle and add new information. - Issue #23180: Rename IDLE "Windows" menu item to "Window". - Issue #19548: Added some additional checks to test_codecs to ensure that statements in the updated documentation remain accurate. - Issue #15506: Use standard PKG_PROG_PKG_CONFIG autoconf macro in the configure script. - Issue #22935: Allow the ssl module to be compiled if openssl doesn't support SSL 3. - Issue #22079: PyType_Ready() now checks that statically allocated type has no dynamically allocated bases. - Issue #19548: Update the codecs module documentation to better cover the distinction between text encodings and other codecs, together with other clarifications. - Issue #22914: Update the Python 2/3 porting HOWTO to describe a more automated approach. - Issue #22735: Fix many edge cases (including crashes) involving custom mro() implementations. - Issue #23399: pyvenv creates relative symlinks where possible. - Issue #23392: Added tests for marshal C API that works with FILE*. - Issue #18982: Add tests for CLI of the calendar module. - Issue #23345: Prevent test_ssl failures with large OpenSSL patch level values (like 0.9.8zc). * Remove LTO sections from the static libraries. python3.4 (3.4.2-4) unstable; urgency=medium * Fix issue #22935: Fix ssl module when SSLv3 protocol is not supported. * Fix issue #16043: Add a default limit for the amount of data xmlrpclib.gzip_decode will return. CVE-2013-1753. Closes: #742927. * Disable ensurepip for the system installation, only enable it for virtual environments. Closes: #772730. python3.4 (3.4.2-3) unstable; urgency=medium * Update to 20141202 from the 3.4 branch. - Issue #20335: bytes constructor now raises TypeError when encoding or errors is specified with non-string argument. - Issue #21971: Update turtledemo doc and add module to the index. - Issue #21032. Fixed socket leak if HTTPConnection.getresponse() fails. - Issue #22960: Add a context argument to xmlrpclib.ServerProxy constructor. - Issue #22915: SAX parser now supports files opened with file descriptor or bytes path. - Issue #22609: Constructors and update methods of mapping classes in the collections module now accept the self keyword argument. - Issue #22788: Add *context* parameter to logging.handlers.HTTPHandler. - Issue #22921: Allow SSLContext to take the *hostname* parameter even if OpenSSL doesn't support SNI. - Issue #22894: TestCase.subTest() would cause the test suite to be stopped when in failfast mode, even in the absence of failures. - Issue #22638: SSLv3 is now disabled throughout the standard library. It can still be enabled by instantiating a SSLContext manually. - Issue #22370: Windows detection in pathlib is now more robust. - Issue #22841: Reject coroutines in asyncio add_signal_handler(). - Issue #22838: All test_re tests now work with unittest test discovery. - Issue #21514: The documentation of the json module now refers to new JSON RFC 7159 instead of obsoleted RFC 4627. - Issue #22314: pydoc now works when the LINES environment variable is set. - IDLE updates. * Fix byte-code removal for the __phello__ module (mismatching source and byte-code file name). Closes: #769769. * Let ensurepip use a temporary location for the copy of the wheels. Remove the ad-hoc /usr/lib/python-wheels location on package purge. Let python3.4-venv break python3-pip (<< 1.5.6-4). Closes: #769449. * Don't pass default compiler search directories in the pkgconfig file. Closes: #770936. * Don't run pyexpat.test_exception as an autopkg test, requires a source file. * Allow building and testing without SSLv3 support (Kurt Roeckx). Addresses: #768611. * Fix issue 22966, when byte compiling, keep the base name of a file containing dots. Closes: #769769. python3.4 (3.4.2-2) unstable; urgency=medium * Repackage the upstream source without the bundled ensurepip wheels (using package format 3.0 (quilt)). * Update to 20141112 from the 3.4 branch. - Issue #19524: Fixed resource leak in the HTTP connection when an invalid response is received. - Issue #22216: smtplib now resets its state more completely after a quit. The most obvious consequence of the previous behavior was a STARTTLS failure during a connect/starttls/quit/connect/starttls sequence. - Issue #22185: Fix an occasional RuntimeError in threading.Condition.wait() caused by mutation of the waiters queue without holding the lock. - Issue #22182: Use e.args to unpack exceptions correctly in distutils.file_util.move_file. - The webbrowser module now uses subprocess's start_new_session=True rather than a potentially risky preexec_fn=os.setsid call. - Issue #22191: Fix warnings.__all__. - Issue #8797: Raise HTTPError on failed Basic Authentication immediately. - Issue #21166: Prevent possible segfaults and other random failures of python --generate-posix-vars in pybuilddir.txt build target. - Idle changes: - Issue #17390: Adjust Editor window title; remove 'Python', move version to end. - Issue #14105: Idle debugger breakpoints no longer disappear when inseting or deleting lines. - Issue #17172: Turtledemo can now be run from Idle. - Issue #22236: Tkinter tests now don't reuse default root window. New root window is created for every test class. - Tk changes: - Issue #22226: First letter no longer is stripped from the "status" key in the result of Treeview.heading(). - Issue #22051: turtledemo no longer reloads examples to re-run them. Initialization of variables and gui setup should be done …
1 parent 4fc8397 commit 2b344d0

File tree

171 files changed

+27608
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

171 files changed

+27608
-0
lines changed

Lib/test/recursion.tar

516 Bytes
Binary file not shown.

debian/.gitlab-ci.yml

+10
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
include:
2+
- https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/recipes/debian.yml
3+
4+
variables:
5+
RELEASE: 'stretch'
6+
SALSA_CI_COMPONENTS: 'main contrib non-free'
7+
SALSA_CI_DISABLE_REPROTEST: 1
8+
9+
autopkgtest:
10+
allow_failure: true

debian/2to3-3.1

+41
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
.\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.40.4.
2+
.TH 2TO3-3.3 "1" "January 2012" "2to3-3.3 3.3" "User Commands"
3+
.SH NAME
4+
2to3-3.3 \- Python2 to Python3 converter
5+
.SH SYNOPSIS
6+
.B 2to3
7+
[\fIoptions\fR] \fIfile|dir \fR...
8+
.SH OPTIONS
9+
.TP
10+
\fB\-h\fR, \fB\-\-help\fR
11+
show this help message and exit
12+
.TP
13+
\fB\-d\fR, \fB\-\-doctests_only\fR
14+
Fix up doctests only
15+
.TP
16+
\fB\-f\fR FIX, \fB\-\-fix\fR=\fIFIX\fR
17+
Each FIX specifies a transformation; default: all
18+
.TP
19+
\fB\-j\fR PROCESSES, \fB\-\-processes\fR=\fIPROCESSES\fR
20+
Run 2to3 concurrently
21+
.TP
22+
\fB\-x\fR NOFIX, \fB\-\-nofix\fR=\fINOFIX\fR
23+
Prevent a transformation from being run
24+
.TP
25+
\fB\-l\fR, \fB\-\-list\-fixes\fR
26+
List available transformations
27+
.TP
28+
\fB\-p\fR, \fB\-\-print\-function\fR
29+
Modify the grammar so that print() is a function
30+
.TP
31+
\fB\-v\fR, \fB\-\-verbose\fR
32+
More verbose logging
33+
.TP
34+
\fB\-\-no\-diffs\fR
35+
Don't show diffs of the refactoring
36+
.TP
37+
\fB\-w\fR, \fB\-\-write\fR
38+
Write back modified files
39+
.TP
40+
\fB\-n\fR, \fB\-\-nobackups\fR
41+
Don't write backups for modified files

debian/FAQ.html

+8,997
Large diffs are not rendered by default.

debian/PVER-dbg.README.Debian.in

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
Contents of the @PVER@-dbg package
2+
-------------------------------------
3+
4+
For debugging python and extension modules, you may want to add the contents
5+
of /usr/share/doc/@PVER@/gdbinit (found in the @PVER@-dev package) to your
6+
~/.gdbinit file.
7+
8+
@PVER@-dbg contains two sets of packages:
9+
10+
- debugging symbols for the standard @PVER@ build. When this package
11+
is installed, gdb will automatically load up the debugging symbols
12+
from it when debugging @PVER@ or one of the included extension
13+
modules.
14+
15+
- a separate @PVER@-dbg binary, configured --with-pydebug, enabling the
16+
additional debugging code to help debug memory management problems.
17+
18+
For the latter, all extension modules have to be recompiled to
19+
correctly load with an pydebug enabled build.
20+
21+
22+
Debian and Ubuntu specific changes to the debug interpreter
23+
-----------------------------------------------------------
24+
The python2.4 and python2.5 packages in Ubuntu feisty are modified to
25+
first look for extension modules under a different name.
26+
27+
normal build: foo.so
28+
debug build: foo_d.so foo.so
29+
30+
This naming schema allows installation of the extension modules into
31+
the same path (The naming is directly taken from the Windows builds
32+
which already uses this naming scheme).
33+
34+
See https://wiki.ubuntu.com/PyDbgBuilds for more information.
35+
36+
37+
Using the python-dbg builds
38+
---------------------------
39+
40+
* Call the python-dbg or the pythonX.Y-dbg binaries instead of the
41+
python or pythonX.Y binaries.
42+
43+
* Properties of the debug build are described in
44+
/usr/share/doc/@PVER@/SpecialBuilds.txt.gz.
45+
The debug interpreter is built with Py_DEBUG defined.
46+
47+
* From SpecialBuilds.txt: This is what is generally meant by "a debug
48+
build" of Python. Py_DEBUG implies LLTRACE, Py_REF_DEBUG,
49+
Py_TRACE_REFS, and PYMALLOC_DEBUG (if WITH_PYMALLOC is enabled).
50+
In addition, C assert()s are enabled (via the C way: by not defining
51+
NDEBUG), and some routines do additional sanity checks inside
52+
"#ifdef Py_DEBUG" blocks.

debian/PVER-dbg.overrides.in

+5
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# just the gdb debug file
2+
@PVER@-dbg binary: python-script-but-no-python-dep
3+
4+
# pointless lintian ...
5+
@PVER@-dbg binary: hardening-no-fortify-functions

debian/PVER-dbg.postinst.in

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
#! /bin/sh
2+
3+
set -e
4+
5+
if [ "$1" = configure ]; then
6+
files=$(dpkg -L lib@PVER@-dbg@HOST_QUAL@ | sed -n '/^\/usr\/lib\/@PVER@\/.*\.py$/p')
7+
if [ -n "$files" ]; then
8+
@PVER@ -E -S /usr/lib/@PVER@/py_compile.py $files
9+
if grep -sq '^byte-compile[^#]*optimize' /etc/python/debian_config; then
10+
@PVER@ -E -S -O /usr/lib/@PVER@/py_compile.py $files
11+
fi
12+
else
13+
echo >&2 "@PVER@-dbg: can't get files for byte-compilation"
14+
fi
15+
16+
if [ -d /usr/include/@PVER@_d ] && [ ! -h /usr/include/@PVER@_d ]; then
17+
if rmdir /usr/include/@PVER@_d 2> /dev/null; then
18+
ln -sf @PVER@dmu /usr/include/@PVER@_d
19+
else
20+
echo >&2 "WARNING: non-empty directory on upgrade: /usr/include/@PVER@_d"
21+
ls -l /usr/include/@PVER@_d
22+
fi
23+
fi
24+
if [ -d /usr/lib/@PVER@/config_d ] && [ ! -h /usr/lib/@PVER@/config_d ]; then
25+
if rmdir /usr/lib/@PVER@/config_d 2> /dev/null; then
26+
ln -sf config-dmu /usr/lib/@PVER@/config_d
27+
else
28+
echo >&2 "WARNING: non-empty directory on upgrade: /usr/lib/@PVER@/config_d"
29+
ls -l /usr/lib/@PVER@/config_d
30+
fi
31+
fi
32+
fi
33+
34+
#DEBHELPER#
35+
36+
exit 0

debian/PVER-dbg.prerm.in

+35
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
#! /bin/sh
2+
3+
set -e
4+
5+
remove_bytecode()
6+
{
7+
pkg=$1
8+
max=$(LANG=C LC_ALL=C xargs --show-limits < /dev/null 2>&1 | awk '/Maximum length/ {print int($NF / 4)}')
9+
dpkg -L $pkg \
10+
| awk -F/ 'BEGIN {OFS="/"} /\.py$/ {$NF=sprintf("__pycache__/%s.*.py[co]", substr($NF,1,length($NF)-3)); print}' \
11+
| xargs --max-chars=$max echo \
12+
| while read files; do rm -f $files; done
13+
if [ -d /usr/bin/__pycache__ ]; then
14+
rmdir --ignore-fail-on-non-empty /usr/bin/__pycache__
15+
fi
16+
}
17+
18+
case "$1" in
19+
remove)
20+
remove_bytecode lib@PVER@-dbg@HOST_QUAL@
21+
;;
22+
upgrade)
23+
remove_bytecode lib@PVER@-dbg@HOST_QUAL@
24+
;;
25+
deconfigure)
26+
;;
27+
failed-upgrade)
28+
;;
29+
*)
30+
echo "prerm called with unknown argument \`$1'" >&2
31+
exit 1
32+
;;
33+
esac
34+
35+
#DEBHELPER#

debian/PVER-dev.postinst.in

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
#! /bin/sh
2+
3+
set -e
4+
5+
if [ "$1" = configure ]; then
6+
if [ -d /usr/include/@PVER@ ] && [ ! -h /usr/include/@PVER@ ]; then
7+
if rmdir /usr/include/@PVER@ 2> /dev/null; then
8+
ln -sf @PVER@mu /usr/include/@PVER@
9+
else
10+
echo >&2 "WARNING: non-empty directory on upgrade: /usr/include/@PVER@"
11+
ls -l /usr/include/@PVER@
12+
fi
13+
fi
14+
if [ -d /usr/lib/@PVER@/config ] && [ ! -h /usr/lib/@PVER@/config ]; then
15+
if rmdir /usr/lib/@PVER@/config 2> /dev/null; then
16+
ln -sf config-@VER@mu /usr/lib/@PVER@/config
17+
else
18+
echo >&2 "WARNING: non-empty directory on upgrade: /usr/lib/@PVER@/config"
19+
ls -l /usr/lib/@PVER@/config
20+
fi
21+
fi
22+
fi
23+
24+
#DEBHELPER#
25+
26+
exit 0

debian/PVER-doc.doc-base.PVER-api.in

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
Document: @PVER@-api
2+
Title: Python/C API Reference Manual (v@VER@)
3+
Author: Guido van Rossum
4+
Abstract: This manual documents the API used by C (or C++) programmers who
5+
want to write extension modules or embed Python. It is a
6+
companion to *Extending and Embedding the Python Interpreter*,
7+
which describes the general principles of extension writing but
8+
does not document the API functions in detail.
9+
Section: Programming/Python
10+
11+
Format: HTML
12+
Index: /usr/share/doc/@PVER@/html/c-api/index.html
13+
Files: /usr/share/doc/@PVER@/html/c-api/*.html

debian/PVER-doc.doc-base.PVER-dist.in

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
Document: @PVER@-dist
2+
Title: Distributing Python Modules (v@VER@)
3+
Author: Greg Ward
4+
Abstract: This document describes the Python Distribution Utilities
5+
(``Distutils'') from the module developer's point-of-view, describing
6+
how to use the Distutils to make Python modules and extensions easily
7+
available to a wider audience with very little overhead for
8+
build/release/install mechanics.
9+
Section: Programming/Python
10+
11+
Format: HTML
12+
Index: /usr/share/doc/@PVER@/html/distutils/index.html
13+
Files: /usr/share/doc/@PVER@/html/distutils/*.html

debian/PVER-doc.doc-base.PVER-ext.in

+16
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
Document: @PVER@-ext
2+
Title: Extending and Embedding the Python Interpreter (v@VER@)
3+
Author: Guido van Rossum
4+
Abstract: This document describes how to write modules in C or C++ to extend
5+
the Python interpreter with new modules. Those modules can define
6+
new functions but also new object types and their methods. The
7+
document also describes how to embed the Python interpreter in
8+
another application, for use as an extension language. Finally,
9+
it shows how to compile and link extension modules so that they
10+
can be loaded dynamically (at run time) into the interpreter, if
11+
the underlying operating system supports this feature.
12+
Section: Programming/Python
13+
14+
Format: HTML
15+
Index: /usr/share/doc/@PVER@/html/extending/index.html
16+
Files: /usr/share/doc/@PVER@/html/extending/*.html

debian/PVER-doc.doc-base.PVER-inst.in

+12
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
Document: @PVER@-inst
2+
Title: Installing Python Modules (v@VER@)
3+
Author: Greg Ward
4+
Abstract: This document describes the Python Distribution Utilities
5+
(``Distutils'') from the end-user's point-of-view, describing how to
6+
extend the capabilities of a standard Python installation by building
7+
and installing third-party Python modules and extensions.
8+
Section: Programming/Python
9+
10+
Format: HTML
11+
Index: /usr/share/doc/@PVER@/html/install/index.html
12+
Files: /usr/share/doc/@PVER@/html/install/*.html

debian/PVER-doc.doc-base.PVER-lib.in

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
Document: @PVER@-lib
2+
Title: Python Library Reference (v@VER@)
3+
Author: Guido van Rossum
4+
Abstract: This library reference manual documents Python's standard library,
5+
as well as many optional library modules (which may or may not be
6+
available, depending on whether the underlying platform supports
7+
them and on the configuration choices made at compile time). It
8+
also documents the standard types of the language and its built-in
9+
functions and exceptions, many of which are not or incompletely
10+
documented in the Reference Manual.
11+
Section: Programming/Python
12+
13+
Format: HTML
14+
Index: /usr/share/doc/@PVER@/html/library/index.html
15+
Files: /usr/share/doc/@PVER@/html/library/*.html

debian/PVER-doc.doc-base.PVER-new.in

+10
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
Document: @PVER@-new
2+
Title: What's new in Python @VER@
3+
Author: A.M. Kuchling
4+
Abstract: This documents lists new features and changes worth mentioning
5+
in Python @VER@.
6+
Section: Programming/Python
7+
8+
Format: HTML
9+
Index: /usr/share/doc/@PVER@/html/whatsnew/@VER@.html
10+
Files: /usr/share/doc/@PVER@/html/whatsnew/@VER@.html

debian/PVER-doc.doc-base.PVER-ref.in

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
Document: @PVER@-ref
2+
Title: Python Reference Manual (v@VER@)
3+
Author: Guido van Rossum
4+
Abstract: This reference manual describes the syntax and "core semantics" of
5+
the language. It is terse, but attempts to be exact and complete.
6+
The semantics of non-essential built-in object types and of the
7+
built-in functions and modules are described in the *Python
8+
Library Reference*. For an informal introduction to the language,
9+
see the *Python Tutorial*. For C or C++ programmers, two
10+
additional manuals exist: *Extending and Embedding the Python
11+
Interpreter* describes the high-level picture of how to write a
12+
Python extension module, and the *Python/C API Reference Manual*
13+
describes the interfaces available to C/C++ programmers in detail.
14+
Section: Programming/Python
15+
16+
Format: HTML
17+
Index: /usr/share/doc/@PVER@/html/reference/index.html
18+
Files: /usr/share/doc/@PVER@/html/reference/*.html

debian/PVER-doc.doc-base.PVER-tut.in

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
Document: @PVER@-tut
2+
Title: Python Tutorial (v@VER@)
3+
Author: Guido van Rossum, Fred L. Drake, Jr., editor
4+
Abstract: This tutorial introduces the reader informally to the basic
5+
concepts and features of the Python language and system. It helps
6+
to have a Python interpreter handy for hands-on experience, but
7+
all examples are self-contained, so the tutorial can be read
8+
off-line as well.
9+
Section: Programming/Python
10+
11+
Format: HTML
12+
Index: /usr/share/doc/@PVER@/html/tutorial/index.html
13+
Files: /usr/share/doc/@PVER@/html/tutorial/*.html

debian/PVER-doc.overrides.in

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# this is referenced by the html docs
2+
@PVER@-doc binary: extra-license-file

debian/PVER-examples.overrides.in

+2
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# don't care about permissions of the example files
2+
@PVER@-examples binary: executable-not-elf-or-script

0 commit comments

Comments
 (0)