Christian Heimes d02ac25ab0 bpo-33136: Harden ssl module against CVE-2018-8970 (GH-6229) ...

Harden ssl module against LibreSSL CVE-2018-8970.
X509_VERIFY_PARAM_set1_host() is called with an explicit namelen. A new test
ensures that NULL bytes are not allowed.

Signed-off-by: Christian Heimes <christian@python.org>

2018-03-25 12:36:13 +02:00

..

asyncio

bpo-33037: Skip sending/receiving after SSL transport closing (GH-6044)

2018-03-10 17:48:35 +02:00

collections

Code beautification using f-strings (#5618)

2018-02-11 08:00:11 -08:00

concurrent

bpo-33056 FIX leaking fd in concurrent.futures.ProcessPoolExecutor (#6084)

2018-03-12 19:18:41 +02:00

ctypes

bpo-32746: Fix multiple typos (GH-5144)

2018-02-03 19:36:10 -05:00

curses

…

dbm

bpo-32749: Make dbm.dumb databases more cosistent with other dbm databases. (#5497)

2018-02-05 22:47:31 +02:00

distutils

Improve error message for "setup.py upload" without dist files (#21060)

2018-02-18 18:14:54 -05:00

email

bpo-32746: Fix multiple typos (GH-5144)

2018-02-03 19:36:10 -05:00

encodings

bpo-32943: Fix confusing error message for rot13 codec (GH-5869)

2018-03-25 12:09:21 +08:00

ensurepip

Upgrade pip to v9.0.3 and setuptools to v39.0.1 (#6184)

2018-03-21 22:47:44 -04:00

html

…

http

bpo-31639: Use threads in http.server module. (GH-5018)

2018-03-23 17:40:33 +01:00

idlelib

bpo-32984: IDLE - set __file__ for startup files (GH-5981)

2018-03-05 11:02:46 -05:00

importlib

bpo-33041: Rework compiling an "async for" loop. (#6142)

2018-03-23 14:34:35 +02:00

json

bpo-32360: Remove OrderedDict usage from json.tool (GH-5315)

2018-01-25 19:52:58 +09:00

lib2to3

Revert "bpo-30406: Make async and await proper keywords (#1669)" (GH-6143)

2018-03-18 09:54:33 -07:00

logging

Revert unneccessary changes made in bpo-30296 and apply other improvements. (GH-2624)

2018-02-26 16:50:11 +02:00

msilib

…

multiprocessing

bpo-33078 - Fix queue size on pickling error (GH-6119)

2018-03-21 16:50:28 +01:00

pydoc_data

Update NEWS, docs, and patchlevel for 3.7.0b1

2018-01-31 17:14:30 -05:00

site-packages

…

sqlite3

bpo-27645: Fix version number in 'database in transaction' fallback (GH-6131)

2018-03-18 03:48:55 +03:00

test

bpo-33136: Harden ssl module against CVE-2018-8970 (GH-6229)

2018-03-25 12:36:13 +02:00

tkinter

bpo-32857: Raise error when tkinter after_cancel() is called with None. (GH-5701)

2018-03-04 12:41:47 +02:00

turtledemo

bpo-32297: Few misspellings found in Python source code comments. (#4803)

2017-12-14 13:04:53 +02:00

unittest

bpo-32746: Fix multiple typos (GH-5144)

2018-02-03 19:36:10 -05:00

urllib

bpo-33034: Improve exception message when cast fails for {Parse,Split}Result.port (GH-6078)

2018-03-20 09:41:37 +03:00

venv

bpo-32409: Ensures activate.bat can handle Unicode contents (GH-5757)

2018-02-19 17:25:24 -08:00

wsgiref

…

xml

bpo-32297: Few misspellings found in Python source code comments. (#4803)

2017-12-14 13:04:53 +02:00

xmlrpc

bpo-32297: Few misspellings found in Python source code comments. (#4803)

2017-12-14 13:04:53 +02:00

__future__.py

String annotations [PEP 563] (#4390)

2018-01-26 08:20:18 -08:00

__phello__.foo.py

…

_bootlocale.py

bpo-29240: PEP 540: Add a new UTF-8 Mode (#855)

2017-12-13 12:29:09 +01:00

_collections_abc.py

bpo-32467: Let collections.abc.ValuesView inherit from Collection (#5152)

2018-01-11 21:53:49 -08:00

_compat_pickle.py

…

_compression.py

…

_dummy_thread.py

…

_markupbase.py

…

_osx_support.py

…

_py_abc.py

bpo-33018: Improve issubclass() error checking and message. (GH-5944)

2018-03-22 11:26:06 +00:00

_pydecimal.py

bpo-32630: Use contextvars in decimal (GH-5278)

2018-01-27 13:46:46 -05:00

_pyio.py

bpo-15216: io: TextIOWrapper.reconfigure() accepts encoding, errors and newline (GH-2343)

2017-12-21 09:59:53 +09:00

_sitebuiltins.py

…

_strptime.py

Fix when parsing tz offsets microseconds shorter than 6 (#4781)

2018-01-09 16:37:26 -05:00

_threading_local.py

Delete a broken threading.local example (#5870)

2018-02-25 10:03:40 -05:00

_weakrefset.py

…

abc.py

bpo-31333: Re-implement ABCMeta in C (#5273)

2018-02-18 12:41:58 +00:00

aifc.py

bpo-32056: Improve exceptions in aifc, wave and sunau. (GH-5951)

2018-03-18 09:55:53 +02:00

antigravity.py

…

argparse.py

OrderedDict import is no longer needed (#4890)

2018-01-11 22:20:33 -08:00

ast.py

bpo-31778: Make ast.literal_eval() more strict. (#4035)

2018-01-04 11:15:39 +02:00

asynchat.py

…

asyncore.py

…

base64.py

…

bdb.py

bpo-32650 Add support for async generators and more test for coroutines in pdb (#5403)

2018-01-28 20:31:00 -05:00

binhex.py

…

bisect.py

…

bz2.py

…

calendar.py

…

cgi.py

…

cgitb.py

…

chunk.py

…

cmd.py

…

code.py

…

codecs.py

…

codeop.py

…

colorsys.py

…

compileall.py

closes bpo-31650: PEP 552 (Deterministic pycs) implementation (#4575)

2017-12-09 10:26:52 -08:00

configparser.py

…

contextlib.py

bpo-30306: release arguments of contextmanager (GH-1500)

2018-01-28 14:17:46 +10:00

contextvars.py

bpo-32436: Implement PEP 567 (#5027)

2018-01-22 19:11:18 -05:00

copy.py

…

copyreg.py

…

cProfile.py

…

crypt.py

…

csv.py

bpo-30157: Fix csv.Sniffer.sniff() regex pattern. (GH-5601)

2018-02-09 20:00:49 +02:00

dataclasses.py

bpo-33134: dataclasses: use function dispatch table for hash, instead of a string lookup which then is tested with if tests. (GH-6222)

2018-03-24 22:10:14 -04:00

datetime.py

bpo-15873: Implement [date][time].fromisoformat (#4699)

2017-12-21 00:33:49 -05:00

decimal.py

…

difflib.py

bpo-32981: Fix catastrophic backtracking vulns (#5955)

2018-03-03 21:33:32 -08:00

dis.py

bpo-32970: Improve disassembly of the MAKE_FUNCTION instruction. (GH-5937)

2018-03-11 11:07:06 +02:00

doctest.py

…

dummy_threading.py

…

enum.py

bpo-31801: Enum: add _ignore_ as class option (#5237)

2018-01-22 07:56:37 -08:00

filecmp.py

…

fileinput.py

…

fnmatch.py

bpo-32775: Fix regular expression warnings in fnmatch. (#5583)

2018-02-09 13:30:19 +02:00

formatter.py

…

fractions.py

…

ftplib.py

…

functools.py

bpo-32227: functools.singledispatch supports registering via type annotations (#4733)

2017-12-11 13:56:31 -08:00

genericpath.py

…

getopt.py

…

getpass.py

…

gettext.py

…

glob.py

…

gzip.py

…

hashlib.py

…

heapq.py

…

hmac.py

bpo-32433: Optimized HMAC digest (#5023)

2018-01-27 09:53:43 +01:00

imaplib.py

…

imghdr.py

…

imp.py

…

inspect.py

bpo-33009: Fix inspect.signature() for single-parameter partialmethods. (GH-6004)

2018-03-06 12:59:45 -05:00

io.py

…

ipaddress.py

bpo-27683: Fix a regression for host() of ipaddress network objects (GH-6016)

2018-03-21 08:25:13 +08:00

keyword.py

…

linecache.py

…

locale.py

bpo-29240: PEP 540: Add a new UTF-8 Mode (#855)

2017-12-13 12:29:09 +01:00

lzma.py

…

macpath.py

bpo-31802: Fix importing native path module before importing os. (#4017)

2018-01-07 17:54:31 +02:00

mailbox.py

…

mailcap.py

…

mimetypes.py

…

modulefinder.py

closes bpo-31650: PEP 552 (Deterministic pycs) implementation (#4575)

2017-12-09 10:26:52 -08:00

netrc.py

…

nntplib.py

…

ntpath.py

bpo-31802: Fix importing native path module before importing os. (#4017)

2018-01-07 17:54:31 +02:00

nturl2path.py

…

numbers.py

…

opcode.py

bpo-33041: Rework compiling an "async for" loop. (#6142)

2018-03-23 14:34:35 +02:00

operator.py

…

optparse.py

…

os.py

bpo-32297: Few misspellings found in Python source code comments. (#4803)

2017-12-14 13:04:53 +02:00

pathlib.py

bpo-31972: Improve docstrings for pathlib classes (#5310)

2018-02-18 18:36:32 -05:00

pdb.py

bpo-32691: Use mod_spec.parent when running modules with pdb (GH-5474)

2018-02-03 16:40:11 +10:00

pickle.py

bpo-32503: Avoid creating too small frames in pickles. (#5127)

2018-01-20 16:42:44 +02:00

pickletools.py

bpo-31993: Do not allocate large temporary buffers in pickle dump. (#4353)

2018-01-06 17:18:54 +02:00

pipes.py

…

pkgutil.py

closes bpo-31650: PEP 552 (Deterministic pycs) implementation (#4575)

2017-12-09 10:26:52 -08:00

platform.py

…

plistlib.py

…

poplib.py

bpo-32981: Fix catastrophic backtracking vulns (#5955)

2018-03-03 21:33:32 -08:00

posixpath.py

bpo-31802: Fix importing native path module before importing os. (#4017)

2018-01-07 17:54:31 +02:00

pprint.py

…

profile.py

…

pstats.py

Revert unneccessary changes made in bpo-30296 and apply other improvements. (GH-2624)

2018-02-26 16:50:11 +02:00

pty.py

…

py_compile.py

bpo-29708: Setting SOURCE_DATE_EPOCH forces hash-based .pyc files (GH-5200)

2018-01-24 13:26:18 -08:00

pyclbr.py

…

pydoc.py

bpo-32440: Update the docs URL to https in help() (GH-5030)

2017-12-28 06:37:46 -08:00

queue.py

bpo-14976: Reentrant simple queue (#3346)

2018-01-16 00:27:16 +01:00

quopri.py

…

random.py

…

re.py

bpo-32338: OrderedDict import is no longer needed in re. (#4891)

2018-03-11 08:38:13 +02:00

reprlib.py

…

rlcompleter.py

…

runpy.py

…

sched.py

…

secrets.py

…

selectors.py

…

shelve.py

…

shlex.py

…

shutil.py

…

signal.py

…

site.py

bpo-28440: Don't add /Library/Python/3.x/site-packages to sys.path (#5445)

2018-01-30 05:14:09 -05:00

smtpd.py

…

smtplib.py

bpo-32727: smtplib's SMTP.send_message behaves differently with from_addr and to_addrs (#5451)

2018-01-30 19:02:51 -05:00

sndhdr.py

…

socket.py

bpo-28134: Auto-detect socket values from file descriptor (#1349)

2018-01-29 22:37:58 +01:00

socketserver.py

…

sre_compile.py

…

sre_constants.py

…

sre_parse.py

bpo-30688: Import unicodedata only when needed. (GH-5606)

2018-02-10 08:59:29 +02:00

ssl.py

bpo-24334: Remove inaccurate match_hostname call (#6211)

2018-03-24 15:36:50 +01:00

stat.py

…

statistics.py

…

string.py

bpo-31672: Restore the former behavior when override flags in Template. (#5099)

2018-01-04 19:20:11 +02:00

stringprep.py

…

struct.py

…

subprocess.py

Revert "bpo-31961: subprocess now accepts path-like args (GH-4329)" (#5912)

2018-02-27 18:03:46 -05:00

sunau.py

bpo-32056: Improve exceptions in aifc, wave and sunau. (GH-5951)

2018-03-18 09:55:53 +02:00

symbol.py

…

symtable.py

…

sysconfig.py

…

tabnanny.py

…

tarfile.py

bpo-32713: Fix tarfile.itn for large/negative float values. (GH-5434)

2018-02-27 02:02:21 +02:00

telnetlib.py

…

tempfile.py

…

textwrap.py

…

this.py

…

threading.py

…

timeit.py

…

token.py

…

tokenize.py

…

trace.py

bpo-32852: Fix trace changing sys.argv to tuple. (GH-5692)

2018-02-17 08:32:37 +02:00

traceback.py

…

tracemalloc.py

…

tty.py

…

turtle.py

Revert unneccessary changes made in bpo-30296 and apply other improvements. (GH-2624)

2018-02-26 16:50:11 +02:00

types.py

bpo-32265: Classify class and static methods of builtin types. (#4776)

2017-12-15 14:13:41 +02:00

typing.py

bpo-33061: Add missing 'NoReturn' to __all__ in typing.py (GH-6127)

2018-03-19 18:41:32 +00:00

uu.py

…

uuid.py

bpo-32370: Use the correct encoding for ipconfig output in the uuid module. (GH-5608)

2018-02-13 08:29:54 +02:00

warnings.py

bpo-32591: Add native coroutine origin tracking (#5250)

2018-01-21 09:44:07 -05:00

wave.py

bpo-32056: Improve exceptions in aifc, wave and sunau. (GH-5951)

2018-03-18 09:55:53 +02:00

weakref.py

…

webbrowser.py

…

xdrlib.py

…

zipapp.py

…

zipfile.py

bpo-30693: zip+tarfile: sort directory listing (#2263)

2018-01-31 11:17:10 +01:00