delta/cpython-git.git, branch v3.5.8rc2 github.com: python/cpython.git Version bump for 3.5.8rc2. 2019-10-12T11:10:33+00:00 Larry Hastings larry@hastings.org 2019-10-12T11:10:33+00:00 ac4f751049dbb6092bb2697c67d83bf14a46b72e 






Fix docs, blurb release, pydoc-topics for 3.5.8rc2.
2019-10-12T11:07:42+00:00

Larry Hastings
larry@hastings.org

2019-10-12T11:07:42+00:00

280a0f539a1db5bc548b031dca04af30b180f7c4












closes bpo-38174: Update vendored expat library to 2.2.8. (GH-16346) (#16434)
2019-10-09T05:34:26+00:00

Victor Stinner
vstinner@redhat.com

2019-10-09T05:34:26+00:00

c386c8b06c6e92786f083ef6aba27b37087fdd20

Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes.




Fixes CVE-2019-15903. See full changelog at https://github.com/libexpat/libexpat/blob/R_2_2_8/expat/Changes.






[3.5] bpo-38216, bpo-36274: Allow subclasses to separately override validation and encoding behavior (GH-16448) (#16475)
2019-10-08T17:36:44+00:00

Jason R. Coombs
jaraco@jaraco.com

2019-10-08T17:36:44+00:00

2784e78dc3445c6dd59e915d86c336374c1fa09a

* [3.5] bpo-38216, bpo-36274: Allow subclasses to separately override validation and encoding behavior (GH-16448)





* [3.5] bpo-38216, bpo-36274: Allow subclasses to separately override validation and encoding behavior (GH-16448)







[3.7] Doc: Bump sphinx. (GH-10676) (GH-10803) (#16522)
2019-10-08T17:12:21+00:00

Victor Stinner
vstinner@redhat.com

2019-10-08T17:12:21+00:00

edd9bc9cc99c919bdc87e5955ec8ad93c295fbe2

(cherry picked from commit 2db96ae7444880d66d4ef65abab8a5e6ff328711)

Co-authored-by: Julien Palard <julien@palard.fr>
(cherry picked from commit 23a98abd4256f931ed89b65ec6babd4f06dbff97)




(cherry picked from commit 2db96ae7444880d66d4ef65abab8a5e6ff328711)

Co-authored-by: Julien Palard <julien@palard.fr>
(cherry picked from commit 23a98abd4256f931ed89b65ec6babd4f06dbff97)






Sphinx 1.8 is now preferred for building 3.5 docs.
2019-09-09T13:39:36+00:00

Larry Hastings
larry@hastings.org

2019-09-09T13:39:36+00:00

4452cdcb79fdade13c00eabe63304efa4da1c3ad












Version bump for 3.5.8rc1.
2019-09-09T11:18:48+00:00

Larry Hastings
larry@hastings.org

2019-09-09T11:18:48+00:00

a7b099255ed62163eb7687db996bee144b42b10c












Blurb release and pydoc-topics for 3.5.8rc1.
2019-09-09T11:16:26+00:00

Larry Hastings
larry@hastings.org

2019-09-09T11:16:26+00:00

ee5b1a2199b6631a1d7187f121de8813047fdd37












[3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) (#15446)
2019-09-07T07:08:53+00:00

Abhilash Raj
maxking@users.noreply.github.com

2019-09-07T07:08:53+00:00

c28e4a5160d3283b12514c7c28ed6e0a2a52271a

* [3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794)

Some crafted email header would cause the get_parameter method to run in an
infinite loop causing a DoS attack surface when parsing those headers. This
patch fixes that by making sure the DQUOTE character is handled to prevent
going into an infinite loop.
(cherry picked from commit a4a994bd3e619cbaff97610a1cee8ffa87c672f5)

Co-authored-by: Abhilash Raj <maxking@users.noreply.github.com>
Co-Authored-By: Ashwin Ramaswami <aramaswamis@gmail.com>





* [3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794)

Some crafted email header would cause the get_parameter method to run in an
infinite loop causing a DoS attack surface when parsing those headers. This
patch fixes that by making sure the DQUOTE character is handled to prevent
going into an infinite loop.
(cherry picked from commit a4a994bd3e619cbaff97610a1cee8ffa87c672f5)

Co-authored-by: Abhilash Raj <maxking@users.noreply.github.com>
Co-Authored-By: Ashwin Ramaswami <aramaswamis@gmail.com>







bpo-36742: Corrects fix to handle decomposition in usernames (GH-13812) (GH-13814) (#14772)
2019-09-07T06:33:24+00:00

Victor Stinner
vstinner@redhat.com

2019-09-07T06:33:24+00:00

095373c32d16df575ba5fcb5f44bf44119b26193

(cherry picked from commit 8d0ef0b5edeae52960c7ed05ae8a12388324f87e)

Co-authored-by: Steve Dower <steve.dower@python.org>
(cherry picked from commit fd1771dbdd28709716bd531580c40ae5ed814468)




(cherry picked from commit 8d0ef0b5edeae52960c7ed05ae8a12388324f87e)

Co-authored-by: Steve Dower <steve.dower@python.org>
(cherry picked from commit fd1771dbdd28709716bd531580c40ae5ed814468)