You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
231 lines
4.5 KiB
231 lines
4.5 KiB
.. bpo: 41304
|
|
.. date: 2020-07-15-20-15-08
|
|
.. nonce: vNEeYA
|
|
.. release date: 2020-07-20
|
|
.. section: Security
|
|
|
|
Fixes `python3x._pth` being ignored on Windows, caused by the fix for
|
|
:issue:`29778` (CVE-2020-15801).
|
|
|
|
..
|
|
|
|
.. bpo: 41162
|
|
.. date: 2020-07-03-20-41-29
|
|
.. nonce: tb8pVj
|
|
.. section: Security
|
|
|
|
Audit hooks are now cleared later during finalization to avoid missing
|
|
events.
|
|
|
|
..
|
|
|
|
.. bpo: 29778
|
|
.. date: 2020-07-03-17-21-37
|
|
.. nonce: cR_fGS
|
|
.. section: Security
|
|
|
|
Ensure :file:`python3.dll` is loaded from correct locations when Python is
|
|
embedded (CVE-2020-15523).
|
|
|
|
..
|
|
|
|
.. bpo: 39603
|
|
.. date: 2020-02-12-14-17-39
|
|
.. nonce: Gt3RSg
|
|
.. section: Security
|
|
|
|
Prevent http header injection by rejecting control characters in
|
|
http.client.putrequest(...).
|
|
|
|
..
|
|
|
|
.. bpo: 41295
|
|
.. date: 2020-07-18-08-15-32
|
|
.. nonce: pu8Ezo
|
|
.. section: Core and Builtins
|
|
|
|
Resolve a regression in CPython 3.8.4 where defining "__setattr__" in a
|
|
multi-inheritance setup and calling up the hierarchy chain could fail if
|
|
builtins/extension types were involved in the base types.
|
|
|
|
..
|
|
|
|
.. bpo: 41247
|
|
.. date: 2020-07-08-22-03-54
|
|
.. nonce: PndYIk
|
|
.. section: Core and Builtins
|
|
|
|
Always cache the running loop holder when running
|
|
``asyncio.set_running_loop``.
|
|
|
|
..
|
|
|
|
.. bpo: 41252
|
|
.. date: 2020-07-08-21-55-23
|
|
.. nonce: nBWL-Y
|
|
.. section: Core and Builtins
|
|
|
|
Fix incorrect refcounting in _ssl.c's ``_servername_callback()``.
|
|
|
|
..
|
|
|
|
.. bpo: 41215
|
|
.. date: 2020-07-06-18-36-33
|
|
.. nonce: vFGFIz
|
|
.. section: Core and Builtins
|
|
|
|
Use non-NULL default values in the PEG parser keyword list to overcome a bug
|
|
that was preventing Python from being properly compiled when using the XLC
|
|
compiler. Patch by Pablo Galindo.
|
|
|
|
..
|
|
|
|
.. bpo: 41218
|
|
.. date: 2020-07-06-13-35-17
|
|
.. nonce: oKnSr2
|
|
.. section: Core and Builtins
|
|
|
|
Python 3.8.3 had a regression where compiling with
|
|
ast.PyCF_ALLOW_TOP_LEVEL_AWAIT would aggressively mark list comprehension
|
|
with CO_COROUTINE. Now only list comprehension making use of async/await
|
|
will tagged as so.
|
|
|
|
..
|
|
|
|
.. bpo: 41175
|
|
.. date: 2020-06-30-20-17-31
|
|
.. nonce: acJoXB
|
|
.. section: Core and Builtins
|
|
|
|
Guard against a NULL pointer dereference within bytearrayobject triggered by
|
|
the ``bytearray() + bytearray()`` operation.
|
|
|
|
..
|
|
|
|
.. bpo: 39960
|
|
.. date: 2020-06-23-18-32-41
|
|
.. nonce: Kez3fP
|
|
.. section: Core and Builtins
|
|
|
|
The "hackcheck" that prevents sneaking around a type's __setattr__() by
|
|
calling the superclass method was rewritten to allow C implemented heap
|
|
types.
|
|
|
|
..
|
|
|
|
.. bpo: 41288
|
|
.. date: 2020-07-13-15-06-35
|
|
.. nonce: 8mn5P-
|
|
.. section: Library
|
|
|
|
Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now
|
|
UnpicklingError instead of crashing.
|
|
|
|
..
|
|
|
|
.. bpo: 39017
|
|
.. date: 2020-07-12-22-16-58
|
|
.. nonce: x3Cg-9
|
|
.. section: Library
|
|
|
|
Avoid infinite loop when reading specially crafted TAR files using the
|
|
tarfile module (CVE-2019-20907).
|
|
|
|
..
|
|
|
|
.. bpo: 41235
|
|
.. date: 2020-07-07-21-56-26
|
|
.. nonce: H2csMU
|
|
.. section: Library
|
|
|
|
Fix the error handling in :meth:`ssl.SSLContext.load_dh_params`.
|
|
|
|
..
|
|
|
|
.. bpo: 41207
|
|
.. date: 2020-07-06-16-58-53
|
|
.. nonce: Emw7Nk
|
|
.. section: Library
|
|
|
|
In distutils.spawn, restore expectation that DistutilsExecError is raised
|
|
when the command is not found.
|
|
|
|
..
|
|
|
|
.. bpo: 39168
|
|
.. date: 2020-07-04-21-56-46
|
|
.. nonce: DQWsXj
|
|
.. section: Library
|
|
|
|
Remove the ``__new__`` method of :class:`typing.Generic`.
|
|
|
|
..
|
|
|
|
.. bpo: 41194
|
|
.. date: 2020-07-03-13-15-08
|
|
.. nonce: djrKjs
|
|
.. section: Library
|
|
|
|
Fix a crash in the ``_ast`` module: it can no longer be loaded more than
|
|
once. It now uses a global state rather than a module state.
|
|
|
|
..
|
|
|
|
.. bpo: 39384
|
|
.. date: 2020-05-30-12-44-29
|
|
.. nonce: Iqxy3q
|
|
.. section: Library
|
|
|
|
Fixed email.contentmanager to allow set_content() to set a null string.
|
|
|
|
..
|
|
|
|
.. bpo: 37703
|
|
.. date: 2019-08-16-20-25-42
|
|
.. nonce: Qm_l_H
|
|
.. section: Documentation
|
|
|
|
Updated Documentation to comprehensively elaborate on the behaviour of
|
|
gather.cancel()
|
|
|
|
..
|
|
|
|
.. bpo: 40741
|
|
.. date: 2020-06-19-14-19-08
|
|
.. nonce: L7yTbm
|
|
.. section: macOS
|
|
|
|
Update macOS installer to use SQLite 3.32.3.
|
|
|
|
..
|
|
|
|
.. bpo: 41300
|
|
.. date: 2020-07-16-17-39-06
|
|
.. nonce: wRixNb
|
|
.. section: IDLE
|
|
|
|
Save files with non-ascii chars. Fix regression released in 3.9.0b4 and
|
|
3.8.4.
|
|
|
|
..
|
|
|
|
.. bpo: 37765
|
|
.. date: 2020-07-07-18-44-30
|
|
.. nonce: umc1o8
|
|
.. section: IDLE
|
|
|
|
Add keywords to module name completion list. Rewrite Completions section of
|
|
IDLE doc.
|
|
|
|
..
|
|
|
|
.. bpo: 40170
|
|
.. date: 2020-07-08-10-14-52
|
|
.. nonce: N6Qx1i
|
|
.. section: C API
|
|
|
|
Revert :c:func:`PyType_HasFeature` change: it reads again directly the
|
|
:c:member:`PyTypeObject.tp_flags` member when the limited C API is not used,
|
|
rather than always calling :c:func:`PyType_GetFlags` which hides
|
|
implementation details.
|