Martin v. Löwis
2d253dd9ea
Issue 11442: Add NEWS entry for e9724d7abbc2
2011-04-17 22:29:40 +02:00
guido@google.com
92ecb8737b
Adding .hgignore (copied from default branch).
2011-03-29 09:53:33 -07:00
guido@google.com
db3080e68f
Add CVE number to urllib/urllib2 news item.
2011-03-28 13:53:40 -07:00
guido@google.com
f1509306d2
Add tests for the urllib[2] vulnerability. Change to raise exceptions.
2011-03-28 13:47:01 -07:00
guido@google.com
2bc23b8448
Add FTP to the allowed url schemes. Add Misc/NEWS.
2011-03-24 10:44:17 -07:00
guido@google.com
60a4a90c8d
Issue 22663: fix redirect vulnerability in urllib/urllib2.
2011-03-24 08:07:45 -07:00
Martin v. Löwis
ce5d0e22fc
Set subversion version identification to empty strings if this is not a subversion
...
checkout (but a mercurial one). Closes #11579 . Closes #11421 .
Patch by Senthil Kumaran.
2011-03-21 10:30:07 +01:00
Guido van Rossum
197f7f6859
Whoops. The copyright should be two lines.
2011-03-19 16:20:06 -07:00
Guido van Rossum
deeb71e8a0
Test commit. Add 2011 to copyright line.
2011-03-19 16:14:44 -07:00
Senthil Kumaran
3853586e0c
Fix issue11442 - Add a charset parameter to the Content-type to avoid XSS attacks.
...
Patch by Tom N. (Backported from py3k codeline).
2011-03-17 12:34:18 +08:00
Georg Brandl
6e0a8b8ab6
Add tags from the closed branches.
2011-03-05 20:38:24 +01:00
Georg Brandl
4db2c257d6
Add .hgeol file and fix newlines in the 2.5 branch.
2011-03-05 15:02:28 +01:00
Georg Brandl
2af945cd3f
Fix tag references in 2.5 branch.
2011-03-05 15:01:01 +01:00
Matthias Klose
b7180a89b3
Merge r82494 from the python2.6 branch:
...
Issue #7673 : Fix security vulnerability (CVE-2010-2089) in the audioop module,
ensure that the input string length is a multiple of the frame size
2010-10-17 10:48:14 +00:00
Matthias Klose
d4367c24cd
Merge r81080 from the python2.6 branch:
...
Issue #8674 : fix another bogus overflow check in audioop module.
2010-10-17 10:34:40 +00:00
Matthias Klose
192b714f92
Merged revisions 81046 from the python2.6 branch:
...
Issue #8674 : Fix incorrect and UB-inducing overflow checks in audioop
module. Thanks Tomas Hoger for the patch.
2010-10-17 10:28:49 +00:00
Martin v. Löwis
b3b56fcfcb
Post 2.5.5.
2010-01-31 16:00:16 +00:00
Martin v. Löwis
e80cf5ae54
Tagging for release of Python 2.5.5
2010-01-31 12:39:06 +00:00
Martin v. Löwis
ec2aed6617
Prepare for 2.5.5.
2010-01-31 12:38:29 +00:00
Martin v. Löwis
7fa05724e0
Tagging for release of Python 2.5.5c2
2010-01-24 14:26:14 +00:00
Martin v. Löwis
e7abfd7cef
Prepare for 2.5.5c2.
2010-01-24 14:24:46 +00:00
Matthias Klose
b8ec8a48ec
- expat: Fix DoS via malformed XML (CVE-2009-3720).
2010-01-21 17:43:31 +00:00
Matthias Klose
166f80860e
- Fix DoS via XML document with malformed UTF-8 sequences (CVE_2009_3560).
2010-01-21 17:41:47 +00:00
Martin v. Löwis
8cd94b4306
Tagging for release of Python 2.5.5c1
2010-01-14 17:53:16 +00:00
Martin v. Löwis
906e26e897
Prepare for 2.5.5c1.
2010-01-14 17:41:58 +00:00
Mark Dickinson
a822768c62
Restore the svn property changes in r76754
2009-12-11 20:09:24 +00:00
Vinay Sajip
02d3dcde5b
Issue #7470 : logging: fix bug in Unicode encoding fallback.
2009-12-11 09:16:01 +00:00
Vinay Sajip
b9c85c156b
Issue #7403 : logging: Fixed possible race condition in lock creation.
2009-11-27 15:34:35 +00:00
Philip Jenvey
4c9c260c1a
#6990 : clear threading.local's key only after its thread state is removed:
...
fixes local subclasses leaving old state around after a ref cycle GC which
could be recycled by new locals
(backported from r75123)
2009-09-29 05:30:42 +00:00
Lars Gustäbel
b4dc921e30
Avoid EOFError being passed to the caller (restoring the
...
old behavior).
2009-03-22 21:34:05 +00:00
Lars Gustäbel
7623294cb7
Issue #5068 : Fixed the tarfile._BZ2Proxy.read() method that would loop
...
forever on incomplete input. That caused tarfile.open() to hang when used
with mode 'r' or 'r:bz2' and a fileobj argument that contained no data or
partial bzip2 compressed data.
(backported from r70523)
2009-03-22 20:48:03 +00:00
Guido van Rossum
f73bf85942
News for issue 5389 fix.
2009-03-05 21:49:40 +00:00
Guido van Rossum
c261e4868b
Avoid potential for undefined variable 'startinpos' in PyUnicode_DecodeUTF7().
...
See issue #5389 .
2009-03-05 21:47:33 +00:00
Martin v. Löwis
2a67a84954
Tagging for release of Python 2.5.4
2008-12-23 13:22:06 +00:00
Martin v. Löwis
3b43e46b3d
Prepare for 2.5.4.
2008-12-23 13:18:53 +00:00
Martin v. Löwis
8ba4cc9f99
Issue #4689 : Fix typo.
2008-12-23 13:15:02 +00:00
Martin v. Löwis
3c08e45b70
Revert patch for #1706039 , as it can crash the interpreter.
2008-12-23 13:10:43 +00:00
Martin v. Löwis
edf14317e3
Backport of r67908:
...
Added test case to ensure attempts to read from a file opened for writing
fail.
2008-12-23 13:07:51 +00:00
Martin v. Löwis
b90b144c47
Post 2.5.3.
2008-12-20 03:38:16 +00:00
Martin v. Löwis
f7702adc3b
Tagging for release of Python 2.5.3
2008-12-19 15:09:20 +00:00
Martin v. Löwis
3d9eecb0bb
Prepare for 2.5.3.
2008-12-19 15:08:45 +00:00
Martin v. Löwis
e467f43373
Build against system Tcl framework.
2008-12-19 15:05:38 +00:00
Martin v. Löwis
20fde6641a
In the OSX installer, update SQLite to 3.6.7, and change bsddb URL.
2008-12-17 18:03:01 +00:00
Martin v. Löwis
d6e258a5a7
Add 2.5.3 final section.
2008-12-13 22:32:24 +00:00
Martin v. Löwis
9fb554ffae
Tagging for release of Python 2.5.3c1
2008-12-13 15:44:13 +00:00
Martin v. Löwis
073ff240e7
Prepare for 2.5.3c1.
2008-12-13 15:42:40 +00:00
Martin v. Löwis
0896d3e983
Add 2.5.3.
2008-12-13 15:40:54 +00:00
Martin v. Löwis
084486b234
Issue #1706039 : Support continued reading from a file even after
...
EOF was hit.
2008-12-13 15:36:49 +00:00
Martin v. Löwis
710fb8bf45
Issue #1040026 : Fix os.times result on systems where HZ is incorrect.
2008-12-13 15:14:30 +00:00
Martin v. Löwis
c252d9bc08
Issue #3767 : Convert Tk object to string in tkColorChooser.
2008-12-13 15:09:44 +00:00
