15070 Commits

Author SHA1 Message Date
Barry Warsaw
8493c0cd66 version bump 2013-10-29 10:14:05 -04:00
Barry Warsaw
c26efbbf66 updating topics 2013-10-29 10:10:41 -04:00
Barry Warsaw
aa914509d3 Typo caught by : Arfrever Frehtes Taifersar Arahesis. 2013-10-01 11:38:38 -04:00
Barry Warsaw
be1950d059 Bump to 2.6.9rc1 2013-09-30 20:34:29 -04:00
Barry Warsaw
290df2ced8 Regenerate pydoc_topics.py 2013-09-30 20:31:56 -04:00
Barry Warsaw
42faa55124 - Issue #16040: CVE-2013-1752: nntplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much memory.  Patch by Jyrki
  Pulliainen.
2013-09-30 18:35:15 -04:00
Barry Warsaw
c545a5ebd6 - Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much member.  Patch by Jyrki
  Pulliainen.
2013-09-30 15:56:29 -04:00
Barry Warsaw
6c1bb7b4e3 - Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more
than 100 headers are read.  Adapted from patch by Jyrki Pulliainen.
2013-09-29 13:59:06 -04:00
Barry Warsaw
d6fddf3d15 - Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by
limiting the call to readline().  Original patch by Michał
  Jastrzębski and Giampaolo Rodola.

with test fixes by Serhiy Storchaka.
2013-09-25 09:36:58 -04:00
Barry Warsaw
4e95d60191 - Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to
limit line length.  Patch by Emil Lind.
2013-09-22 16:07:09 -04:00
R David Murray
9e27eda325 #14984: only import pwd on POSIX. 2013-09-18 08:49:25 -04:00
R David Murray
137b572d55 Add versionchanged for #14984, remove extra blank from string. 2013-09-17 20:08:09 -04:00
R David Murray
4189b67a66 #14984: On POSIX, enforce permissions when reading default .netrc.
Initial patch by Bruno Piguet.

This is implemented as if a useful .netrc file could exist without passwords,
which is possible in the general case; but in fact our netrc implementation
does not support it.  Fixing that issue will be an enhancement.
2013-09-16 13:48:44 -04:00
Andrew Kuchling
503baf9ecd #16042: CVE-2013-1752: Limit amount of data read by limiting the call to readline().
The SSLFakeFile.readline() method needs to support limiting readline() as
well.  It's not a full emulation of readline()'s signature, but this class
is only used by smtplib's code, so it doesn't have to be.

Modified version of original patch by Christian Heimes.
2013-09-15 13:11:47 -04:00
Christian Heimes
bde2985f1d Python 2.6's ssl module has neither OPENSSL_VERSION_INFO nor _OPENSSL_API_VERSION 2013-09-03 14:47:00 +02:00
Christian Heimes
8f65ef8853 Issue #18709: Fix issue with IPv6 address in subjectAltName on Mac OS X Tiger 2013-08-25 14:12:41 +02:00
Barry Warsaw
82f8828317 - Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
  GENERAL_NAME_print() function to get the string represention of ASN.1
  strings for `rfc822Name` (email), `dNSName` (DNS) and
  `uniformResourceIdentifier` (URI).
2013-08-23 13:26:49 -04:00
Barry Warsaw
f880e5d5ea Fix UnboundLocalError regression due to previous incorrect fix for
issue 16248.
2013-08-20 20:35:20 -04:00
Barry Warsaw
f25d95732c - Issue #16248: Disable code execution from the user's home directory by
tkinter when the -E flag is passed to Python.  Patch by Zachary Ware.
2013-02-20 18:19:55 -05:00
Barry Warsaw
a12d0ccfbe Bump to 2.6.8 2012-04-10 10:59:35 -04:00
Barry Warsaw
75076b4971 update docs 2012-04-10 10:56:26 -04:00
Barry Warsaw
bd371a4cbb Bump to 2.6.8rc2 2012-03-17 18:19:15 -04:00
Barry Warsaw
2875b5b294 Update Docs and NEWS for 2.6.8rc2. 2012-03-17 18:16:58 -04:00
Barry Warsaw
1fbc16d050 Bump to version 2.6.8rc1. 2012-02-23 10:55:57 -05:00
Barry Warsaw
b383e806b6 Back port from 2.7:
http://hg.python.org/cpython/rev/48705250232c
    changeset:   75187:48705250232c
    branch:      2.7
    parent:      75184:9a1d902714ae
    user:        Antoine Pitrou <solipsis@pitrou.net>
    date:        Wed Feb 22 22:16:25 2012 +0100
2012-02-22 17:26:50 -05:00