1 .. bpo: 4346 2 .. date: 9373 3 .. nonce: UASH7u 4 .. release date: 2014-06-29 5 .. section: Core and Builtins 6 7 In PyObject_CallMethod and PyObject_CallMethodObjArgs, don't overwrite the 8 error set in PyObject_GetAttr. 9 10 .. 11 12 .. bpo: 21831 13 .. date: 9372 14 .. nonce: LMoAu3 15 .. section: Core and Builtins 16 17 Avoid integer overflow when large sizes and offsets are given to the buffer 18 type. CVE-2014-7185. 19 20 .. 21 22 .. bpo: 19656 23 .. date: 9371 24 .. nonce: H_jvEi 25 .. section: Core and Builtins 26 27 Running Python with the -3 option now also warns about non-ascii bytes 28 literals. 29 30 .. 31 32 .. bpo: 21642 33 .. date: 9370 34 .. nonce: CjIqaU 35 .. section: Core and Builtins 36 37 If the conditional if-else expression, allow an integer written with no 38 space between itself and the ``else`` keyword (e.g. ``True if 42else 39 False``) to be valid syntax. 40 41 .. 42 43 .. bpo: 21523 44 .. date: 9369 45 .. nonce: f_PPYO 46 .. section: Core and Builtins 47 48 Fix over-pessimistic computation of the stack effect of some opcodes in the 49 compiler. This also fixes a quadratic compilation time issue noticeable 50 when compiling code with a large number of "and" and "or" operators. 51 52 .. 53 54 .. bpo: 21652 55 .. date: 9368 56 .. nonce: kCNkbE 57 .. section: Library 58 59 Prevent mimetypes.type_map from containing unicode keys on Windows. 60 61 .. 62 63 .. bpo: 21729 64 .. date: 9367 65 .. nonce: oa2kD6 66 .. section: Library 67 68 Used the "with" statement in the dbm.dumb module to ensure files closing. 69 70 .. 71 72 .. bpo: 21672 73 .. date: 9366 74 .. nonce: iMRNWM 75 .. section: Library 76 77 Fix the behavior of ntpath.join on UNC-style paths. 78 79 .. 80 81 .. bpo: 19145 82 .. date: 9365 83 .. nonce: cRrKpW 84 .. section: Library 85 86 The times argument for itertools.repeat now handles negative values the same 87 way for keyword arguments as it does for positional arguments. 88 89 .. 90 91 .. bpo: 21832 92 .. date: 9364 93 .. nonce: PBA0Uu 94 .. section: Library 95 96 Require named tuple inputs to be exact strings. 97 98 .. 99 100 .. bpo: 8343 101 .. date: 9363 102 .. nonce: 2KNnCH 103 .. section: Library 104 105 Named group error messages in the re module did not show the name of the 106 erroneous group. 107 108 .. 109 110 .. bpo: 21491 111 .. date: 9362 112 .. nonce: suNKZf 113 .. section: Library 114 115 SocketServer: Fix a race condition in child processes reaping. 116 117 .. 118 119 .. bpo: 21635 120 .. date: 9361 121 .. nonce: ET3OJZ 122 .. section: Library 123 124 The difflib SequenceMatcher.get_matching_blocks() method cache didn't match 125 the actual result. The former was a list of tuples and the latter was a 126 list of named tuples. 127 128 .. 129 130 .. bpo: 21722 131 .. date: 9360 132 .. nonce: WTHuRy 133 .. section: Library 134 135 The distutils "upload" command now exits with a non-zero return code when 136 uploading fails. Patch by Martin Dengler. 137 138 .. 139 140 .. bpo: 21766 141 .. date: 9359 142 .. nonce: 0xk_xC 143 .. section: Library 144 145 Prevent a security hole in CGIHTTPServer by URL unquoting paths before 146 checking for a CGI script at that path. 147 148 .. 149 150 .. bpo: 21310 151 .. date: 9358 152 .. nonce: 2mjByJ 153 .. section: Library 154 155 Fixed possible resource leak in failed open(). 156 157 .. 158 159 .. bpo: 21304 160 .. date: 9357 161 .. nonce: xXyySz 162 .. section: Library 163 164 Backport the key derivation function hashlib.pbkdf2_hmac from Python 3 per 165 PEP 466. 166 167 .. 168 169 .. bpo: 11709 170 .. date: 9356 171 .. nonce: JdObvL 172 .. section: Library 173 174 Fix the pydoc.help function to not fail when sys.stdin is not a valid file. 175 176 .. 177 178 .. bpo: 13223 179 .. date: 9355 180 .. nonce: 9AzEbN 181 .. section: Library 182 183 Fix pydoc.writedoc so that the HTML documentation for methods that use 184 'self' in the example code is generated correctly. 185 186 .. 187 188 .. bpo: 21552 189 .. date: 9354 190 .. nonce: uVy4tM 191 .. section: Library 192 193 Fixed possible integer overflow of too long string lengths in the tkinter 194 module on 64-bit platforms. 195 196 .. 197 198 .. bpo: 14315 199 .. date: 9353 200 .. nonce: YzZzS8 201 .. section: Library 202 203 The zipfile module now ignores extra fields in the central directory that 204 are too short to be parsed instead of letting a struct.unpack error bubble 205 up as this "bad data" appears in many real world zip files in the wild and 206 is ignored by other zip tools. 207 208 .. 209 210 .. bpo: 21402 211 .. date: 9352 212 .. nonce: GuVy1L 213 .. section: Library 214 215 Tkinter.ttk now works when default root window is not set. 216 217 .. 218 219 .. bpo: 10203 220 .. date: 9351 221 .. nonce: gERvVk 222 .. section: Library 223 224 sqlite3.Row now truly supports sequence protocol. In particulr it supports 225 reverse() and negative indices. Original patch by Claudiu Popa. 226 227 .. 228 229 .. bpo: 8743 230 .. date: 9350 231 .. nonce: I6_2r3 232 .. section: Library 233 234 Fix interoperability between set objects and the collections.Set() abstract 235 base class. 236 237 .. 238 239 .. bpo: 21481 240 .. date: 9349 241 .. nonce: YDrlf7 242 .. section: Library 243 244 Argparse equality and inequality tests now return NotImplemented when 245 comparing to an unknown type. 246 247 .. 248 249 .. bpo: 21940 250 .. date: 9348 251 .. nonce: VlIRz7 252 .. section: IDLE 253 254 Add unittest for WidgetRedirector. Initial patch by Saimadhav Heblikar. 255 256 .. 257 258 .. bpo: 18592 259 .. date: 9347 260 .. nonce: sMG-SZ 261 .. section: IDLE 262 263 Add unittest for SearchDialogBase. Patch by Phil Webster. 264 265 .. 266 267 .. bpo: 21694 268 .. date: 9346 269 .. nonce: 1oLmRo 270 .. section: IDLE 271 272 Add unittest for ParenMatch. Patch by Saimadhav Heblikar. 273 274 .. 275 276 .. bpo: 21686 277 .. date: 9345 278 .. nonce: TAkFB0 279 .. section: IDLE 280 281 add unittest for HyperParser. Original patch by Saimadhav Heblikar. 282 283 .. 284 285 .. bpo: 12387 286 .. date: 9344 287 .. nonce: XO7Ozk 288 .. section: IDLE 289 290 Add missing upper(lower)case versions of default Windows key bindings for 291 Idle so Caps Lock does not disable them. Patch by Roger Serwy. 292 293 .. 294 295 .. bpo: 21695 296 .. date: 9343 297 .. nonce: g-t0Tm 298 .. section: IDLE 299 300 Closing a Find-in-files output window while the search is still in progress 301 no longer closes Idle. 302 303 .. 304 305 .. bpo: 18910 306 .. date: 9342 307 .. nonce: ke8lMK 308 .. section: IDLE 309 310 Add unittest for textView. Patch by Phil Webster. 311 312 .. 313 314 .. bpo: 18292 315 .. date: 9341 316 .. nonce: ks_3wm 317 .. section: IDLE 318 319 Add unittest for AutoExpand. Patch by Saihadhav Heblikar. 320 321 .. 322 323 .. bpo: 18409 324 .. date: 9340 325 .. nonce: 7fe-aK 326 .. section: IDLE 327 328 Add unittest for AutoComplete. Patch by Phil Webster. 329 330 .. 331 332 .. bpo: 20155 333 .. date: 9339 334 .. nonce: nphzS3 335 .. section: Tests 336 337 Changed HTTP method names in failing tests in test_httpservers so that 338 packet filtering software (specifically Windows Base Filtering Engine) does 339 not interfere with the transaction semantics expected by the tests. 340 341 .. 342 343 .. bpo: 19493 344 .. date: 9338 345 .. nonce: SwbzLQ 346 .. section: Tests 347 348 Refactored the ctypes test package to skip tests explicitly rather than 349 silently. 350 351 .. 352 353 .. bpo: 18492 354 .. date: 9337 355 .. nonce: ylPRU7 356 .. section: Tests 357 358 All resources are now allowed when tests are not run by regrtest.py. 359 360 .. 361 362 .. bpo: 21605 363 .. date: 9336 364 .. nonce: qsLV8d 365 .. section: Tests 366 367 Added tests for Tkinter images. 368 369 .. 370 371 .. bpo: 21493 372 .. date: 9335 373 .. nonce: NqhRsy 374 .. section: Tests 375 376 Added test for ntpath.expanduser(). Original patch by Claudiu Popa. 377 378 .. 379 380 .. bpo: 19925 381 .. date: 9334 382 .. nonce: dhMx08 383 .. section: Tests 384 385 Added tests for the spwd module. Original patch by Vajrasky Kok. 386 387 .. 388 389 .. bpo: 13355 390 .. date: 9333 391 .. nonce: gCByXK 392 .. section: Tests 393 394 random.triangular() no longer fails with a ZeroDivisionError when low equals 395 high. 396 397 .. 398 399 .. bpo: 21522 400 .. date: 9332 401 .. nonce: b-VwFW 402 .. section: Tests 403 404 Added Tkinter tests for Listbox.itemconfigure(), 405 PanedWindow.paneconfigure(), and Menu.entryconfigure(). 406 407 .. 408 409 .. bpo: 20635 410 .. date: 9331 411 .. nonce: mzWmoS 412 .. section: Tests 413 414 Added tests for Tk geometry managers. 415 416 .. 417 418 .. bpo: 21811 419 .. date: 9330 420 .. nonce: 3_Xyr- 421 .. section: Build 422 423 Anticipated fixes to support OS X versions > 10.9. 424 425 .. 426 427 .. bpo: 21671 428 .. date: 9329 429 .. nonce: sm-hhO 430 .. section: Windows 431 432 The bundled version of OpenSSL has been updated to 1.0.1h. (See also: 433 CVE-2014-0224) 434