Senthil Kumaran 4cbb23f8f2 Prevent HTTPoxy attack (CVE-2016-1000110) ...

Ignore the HTTP_PROXY variable when REQUEST_METHOD environment is set, which
indicates that the script is in CGI mode.

Issue #27568 Reported and patch contributed by Rémi Rampin.

2016-07-30 23:24:16 -07:00

..

collections

#18466: fix more typos. Patch by Févry Thibault.

2013-08-17 16:57:41 +03:00

concurrent

Issue #20367: Fix behavior of concurrent.futures.as_completed() for duplicate

2014-01-27 09:11:48 +01:00

ctypes

fix ctypes test alignment assumptions (closes #20946)

2014-03-16 10:07:26 +01:00

curses

…

dbm

#17198: Fix a NameError in the dbm module. Patch by Valentina Mukhamedzhanova.

2013-07-07 13:15:08 +02:00

distutils

Switch to the new upload url for PyPI

2016-07-06 15:27:35 -04:00

email

#14983: always add a line end after a MIME boundary marker.

2014-02-08 17:54:56 -05:00

encodings

#7475: Remove references to '.transform' from transform codec docstrings.

2014-03-13 20:54:30 -04:00

html

#20288: fix handling of invalid numeric charrefs in HTMLParser.

2014-02-01 21:21:01 +02:00

http

#22758: fix regression in handling of secure cookies.

2016-07-10 13:32:43 -04:00

idlelib

Bump to 3.3.6

2014-10-12 09:03:40 +02:00

importlib

[issue19152] Revert 832579dbafd6.

2013-10-03 15:03:29 -06:00

json

Remove mentions of Python 2.x and being externally maintained from

2013-12-08 00:39:07 -08:00

lib2to3

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

logging

Issue #20242: Fixed basicConfig() format strings for the alternative formatting styles.

2014-01-13 21:59:56 +00:00

msilib

Issue #17047: remove doubled words found in 2.7 to 3.4 Lib/*,

2013-03-11 17:57:08 -04:00

multiprocessing

Issue #20633: Replace relative import by absolute import.

2014-03-23 12:42:28 +00:00

plat-aix4

…

plat-darwin

…

plat-freebsd4

…

plat-freebsd5

…

plat-freebsd6

…

plat-freebsd7

…

plat-freebsd8

…

plat-generic

…

plat-linux

…

plat-netbsd1

…

plat-next3

…

plat-os2emx

…

plat-sunos5

…

plat-unixware7

…

pydoc_data

Update pydoc topics.

2014-02-23 08:24:37 +01:00

site-packages

…

sqlite3

weaken callback count inequality (closes #20901)

2014-03-12 21:51:52 -05:00

test

Prevent HTTPoxy attack (CVE-2016-1000110)

2016-07-30 23:24:16 -07:00

tkinter

Fixed grid_columnconfigure() and grid_rowconfigure() methods of

2014-02-19 18:34:05 +02:00

turtledemo

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

unittest

Issue #19594: Use specific asserts in unittest tests.

2013-11-17 00:12:21 +02:00

urllib

Prevent HTTPoxy attack (CVE-2016-1000110)

2016-07-30 23:24:16 -07:00

venv

Issue #19504: Used American spelling for 'customize'.

2013-11-15 20:58:13 +00:00

wsgiref

Issue #22419: Limit the length of incoming HTTP request in wsgiref server to 65536 bytes.

2014-09-17 16:29:29 +08:00

xml

Issue #20331: Fixed possible FD leaks in various modules:

2014-01-25 19:43:02 +02:00

xmlrpc

merge 3.2 (#16043)

2014-12-05 20:30:54 -05:00

__future__.py

…

__phello__.foo.py

…

_compat_pickle.py

Fix issue #19834: Support unpickling of exceptions pickled by Python 2.

2013-12-02 11:41:01 +01:00

_dummy_thread.py

…

_markupbase.py

…

_osx_support.py

Issue #19400: Prevent extension module build failures with Xcode 5 on OS X

2013-10-25 16:03:35 -07:00

_pyio.py

Issue #20404: reject non-text encodings early in TextIOWrapper.

2014-03-02 09:18:31 +01:00

_strptime.py

Issue #19545: Avoid chained exceptions while passing stray % to

2013-11-24 18:15:37 +02:00

_threading_local.py

…

_weakrefset.py

Issue #20006: Fix sporadic failures in test_weakset.

2013-12-18 00:28:36 +01:00

abc.py

…

aifc.py

Issue #19623: Fixed writing to unseekable files in the aifc module.

2013-12-14 20:35:04 +02:00

antigravity.py

…

argparse.py

Issue #13107: argparse and optparse no longer raises an exception when output

2014-01-09 23:14:27 +02:00

ast.py

…

asynchat.py

Issue #18743: Fix references to non-existant "StringIO" module

2013-08-29 11:35:43 +03:00

asyncore.py

…

base64.py

Issue #18011: base64.b32decode() now raises a binascii.Error if there are

2013-05-28 15:27:29 +03:00

bdb.py

…

binhex.py

…

bisect.py

…

bz2.py

#19839: Fix regression in bz2 module's handling of non-bzip2 data at EOF.

2013-12-04 23:01:15 +01:00

calendar.py

#18705: fix a number of typos. Patch by Févry Thibault.

2013-08-17 15:50:46 +03:00

cgi.py

Issue #19092 - Raise a correct exception when cgi.FieldStorage is given an

2014-01-11 22:20:16 -08:00

cgitb.py

…

chunk.py

…

cmd.py

…

code.py

…

codecs.py

Issue #19619: Blacklist non-text codecs in method API

2014-02-24 14:43:03 +02:00

codeop.py

…

colorsys.py

…

compileall.py

#19532: make compileall with no file/dir args respect -f and -q.

2013-12-15 20:49:38 -05:00

configparser.py

Issue #20363. Fixed BytesWarning triggerred by test suite.

2014-02-06 22:49:45 +02:00

contextlib.py

Issue 20317: Remove debugging code from contextlib

2014-01-24 23:05:45 +10:00

copy.py

Issue #20791: copy.copy() now doesn't make a copy when the input is a bytes object. Initial patch by Peter Otten.

2014-02-27 22:14:31 +01:00

copyreg.py

…

cProfile.py

…

crypt.py

Issue #18405: Improve the entropy of crypt.mksalt().

2013-08-14 01:39:14 +02:00

csv.py

#19449: Handle non-string keys when generating 'fieldnames' error.

2013-11-19 13:16:20 -05:00

datetime.py

Issue #18783: Removed existing mentions of Python long type in docstrings,

2013-08-27 19:40:23 +03:00

decimal.py

1) Prepare libmpdec for the 2.4.0 release. None of the following changes affects

2013-11-24 19:44:57 +01:00

difflib.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

dis.py

…

doctest.py

Issue #19138: doctest's IGNORE_EXCEPTION_DETAIL now allows no detail at all.

2013-12-03 21:02:05 -06:00

dummy_threading.py

…

filecmp.py

…

fileinput.py

Issue #18315: Improve fileinput docs by adding 'bufsize' where missing and

2013-06-28 18:59:28 -04:00

fnmatch.py

…

formatter.py

…

fractions.py

…

ftplib.py

Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by

2014-09-30 14:12:24 +02:00

functools.py

Sync-up with 3.4 to make maintenance easier.

2013-03-08 23:01:07 -08:00

genericpath.py

#18705: fix a number of typos. Patch by Févry Thibault.

2013-08-17 15:50:46 +03:00

getopt.py

…

getpass.py

#18116: backport fix to 3.3 since real-world failure mode demonstrated.

2013-12-27 11:24:32 -05:00

gettext.py

…

glob.py

…

gzip.py

Issue #20875: Prevent possible gzip "'read' is not defined" NameError.

2014-03-09 14:44:34 -07:00

hashlib.py

…

heapq.py

Issue #19018: The heapq.merge() function no longer suppresses IndexError

2013-09-14 20:51:57 -07:00

hmac.py

…

imaplib.py

Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit

2014-09-30 16:00:09 +02:00

imghdr.py

Issue #20331: Fixed possible FD leaks in various modules:

2014-01-25 19:43:02 +02:00

imp.py

Issue #18755: Allow imp.load_*() loaders to have get_data() called

2013-08-23 11:45:57 -04:00

inspect.py

avoid parameter name clash (closes #20108)

2014-01-02 12:24:08 -06:00

io.py

…

ipaddress.py

Issue #18805: better netmask validation in ipaddress

2014-02-08 23:17:36 +10:00

keyword.py

…

linecache.py

…

locale.py

Issue #20027: Fixed locale aliases for devanagari locales.

2013-12-26 21:20:59 +02:00

lzma.py

#19839: Fix lzma module's handling of non-lzma data at EOF.

2013-12-04 23:03:49 +01:00

macpath.py

…

macurl2path.py

Increase the coverage of macurl2path. Patch by Colin Williams.

2013-10-23 21:50:56 -07:00

mailbox.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

mailcap.py

Issue #20331: Fixed possible FD leaks in various modules:

2014-01-25 19:43:02 +02:00

mimetypes.py

Issue #20331: Fixed possible FD leaks in various modules:

2014-01-25 19:43:02 +02:00

modulefinder.py

Issue #20778: Fix modulefinder to work with bytecode-only modules.

2014-02-28 10:44:45 -05:00

netrc.py

#14984: only import pwd on POSIX.

2013-09-18 08:52:38 -04:00

nntplib.py

#16040: fix unlimited read from connection in nntplib.

2014-10-12 08:50:11 +02:00

ntpath.py

Issue #6815: os.path.expandvars() now supports non-ASCII environment

2014-02-13 10:13:53 +02:00

nturl2path.py

…

numbers.py

…

opcode.py

…

optparse.py

Issue #20315: Removed support for backward compatibility with early 2.x versions.

2014-01-20 21:29:31 +02:00

os2emxpath.py

…

os.py

merge 3.2 (#21082)

2014-04-01 19:17:57 -04:00

pdb.py

Closes #17154: error out gracefully on "ignore" or "condition" without argument.

2013-10-14 16:08:15 +02:00

pickle.py

Issue #6477: Added support for pickling the types of built-in singletons.

2013-11-30 16:06:39 -08:00

pickletools.py

Issue #18783: Removed existing mentions of Python long type in docstrings,

2013-08-27 19:40:23 +03:00

pipes.py

…

pkgutil.py

Close issue #16163: handle submodules in pkgutil.iter_importers

2013-04-14 22:30:42 +10:00

platform.py

Issue #17429: platform.linux_distribution() now decodes files from the UTF-8

2013-12-09 00:01:27 +01:00

plistlib.py

Ensure that plistlib doesn't corrupt deeply nested datastructures

2013-04-23 13:47:22 +02:00

poplib.py

Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to

2014-09-30 14:45:39 +02:00

posixpath.py

Fixed typo in previous commit (issue #6815).

2014-02-13 10:45:14 +02:00

pprint.py

Issue #19137: The pprint module now correctly formats instances of set and

2013-10-02 11:40:49 +03:00

profile.py

…

pstats.py

…

pty.py

…

py_compile.py

…

pyclbr.py

…

pydoc.py

Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces.

2014-09-17 13:17:58 +08:00

queue.py

Issue #18676: Change 'positive' to 'non-negative' in queue.py put and get

2013-08-10 18:17:13 -04:00

quopri.py

…

random.py

Issue 14927: Remove a docstring line that is no longer applicable.

2013-10-05 22:11:16 -07:00

re.py

Issue #20426: When passing the re.DEBUG flag, re.compile() displays the debug output every time it is called, regardless of the compilation cache.

2014-02-03 20:59:59 +01:00

reprlib.py

…

rlcompleter.py

#18705: fix a number of typos. Patch by Févry Thibault.

2013-08-17 15:50:46 +03:00

runpy.py

…

sched.py

Issue #18432: Fix unintended API change in the sched module

2013-07-13 22:42:09 -07:00

shelve.py

…

shlex.py

…

shutil.py

Issue #19856: shutil.move() failed to move a directory to other directory

2014-02-11 10:30:59 +02:00

site.py

Fix License URL display and add test to check for license url presence.

2013-09-07 13:59:17 -07:00

smtpd.py

…

smtplib.py

Fix-up for 0f362676460d: add missing size argument to SSLFakeFile.readline(), as in 2.6 backport 8a6def3add5b

2014-09-30 16:31:21 +02:00

sndhdr.py

…

socket.py

…

socketserver.py

…

sre_compile.py

Issue #19405: Fixed outdated comments in the _sre module.

2013-10-27 08:04:58 +02:00

sre_constants.py

Issue #18050: Fixed an incompatibility of the re module with Python 3.3.0

2013-09-20 21:24:39 +03:00

sre_parse.py

Issue #18050: Fixed an incompatibility of the re module with Python 3.3.0

2013-09-20 21:24:39 +03:00

ssl.py

Issue #19422: Explicitly disallow non-SOCK_STREAM sockets in the ssl module, rather than silently let them emit clear text data.

2013-12-28 17:26:33 +01:00

stat.py

…

string.py

…

stringprep.py

…

struct.py

…

subprocess.py

remove unnecessary word (closes #19060)

2014-03-12 21:41:35 -05:00

sunau.py

Issue #18919: If the close() method of a writer in the sunau or wave module

2013-10-12 21:36:10 +03:00

symbol.py

…

symtable.py

just return toplevel symbol table rather than all blocks (closes #19393)

2013-10-26 13:13:51 -04:00

sysconfig.py

Issue #18235: Fix the sysconfig variables LDSHARED and BLDSHARED under AIX.

2013-10-19 22:05:05 +02:00

tabnanny.py

…

tarfile.py

Issue #19920: TarFile.list() no longer fails when outputs a listing

2014-02-05 20:53:36 +02:00

telnetlib.py

Fixes Issue #17200: telnetlib's read_until and expect timeout was broken by the

2013-12-10 18:25:21 -08:00

tempfile.py

Issue #19077: tempfile.TemporaryDirectory cleanup is now most likely

2014-01-27 11:18:27 +02:00

textwrap.py

…

this.py

…

threading.py

Closes #17375: port new threading docstrings from 2.7.

2013-10-13 10:43:59 +02:00

timeit.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

token.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

tokenize.py

whitespace

2014-02-23 23:39:57 -05:00

trace.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

traceback.py

Issue #17825: Cursor ^ is correctly positioned for SyntaxError and IndentationError.

2014-01-22 01:11:43 +01:00

tty.py

…

turtle.py

#18705: fix a number of typos. Patch by Févry Thibault.

2013-08-17 15:50:46 +03:00

types.py

…

uu.py

…

uuid.py

Issue #19855: uuid.getnode() on Unix now looks on the PATH for the

2014-09-30 19:34:19 +02:00

warnings.py

…

wave.py

Issue #19633: Fixed writing not compressed 16- and 32-bit wave files on

2013-11-21 11:02:30 +02:00

weakref.py

…

webbrowser.py

Issue #19936: Added executable bits or shebang lines to Python scripts which

2014-01-16 17:15:49 +02:00

xdrlib.py

…

zipfile.py

Issue #20262: Warnings are raised now when duplicate names are added in the

2014-01-20 21:57:40 +02:00