-
python2.7 (2.7.9-2ubuntu3) vivid; urgency=medium
* Update to 20150401, taken from the 2.7 release branch.
- Issue #23629: Fix the default __sizeof__ implementation for
variable-sized objects.
- Issue #21526: Tkinter now supports new boolean type in Tcl 8.5.
- Issue #23838: linecache now clears the cache and returns an empty
result on MemoryError.
- Issue #23742: ntpath.expandvars() no longer loses unbalanced single
quotes.
- Issue #21802: The reader in BufferedRWPair now is closed even when
closing writer failed in BufferedRWPair.close().
- Issue #23671: string.Template now allows to specify the "self" parameter
as keyword argument. string.Formatter now allows to specify the "self"
and the "format_string" parameters as keyword arguments.
- Issue #21560: An attempt to write a data of wrong type no longer cause
GzipFile corruption.
- Issue #23647: Increase imaplib's MAXLINE to accommodate modern mailbox
sizes.
- Issue #23539: If body is None, http.client.HTTPConnection.request now
sets Content-Length to 0 for PUT, POST, and PATCH headers to avoid
411 errors from some web servers.
- Issue #23136: _strptime now uniformly handles all days in week 0,
including Dec 30 of previous year.
- Issue #23138: Fixed parsing cookies with absent keys or values in
cookiejar.
- Issue #23051: multiprocessing.Pool methods imap() and imap_unordered()
now handle exceptions raised by an iterator.
- Issue #22928: Disabled HTTP header injections in httplib.
- Issue #23615: Module tarfile now can be reloaded with imp.reload().
- Issue #23799: Added test.test_support.start_threads() for running and
cleaning up multiple threads.
- Issue #22390: test.regrtest now emits a warning if temporary files or
directories are left after running a test.
- Issue #23583: Added tests for standard IO streams in IDLE.
- Issue #23583: Fixed writing unicode to standard output stream in IDLE.
* Re-apply the fix for issue #22079. This is now a warning instead of an
error. LP: #1426294.
* Fix issue #23842, SystemError in os.minor, os.major. LP: #1435242.
-- Matthias Klose <email address hidden> Thu, 02 Apr 2015 16:13:26 +0200
-
python2.7 (2.7.9-2ubuntu2) vivid; urgency=medium
* When using GCC versions older than 4.9 for extension builds, automagically
mangle -fstack-protector-strong to -fstack-protector.
-- Matthias Klose <email address hidden> Wed, 25 Mar 2015 14:15:17 +0100
-
python2.7 (2.7.9-2ubuntu1) vivid; urgency=medium
* Update to 20150309, taken from the 2.7 release branch.
- Issue #22853: Fixed a deadlock when use multiprocessing.Queue at import
time.
- Issue #23476: In the ssl module, enable OpenSSL's
X509_V_FLAG_TRUSTED_FIRST flag on certificate stores when it is available.
- Issue #23576: Avoid stalling in SSL reads when EOF has been reached
in the SSL layer but the underlying connection hasn't been closed.
- Issue #23504: Added an __all__ to the types module.
- Issue #23367: Fix possible overflows in the unicodedata module.
* debian/tests: Use init system agnostic "service" command instead of
upstart specific "stop". Also drop unnecessary "status" call right after
stopping apport.
python2.7 (2.7.9-2) unstable; urgency=medium
* python2.7-minimal: Make Pre-Depends mangling more robust. Closes: #779294.
* python2.7-doc: Depend on libjs-underscore. LP: #1424538.
* Remove LTO sections from the static libraries. Closes: #698395.
-- Matthias Klose <email address hidden> Mon, 09 Mar 2015 23:53:51 +0100
-
python2.7 (2.7.9-1ubuntu2) vivid; urgency=medium
* Revert change from previous upload
- Issue #22079: PyType_Ready() now checks that statically allocated type has
no dynamically allocated bases.
As it causes 'gio' from pygobject-2 to fail to initialise, which breaks
several consuming applications. (LP: #1426294)
-- Iain Lane <email address hidden> Fri, 27 Feb 2015 17:53:39 +0000
-
python2.7 (2.7.9-1ubuntu1) vivid; urgency=medium
* Update to 20150226, taken from the 2.7 release branch.
- Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV.
- Issue #23048: Fix jumping out of an infinite while loop in the pdb.
- Issue #23458: On POSIX, the file descriptor kept open by os.urandom() is
now set to non inheritable.
- Issue #22113: struct.pack_into() now supports new buffer protocol (in
particular accepts writable memoryview).
- Issues #814253, #9179: Warnings now are raised when group references and
conditional group references are used in lookbehind assertions in regular
expressions.
- Issue #23215: Multibyte codecs with custom error handlers that ignores
errors consumed too much memory and raised SystemError or MemoryError.
- Issue #5700: io.FileIO() called flush() after closing the file.
flush() was not called in close() if closefd=False.
- Issue #21548: Fix pydoc.synopsis() and pydoc.apropos() on modules with
empty docstrings.
- Issue #22885: Fixed arbitrary code execution vulnerability in the dumbdbm
module.
- Issue #23481: Remove RC4 from the SSL module's default cipher list.
- Issue #21849: Fixed xmlrpclib serialization of non-ASCII unicode strings
in the multiprocessing module.
- Issue #21840: Fixed expanding unicode variables of form $var in
posixpath.expandvars(). Fixed all os.path implementations on
unicode-disabled builds.
- Issue #23363: Fix possible overflow in itertools.permutations.
- Issue #23364: Fix possible overflow in itertools.product.
- Issue #23365: Fixed possible integer overflow in
itertools.combinations_with_replacement.
- Issue #23366: Fixed possible integer overflow in itertools.combinations.
- Issue #23191: fnmatch functions that use caching are now threadsafe.
- Issue #18518: timeit now rejects statements which can't be compiled
outside a function or a loop (e.g. "return" or "break").
- Issue #19996: Make :mod:`httplib` ignore headers with no name rather than
assuming the body has started.
- Issue #20188: Support Application-Layer Protocol Negotiation (ALPN) in the
ssl module.
- Issue #23248: Update ssl error codes from latest OpenSSL git master.
- Issue #23098: 64-bit dev_t is now supported in the os module.
- Issue #23063: In the disutils' check command, fix parsing of reST with
code or code-block directives.
- Issue #21356: Make ssl.RAND_egd() optional to support LibreSSL. The
availability of the function is checked during the compilation.
- Backport the context argument to ftplib.FTP_TLS.
- Issue #23111: Maximize compatibility in protocol versions of
ftplib.FTP_TLS.
- Issue #23112: Fix SimpleHTTPServer to correctly carry the query string
and fragment when it redirects to add a trailing slash.
- Issue #22585: On OpenBSD 5.6 and newer, os.urandom() now calls
getentropy(), instead of reading /dev/urandom, to get pseudo-random bytes.
- Issue #23093: In the io, module allow more operations to work on detached
streams.
- Issue #23071: Added missing names to codecs.__all__.
- Issue #23016: A warning no longer produces an AttributeError when
sys.stderr is None.
- Issue #21032. Fixed socket leak if HTTPConnection.getresponse() fails.
Original patch by Martin Panter.
- Issue #22609: Constructors and update methods of mapping classes in the
collections module now accept the self keyword argument.
- Issue #23006: Improve the documentation and indexing of dict.__missing__.
Add an entry in the language datamodel special methods section.
Revise and index its discussion in the stdtypes mapping/dict section.
Backport the code example from 3.4.
- Issue #21514: The documentation of the json module now refers to new
JSON RFC 7159 instead of obsoleted RFC 4627.
- Issue #6639: Module-level turtle functions no longer raise TclError after
closing the window.
- Issue #22314: pydoc now works when the LINES environment variable is set.
- Issue #18905: "pydoc -p 0" now outputs actually used port.
- Issue #23345: Prevent test_ssl failures with large OpenSSL patch level
values (like 0.9.8zc).
- Issue #23392: Added tests for marshal C API that works with FILE*.
- Issue #18982: Add tests for CLI of the calendar module.
- Issue #19949: The test_xpickle test now tests compatibility with installed
Python 2.7 and reports skipped tests.
- Issue #11578: Backported test for the timeit module.
- Issue #22943: bsddb tests are locale independend now.
- Issue #20577: Configuration of the max line length for the FormatParagraph
extension has been moved from the General tab of the Idle preferences
dialog to the FormatParagraph tab of the Config Extensions dialog.
- Issue #16893: Update Idle doc chapter to match current Idle and add new
information.
- Issue #23180: Rename IDLE "Windows" menu item to "Window".
- Issue #15506: Use standard PKG_PROG_PKG_CONFIG autoconf macro in the
configure script.
- Issue #22079: PyType_Ready() now checks that statically allocated type has
no dynamically allocated bases.
* Remove LTO sections from the static libraries. Closes: #698395.
-- Matthias Klose <email address hidden> Thu, 26 Feb 2015 13:59:24 +0100
-
python2.7 (2.7.9-1) unstable; urgency=medium
* Python 2.7.9 release.
-- Matthias Klose <email address hidden> Thu, 11 Dec 2014 00:38:09 +0100
-
python2.7 (2.7.9~rc1-2) unstable; urgency=medium
* Update to 20141209, taken from the 2.7 release repository.
- Issue #22959: Remove the *check_hostname* parameter of
httplib.HTTPSConnection. The *context* parameter should be used instead.
- Issue #16043: Add a default limit for the amount of data
xmlrpclib.gzip_decode will return. This resolves CVE-2013-1753.
Closes: #742929.
- Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by
limiting the call to readline(). Closes: #742929.
- Issue #16041: In poplib, limit maximum line length read from the server
to prevent CVE-2013-1752. Closes: #742929.
- Issue #22960: Add a context argument to xmlrpclib.ServerProxy.
- Issue #22935: Allow the ssl module to be compiled if openssl
doesn't support SSL 3.
* Add locales to autopkg test dependencies as in 3.4.
* Remove Demo/scripts/newslist.* from the examples package, not
distributable, will get removed in 2.7.9~rc2 sources. See issue #12987.
* Let ensurepip always use a temporary directory for installations.
-- Matthias Klose <email address hidden> Tue, 09 Dec 2014 15:47:40 +0100
-
python2.7 (2.7.9~rc1-1) unstable; urgency=medium
* Python 2.7.9 release candidate 1.
- Testsuite updates.
- Issue #16056: Rename test methods to avoid conflict.
- Issue #20351: Add examples for csv.DictReader and csv.DictWriter.
- PEP 476: verify certificates by default (#22417).
- Give urllib.urlopen a context parameter (closes #22927).
- Allow hostname to be passed to SSLContext even if OpenSSL doesn't
support SNI (closes #22921).
- Allow passing cert/ssl information to urllib2.urlopen and
httplib.HTTPSConnection (backport of issues #9003 and #22366).
* Let libpython2.7-stdlib break python-urllib3 (<< 1.9.1-3). Closes: #770157.
* Ignore the test_threading_local test failure in the Debian CI environment.
Succeeds even there when repeated.
* Don't pass default compiler search directories in the pkgconfig file.
Closes: #770935.
-- Matthias Klose <email address hidden> Wed, 26 Nov 2014 21:01:48 +0100
-
python2.7 (2.7.8-12) unstable; urgency=medium
* Update to 20141118, taken from the 2.7 branch.
- Issue #12728: Different Unicode characters having the same uppercase
but different lowercase are now matched in case-insensitive regular
expressions.
- Issue #22821: Fixed fcntl() with integer argument on 64-bit big-endian
platforms.
- Issues #814253, #9179: Group references and conditional group references
now work in lookbehind assertions in regular expressions.
- Issue #22769: Fixed ttk.Treeview.tag_has() when called without arguments.
- Issue #22787: Allow the keyfile argument of SSLContext.load_cert_chain
to be None.
- Issue #22775: Fixed unpickling of Cookie.SimpleCookie with protocol 2.
- Issue #22776: Brought excluded code into the scope of a try block in
SysLogHandler.emit().
- Issue #17381: Fixed ranges handling in case-insensitive regular
expressions.
- Issue #19329: Optimized compiling charsets in regular expressions.
- Issue #22410: Module level functions in the re module now cache compiled
locale-dependent regular expressions taking into account the locale.
- Issue #8876: distutils now falls back to copying files when hard linking
doesn't work. This allows use with special filesystems such as
VirtualBox shared folders.
- Issue #22193: Fixed integer overflow error in sys.getsizeof().
* Backport the ensurepip patch from 3.4.
* Disable ensurepip in Debian, at least for the upcoming release.
* Fix maintainer scripts for byte-code removal. Closes: #769078.
* Allow building and testing without SSLv3 support (Kurt Roeckx).
Closes: #768611.
* Let distutils.sysconfig.get_python_inc() honor the "prefix" argument.
Closes: #769720.
-- Matthias Klose <email address hidden> Tue, 18 Nov 2014 11:37:13 +0100
-
python2.7 (2.7.8-10ubuntu1) utopic; urgency=medium
* Pass -ffat-lto-objects for LTO enabled builds with GCC 4.9.
-- Matthias Klose <email address hidden> Fri, 17 Oct 2014 16:47:06 +0200
