From: Benjamin Peterson Date: Tue, 30 Sep 2014 02:48:51 +0000 (-0400) Subject: merge 3.3 (#22517) X-Git-Tag: v3.5.0a1~821^2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=c44eb73473f31dfde1e8cb6ba485a309e3b0757e;p=python merge 3.3 (#22517) --- c44eb73473f31dfde1e8cb6ba485a309e3b0757e diff --cc Misc/NEWS index 6eb64f9539,890c25103e..e7476e5d2b --- a/Misc/NEWS +++ b/Misc/NEWS @@@ -16,56 -17,68 +16,59 @@@ Core and Builtin Library ------- + - Issue #22517: When a io.BufferedRWPair object is deallocated, clear its + weakrefs. + -- Issue #22419: Limit the length of incoming HTTP request in wsgiref server to - 65536 bytes and send a 414 error code for higher lengths. Patch contributed - by Devin Cook. - -- Lax cookie parsing in http.cookies could be a security issue when combined - with non-standard cookie handling in some Web browsers. Reported by - Sergey Bobrov. - -- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths - before checking for a CGI script at that path. - -- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second - parameter. Bug reported by Guido Vranken. +- Issue #22448: Improve canceled timer handles cleanup to prevent + unbound memory usage. Patch by Joshua Moore-Oliva. -- Issue #20633: Replace relative import by absolute import. +Build +----- -- Issue #21082: In os.makedirs, do not set the process-wide umask. Note this - changes behavior of makedirs when exist_ok=True. +- Issue #16537: Check whether self.extensions is empty in setup.py. Patch by + Jonathan Hosmer. -- Issue #20875: Prevent possible gzip "'read' is not defined" NameError. - Patch by Claudiu Popa. -- Issue #11599: When an external command (e.g. compiler) fails, distutils now - prints out the whole command line (instead of just the command name) if the - environment variable DISTUTILS_DEBUG is set. +What's New in Python 3.4.2? +=========================== -- Issue #4931: distutils should not produce unhelpful "error: None" messages - anymore. distutils.util.grok_environment_error is kept but doc-deprecated. +Release date: 2014-10-06 -- Issue #20283: RE pattern methods now accept the string keyword parameters - as documented. The pattern and source keyword parameters are left as - deprecated aliases. +Core and Builtins +----------------- -- Issue #21323: Fix http.server to again handle scripts in CGI subdirectories, - broken by the fix for security issue #19435. Patch by Zach Byrne. +Library +------- -Tests ------ +- Issue #10510: distutils register and upload methods now use HTML standards + compliant CRLF line endings. -- Issue #17752: Fix distutils tests when run from the installed location. +- Issue #9850: Fixed macpath.join() for empty first component. Patch by + Oleg Oshmyan. -- Issue #20946: Correct alignment assumptions of some ctypes tests. +- Issue #22427: TemporaryDirectory no longer attempts to clean up twice when + used in the with statement in generator. -- Issue #20939: Fix test_geturl failure in test_urllibnet due to - new redirect of http://www.python.org/ to https://www.python.org. +- Issue #20912: Now directories added to ZIP file have correct Unix and MS-DOS + directory attributes. +- Issue #21866: ZipFile.close() no longer writes ZIP64 central directory + records if allowZip64 is false. -What's New in Python 3.3.5? -=========================== +- Issue #22415: Fixed debugging output of the GROUPREF_EXISTS opcode in the re + module. Removed trailing spaces in debugging output. -*Release date: 09-Mar-2014* +- Issue #22423: Unhandled exception in thread no longer causes unhandled + AttributeError when sys.stderr is None. -No changes from release candidate 2. +- Issue #21332: Ensure that ``bufsize=1`` in subprocess.Popen() selects + line buffering, rather than block buffering. Patch by Akira Li. -What's New in Python 3.3.5 release candidate 2? -=============================================== +What's New in Python 3.4.2rc1? +============================== -*Release date: 02-Mar-2014* +Release date: 2014-09-22 Core and Builtins -----------------