+++++++++++

Python News

+++++++++++

What's New in Python 3.1.4?

===========================

*Release date: 2011-06-11*

Library

-------

- Issue #12009: Fixed regression in netrc file comment handling.

Extension Modules

-----------------

- Issue #12221: Replace pyexpat.__version__ with the Python version.

What's New in Python 3.1.4 release candidate 1?

===============================================

*Release date: 2011-05-29*

Core and Builtins

-----------------

- Issue #9670: Increase the default stack size for secondary threads on

Mac OS X and FreeBSD to reduce the chances of a crash instead of a

"maximum recursion depth" RuntimeError exception.

(patch by Ronald Oussoren)

- Correct lookup of __dir__ on objects. Among other things, this causes errors

besides AttributeError found on lookup to be propagated.

- Issue #12060: Use sig_atomic_t type and volatile keyword in the signal

module. Patch written by Charles-François Natali.

- Issue #1195: Fix input() if it is interrupted by CTRL+d and then CTRL+c,

clear the end-of-file indicator after CTRL+d.

- Issue #9756: When calling a method descriptor or a slot wrapper descriptor,

the check of the object type doesn't read the __class__ attribute anymore.

Fix a crash if a class override its __class__ attribute (e.g. a proxy of the

str type). Patch written by Andreas Stührk.

- Issue #6780: fix starts/endswith error message to mention that tuples are

accepted too.

- Issue #5057: fix a bug in the peepholer that led to non-portable pyc files

between narrow and wide builds while optimizing BINARY_SUBSCR on non-BMP

chars (e.g. "\U00012345"[0]).

- Issue #11650: PyOS_StdioReadline() retries fgets() if it was interrupted

(EINTR), for example if the program is stopped with CTRL+z on Mac OS X. Patch

written by Charles-Francois Natali.

- Issue #8651: PyArg_Parse*() functions raise an OverflowError if the file

doesn't have PY_SSIZE_T_CLEAN define and the size doesn't fit in an int

(length bigger than 2^31-1 bytes).

- Issue #11450: Don't truncate hg version info in Py_GetBuildInfo() when

there are many tags (e.g. when using mq). Patch by Nadeem Vawda.

- Issue #10451: memoryview objects could allow to mutate a readable buffer.

Initial patch by Ross Lagerwall.

- Issue #10892: Don't segfault when trying to delete __abstractmethods__ from a

class.

- Issue #8020: Avoid a crash where the small objects allocator would read

non-Python managed memory while it is being modified by another thread.

Patch by Matt Bandy.

- Issue #8278: On Windows and with a NTFS filesystem, os.stat() and os.utime()

can now handle dates after 2038.

- issue #11828: startswith and endswith don't accept None as slice index.

Patch by Torsten Becker.

- Issue #4236: PyModule_Create2 now checks the import machinery directly

rather than the Py_IsInitialized flag, avoiding a Fatal Python

error in certain circumstances when an import is done in __del__.

- Issue #10596: Fix float.__mod__ to have the same behaviour as

float.__divmod__ with respect to signed zeros. -4.0 % 4.0 should be

0.0, not -0.0.

- Issue #5587: add a repr to dict_proxy objects. Patch by David Stanek and

Daniel Urban.

- Issue #11506: Trying to assign to a bytes literal should result in a

SyntaxError.

Library

-------

- Issue #985064: Make plistlib more resilient to faulty input plists.

Patch by Mher Movsisyan.

- Issue #12175: RawIOBase.readall() now returns None if read() returns None.

- Issue #12175: FileIO.readall() now raises a ValueError instead of an IOError

if the file is closed.

- Issue #12100: Don't reset incremental encoders of CJK codecs at each call to

their encode() method anymore, but continue to call the reset() method if the

final argument is True.

- Issue #5715: In socketserver, close the server socket in the child process.

- Issue #12124: zipimport doesn't keep a reference to zlib.decompress() anymore

to be able to unload the module.

- Issue #10801: In zipfile, support different encodings for the header and

the filenames.

- Issue #10154, #10090: change the normalization of UTF-8 to "UTF-8" instead

of "UTF8" in the locale module as the latter is not supported MacOSX and OpenBSD.

- Issue #10756: atexit normalizes the exception before displaying it. Patch by

Andreas Stührk.

- Issue #8650: Make zlib module 64-bit clean. compress(), decompress() and

their incremental counterparts now raise OverflowError if given an input

larger than 4GB, instead of silently truncating the input and returning

an incorrect result.

- Issue #12050: zlib.decompressobj().decompress() now clears the unconsumed_tail

attribute when called without a max_length argument.

- Issue #12062: Fix a flushing bug when doing a certain type of I/O sequence

on a file opened in read+write mode (namely: reading, seeking a bit forward,

writing, then seeking before the previous write but still within buffered

data, and writing again).

- Issue #1028: Tk returns invalid Unicode null in %A: UnicodeDecodeError.

With Tk < 8.5 _tkinter.c:PythonCmd() raised UnicodeDecodeError, caused

IDLE to exit. Converted to valid Unicode null in PythonCmd().

- Issue #10419: Fix build_scripts command of distutils to handle correctly

non-ASCII scripts. Open and write the script in binary mode, but ensure that

the shebang is decodable from UTF-8 and from the encoding of the script.

- Issue #12012: ssl.PROTOCOL_SSLv2 becomes optional.

- Issue #11164: Stop trying to use _xmlplus in the xml module.

- Issue #11927: SMTP_SSL now uses port 465 by default as documented. Patch

by Kasun Herath.

- Issue #12002: ftplib's abort() method raises TypeError.

- Issue #11999: fixed sporadic sync failure mailbox.Maildir due to its trying to

detect mtime changes by comparing to the system clock instead of to the

previous value of the mtime.

- Issue #10684: shutil.move used to delete a folder on case insensitive

filesystems when the source and destination name where the same except

for the case.

- Issue #11277: mmap.mmap() calls fcntl(fd, F_FULLFSYNC) on Mac OS X to get

around a mmap bug with sparse files. Patch written by Steffen Daode Nurpmeso.

- Issue #11763: don't use difflib in TestCase.assertMultiLineEqual if the

strings are too long.

- Issue #11236: getpass.getpass responds to ctrl-c or ctrl-z on terminal.

- Issue #11768: The signal handler of the signal module only calls

Py_AddPendingCall() for the first signal to fix a deadlock on reentrant or

parallel calls. PyErr_SetInterrupt() writes also into the wake up file.

- Issue #11467: Fix urlparse behavior when handling urls which contains scheme

specific part only digits. Patch by Santoso Wijaya.

- Issue #11875: collections.OrderedDict's __reduce__ was temporarily

mutating the object instead of just working on a copy.

- collections.Counter().copy() now works correctly for subclasses.

- Issue #11474: Fix the bug with url2pathname() handling of '/C|/' on Windows.

Patch by Santoso Wijaya.

- Issue #9233: Fix json to work properly even when _json is not available.

- Issue #11703: urllib2.geturl() does not return correct url when the original

url contains #fragment.

- Issue #10019: Fixed regression in json module where an indent of 0 stopped

adding newlines and acted instead like 'None'.

- Issue #5162: Treat services like frozen executables to allow child spawning

from multiprocessing.forking on Windows.

- Issue #10963: Ensure that subprocess.communicate() never raises EPIPE.

- Issue #11696: Fix ID generation in msilib.

- Issue #9696: Fix exception incorrectly raised by xdrlib.Packer.pack_int when

trying to pack a negative (in-range) integer.

- Issue #11675: multiprocessing.[Raw]Array objects created from an integer size

are now zeroed on creation. This matches the behaviour specified by the

documentation.

- Issue #7639: Fix short file name generation in bdist_msi.

- Issue #11659: Fix ResourceWarning in test_subprocess introduced by #11459.

Patch by Ben Hayden.

- Issue #11662: Make urllib and urllib2 ignore redirections if the

scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).

- Issue #5537: Fix time2isoz() and time2netscape() functions of

httplib.cookiejar for expiration year greater than 2038 on 32-bit systems.

- Issue #11459: A ``bufsize`` value of 0 in subprocess.Popen() really creates

unbuffered pipes, such that select() works properly on them.

- Issue #5421: Fix misleading error message when one of socket.sendto()'s

arguments has the wrong type. Patch by Nikita Vetoshkin.

- Issue #11401: fix handling of headers with no value; this fixes a regression

relative to Python2 and the result is now the same as it was in Python2.

- Issue #9298: base64 bodies weren't being folded to line lengths less than 78,

which was a regression relative to Python2. Unlike Python2, the last line

of the folded body now ends with a carriage return.

- Issue #11569: use absolute path to the sysctl command in multiprocessing to

ensure that it will be found regardless of the shell PATH. This ensures

that multiprocessing.cpu_count works on default installs of MacOSX.

- Issue #11501: disutils.archive_utils.make_zipfile no longer fails if zlib is

not installed. Instead, the zipfile.ZIP_STORED compression is used to create

the ZipFile. Patch by Natalia B. Bidart.

- Issue #11491: dbm.error is no longer raised when dbm.open is called with

the "n" as the flag argument and the file exists. The behavior matches

the documentation and general logic.

- Issue #11131: Fix sign of zero in decimal.Decimal plus and minus

operations when the rounding mode is ROUND_FLOOR.

- Issue #5622: Fix curses.wrapper to raise correct exception if curses

initialization fails.

- Issue #11391: Writing to a mmap object created with

``mmap.PROT_READ|mmap.PROT_EXEC`` would segfault instead of raising a

TypeError. Patch by Charles-François Natali.

- Issue #11265: asyncore now correctly handles EPIPE, EBADF and EAGAIN errors

on accept(), send() and recv().

- Issue #10276: Fix the results of zlib.crc32() and zlib.adler32() on buffers

larger than 4GB. Patch by Nadeem Vawda.

- Issue #4681: Allow mmap() to work on file sizes and offsets larger than

4GB, even on 32-bit builds. Initial patch by Ross Lagerwall, adapted for

32-bit Windows.

- email.header.Header was incorrectly encoding folding white space when

rfc2047-encoding header values with embedded newlines, leaving them

without folding whitespace. It now uses the continuation_ws, as it

does for continuation lines that it creates itself.

- Issue #10360: In WeakSet, do not raise TypeErrors when testing for

membership of non-weakrefable objects.

- Issue #10549: Fix pydoc traceback when text-documenting certain classes.

- Issue #11110: Fix _sqlite to not deref a NULL when module creation fails.

- Issue #11089: Fix performance issue limiting the use of ConfigParser()

with large config files.

- Issue #8275: Fix passing of callback arguments with ctypes under Win64.

Patch by Stan Mihai.

- Issue #11053: Fix IDLE "Syntax Error" windows to behave as in 2.x,

preventing a confusing hung appearance on OS X with the windows

obscured.

- Issue #11052: Correct IDLE menu accelerators on Mac OS X for Save

commands.

- Issue #11020: Command-line pyclbr was broken because of missing 2-to-3

conversion.

- Issue #10974: IDLE no longer crashes if its recent files list includes files

with non-ASCII characters in their path names.

- Issue #10987: Fix the recursion limit handling in the _pickle module.

- Issue #10949: Improved robustness of rotating file handlers.

- Issue #10955: Fix a potential crash when trying to mmap() a file past its

length. Initial patch by Ross Lagerwall.

- Issue #10898: Allow compiling the posix module when the C library defines

a symbol named FSTAT.

- Issue #10916: mmap should not segfault when a file is mapped using 0 as

length and a non-zero offset, and an attempt to read past the end of file

is made (IndexError is raised instead). Patch by Ross Lagerwall.

- Issue #10899: No function type annotations in the standard library.

Removed function type annotations from _pyio.py.

- Issue #10875: Update Regular Expression HOWTO; patch by 'SilentGhost'.

- Issue #10869: Fixed bug where ast.increment_lineno modified the root

node twice.

- Issue #5871: email.header.Header.encode now raises an error if any

continuation line in the formatted value has no leading white space

and looks like a header. Since Generator uses Header to format all

headers, this check is made for all headers in any serialized message

at serialization time. This provides protection against header

injection attacks.

- Issue #7858: Raise an error properly when os.utime() fails under Windows

on an existing file.

- Issue #3839: wsgiref should not override a Content-Length header set by

the application. Initial patch by Clovis Fabricio.

- Issue #10790: email.header.Header.append's charset logic now works correctly

for charsets whose output codec is different from its input codec.

- Issue #6643: Reinitialize locks held within the threading module after fork

to avoid a potential rare deadlock or crash on some platforms.

- Issue #10806, issue #9905: Fix subprocess pipes when some of the standard

file descriptors (0, 1, 2) are closed in the parent process. Initial

patch by Ross Lagerwall.

- Issue #10753 - Characters ';', '=' and ',' in the PATH_INFO environment

variable won't be quoted when the URI is constructed by the wsgiref.util's

request_uri method. According to RFC 3986, these characters can be a part of

params in PATH component of URI and need not be quoted.

- Issue #10738: Fix webbrowser.Opera.raise_opts

- Issue #9824: SimpleCookie now encodes , and ; in values to cater to how

browsers actually parse cookies.

- Issue #5258/#10642: if site.py encounters a .pth file that generates an error,

it now prints the filename, line number, and traceback to stderr and skips

the rest of that individual file, instead of stopping processing entirely.

- Issue #4871: The zipfile module now gives a more useful error message if

an attempt is made to use a string to specify the archive password.

- Issue #10750: The ``raw`` attribute of buffered IO objects is now read-only.

- Issue #6791: Limit header line length (to 65535 bytes) in http.client

and http.server, to avoid denial of services from the other party.

- Issue #10404: Use ctl-button-1 on OSX for the context menu in Idle.

- Issue #4188: Avoid creating dummy thread objects when logging operations

from the threading module (with the internal verbose flag activated).

- Issue #9721: Fix the behavior of urljoin when the relative url starts with a

';' character. Patch by Wes Chow.

- Issue #10714: Limit length of incoming request in http.server to 65536 bytes

for security reasons. Initial patch by Ross Lagerwall.

- Issue #9558: Fix distutils.command.build_ext with VS 8.0.

- Issue #10695: passing the port as a string value to telnetlib no longer

causes debug mode to fail.

- Issue #1078919: add_header now automatically RFC2231 encodes parameters

that contain non-ascii values.

- Issue #10107: Warn about unsaved files in IDLE on OSX.

- Issue #7904: Changes to urllib.parse.urlsplit to handle schemes as defined by

RFC3986. Anything before :// is considered a scheme and is followed by an

authority (or netloc) and by '/' led path, which is optional.

- Issue #10478: Reentrant calls inside buffered IO objects (for example by

way of a signal handler) now raise a RuntimeError instead of freezing the

current process.

- Issue #10464: netrc now correctly handles lines with embedded '#' characters.

- Issue #1731717: Fixed the problem where subprocess.wait() could cause an

OSError exception when The OS had been told to ignore SIGCLD in our process

or otherwise not wait for exiting child processes.

- Issue #11500: Fixed a bug in the os x proxy bypass code for fully qualified

IP addresses in the proxy exception list.

Extension Modules

-----------------

- Issue #12051: Fix segfault in json.dumps() while encoding highly-nested

objects using the C accelerations.

- Issue #12017: Fix segfault in json.loads() while decoding highly-nested

objects using the C accelerations.

- Issue #1838: Prevent segfault in ctypes, when _as_parameter_ on a class is set

to an instance of the class.

- Issue #678250: Make mmap flush a noop on ACCESS_READ and ACCESS_COPY.

Build

-----

- Issue #11411: Fix 'make DESTDIR=' with a relative destination.

- Issue #11184: Fix large-file support on AIX.

- Issue #941346: Fix broken shared library build on AIX.

- Issue #7716: Under Solaris, don't assume existence of /usr/xpg4/bin/grep in

the configure script but use $GREP instead. Patch by Fabian Groffen.

- Issue #10475: Don't hardcode compilers for LDSHARED/LDCXXSHARED on NetBSD

and DragonFly BSD. Patch by Nicolas Joly.

- Issue #10655: Fix the build on PowerPC on Linux with GCC when building with

timestamp profiling (--with-tsc): the preprocessor test for the PowerPC

support now looks for "__powerpc__" as well as "__ppc__": the latter seems to

only be present on OS X; the former is the correct one for Linux with GCC.

- Issue #1099: Fix the build on MacOSX when building a framework with pydebug

using GCC 4.0.

Tests

-----

- Issue #12205: Fix test_subprocess failure due to uninstalled test data.

- Issue #11614: import __hello__ prints "Hello World!". Patch written by

Andreas Stührk.

- Issue #5723: Improve json tests to be executed with and without accelerations.

- Issue #11910: Fix test_heapq to skip the C tests when _heapq is missing.

- Fix test_startfile to wait for child process to terminate before finishing.

- Issue #11719: Fix message about unexpected test_msilib skip on non-Windows

platforms. Patch by Nadeem Vawda.

- Issue #11490: test_subprocess:test_leaking_fds_on_error no longer gives a

false positive if the last directory in the path is inaccessible.

- Issue #10822: Fix test_posix:test_getgroups failure under Solaris. Patch

by Ross Lagerwall.

- Issue #6293: Have regrtest.py echo back sys.flags. This is done by default

in whole runs and enabled selectively using ``--header`` when running an

explicit list of tests. Original patch by Collin Winter.

- Issue #775964: test_grp now skips YP/NIS entries instead of failing when

encountering them.

- Issue #7110: regrtest now sends test failure reports and single-failure

tracebacks to stderr rather than stdout.

What's New in Python 3.1.3?

===========================

*Release date: 2010-11-27*

Core and Builtins

-----------------

- Issue #10391: Don't dereference invalid memory in error messages in the ast

module.

Library

-------

- Issue #2236: distutils' mkpath ignored the mode parameter.

- Fix typo in one sdist option (medata-check).

- Issue #10323: itertools.islice() now consumes the minimum number of

inputs before stopping. Formerly, the final state of the underlying

iterator was undefined.

- Issue #10565: The collections.Iterator ABC now checks for both

__iter__ and __next__.

- Issue #10561: In pdb, clear the breakpoints by the breakpoint number.

- Issue #10459: Update CJK character names to Unicode 5.1.

- Issue #10092: Properly reset locale in calendar.Locale*Calendar classes.

- Issue #6098: Don't claim DOM level 3 conformance in minidom.

- Issue #5762: Fix AttributeError raised by ``xml.dom.minidom`` when an empty

XML namespace attribute is encountered.

- Issue #1710703: Write structures for an empty ZIP archive when a ZipFile is

created in modes 'a' or 'w' and then closed without adding any files. Raise

BadZipfile (rather than IOError) when opening small non-ZIP files.

- Issue #4493: urllib.request adds '/' in front of path components which does not

start with '/. Common behavior exhibited by browsers and other clients.

- Issue #6378: idle.bat now runs with the appropriate Python version rather than

the system default. Patch by Sridhar Ratnakumar.

- Issue #10407: Fix two NameErrors in distutils.

- Issue #10198: fix duplicate header written to wave files when writeframes()

is called without data.

- Issue #10467: Fix BytesIO.readinto() after seeking into a position after the

end of the file.

- Issue #1682942: configparser supports alternative option/value delimiters.

Build

-----

- Don't run pgen twice when using make -j.

- Backport r83399 to allow test_distutils to pass on installed versions.

- Issue #1303434: Generate ZIP file containing all PDBs (already done for rc1).

- Stop packaging versioncheck tool (already done for rc1).

- Accept Oracle Berkeley DB 4.8, 5.0 and 5.1 as backend for the dbm extension.

Tests

-----

- Issue #9424: Replace deprecated assert* methods in the Python test suite.

Documentation

-------------

- Issue #10299: List the built-in functions in a table in functions.rst.

What's New in Python 3.1.3 release candidate 1?

===============================================

*Release date: 2010-11-13*

Core and Builtins

-----------------

- Issue #10221: dict.pop(k) now has a key error message that includes the

missing key (same message d[k] returns for missing keys).

- Issue #5437: A preallocated MemoryError instance should not hold traceback

data (including local variables caught in the stack trace) alive infinitely.

- Issue #10077: Fix logging of site module errors at startup.

- Issue #10186: Fix the SyntaxError caret when the offset is equal to the length

of the offending line.

- Issue #9713, #10114: Parser functions (eg. PyParser_ASTFromFile) expects

filenames encoded to the filesystem encoding with surrogateescape error

handler (to support undecodable bytes), instead of UTF-8 in strict mode.

- Issue #10006: type.__abstractmethods__ now raises an AttributeError. As a

result metaclasses can now be ABCs (see #9533).

- Issue #9997: Don't let the name "top" have special significance in scope

resolution.

- Issue #9930: Remove bogus subtype check that was causing (e.g.)

float.__rdiv__(2.0, 3) to return NotImplemented instead of the

expected 1.5.

- Issue #9804: ascii() now always represents unicode surrogate pairs as

a single ``\UXXXXXXXX``, regardless of whether the character is printable

or not. Also, the "backslashreplace" error handler now joins surrogate

pairs into a single character on UCS-2 builds.

- Issue #9797: pystate.c wrongly assumed that zero couldn't be a valid

thread-local storage key.

- Issue #9737: Fix a crash when trying to delete a slice or an item from

a memoryview object.

- Issue #7415: PyUnicode_FromEncodedObject() now uses the new buffer API

properly. Patch by Stefan Behnel.

- Restore GIL in nis_cat in case of error.

- Issue #9712: Fix tokenize on identifiers that start with non-ascii names.

- Issue #9688: __basicsize__ and __itemsize__ must be accessed as Py_ssize_t.

- Issue #5319: Print an error if flushing stdout fails at interpreter

shutdown.

- Issue #8814: function annotations (the ``__annotations__`` attribute)

are now included in the set of attributes copied by default by

functools.wraps and functools.update_wrapper. Patch by Terrence Cole.

- Issue #83755: Implicit set-to-frozenset conversion was not thread-safe.

- Issue #10068: Global objects which have reference cycles with their module's

dict are now cleared again. This causes issue #7140 to appear again.

- Issue #9416: Fix some issues with complex formatting where the

output with no type specifier failed to match the str output:

- format(complex(-0.0, 2.0), '-') omitted the real part from the output,

- format(complex(0.0, 2.0), '-') included a sign and parentheses.

- Issue #7616: Fix copying of overlapping memoryview slices with the Intel

compiler.

- Issue #8271: during the decoding of an invalid UTF-8 byte sequence, only the

start byte and the continuation byte(s) are now considered invalid, instead

of the number of bytes specified by the start byte.

E.g.: '\xf1\x80AB'.decode('utf-8', 'replace') now returns u'\ufffdAB' and

replaces with U+FFFD only the start byte ('\xf1') and the continuation byte

('\x80') even if '\xf1' is the start byte of a 4-bytes sequence.

Previous versions returned a single u'\ufffd'.

- Issue #6543: Write the traceback in the terminal encoding instead of utf-8.

Fix the encoding of the modules filename. Patch written by Amaury Forgeot

d'Arc.

- Issue #9058: Remove assertions about INT_MAX in UnicodeDecodeError.

- Issue #8941: decoding big endian UTF-32 data in UCS-2 builds could crash

the interpreter with characters outside the Basic Multilingual Plane

(higher than 0x10000).

- In the str.format(), raise a ValueError when indexes to arguments are too

large.

- Issue #8766: Initialize _warnings module before importing the first module.

Fix a crash if an empty directory called "encodings" exists in sys.path.

- PyObject_Dump() encodes unicode objects to utf8 with backslashreplace

(instead of strict) error handler to escape surrogates

- Issue #8124: PySys_WriteStdout() and PySys_WriteStderr() don't execute

indirectly Python signal handlers anymore because mywrite() ignores

exceptions (KeyboardInterrupt)

- Issue #8092: Fix PyUnicode_EncodeUTF8() to support error handler producing

unicode string (eg. backslashreplace)

- Issue #8014: Setting a T_UINT or T_PYSSIZET attribute of an object with

PyMemberDefs could produce an internal error; raise TypeError instead.

- Issue #8417: Raise an OverflowError when an integer larger than sys.maxsize is

passed to bytes or bytearray.

- Issue #8329: Don't return the same lists from select.select when no fds are

changed.

- Raise a TypeError when trying to delete a T_STRING_INPLACE struct member.

- Issue #8226: sys.setfilesystemencoding() raises a LookupError if the encoding

is unknown

- Issue #1583863: An str subclass can now override the __str__ method

- Issue #7072: isspace(0xa0) is true on Mac OS X

C-API

-----

- Issue #9834: Don't segfault in PySequence_GetSlice, PySequence_SetSlice, or

PySequence_DelSlice when the object doesn't have any mapping operations

defined.

- Issue #5753: A new C API function, :cfunc:`PySys_SetArgvEx`, allows

embedders of the interpreter to set sys.argv without also modifying

sys.path. This helps fix `CVE-2008-5983

<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5983>`_.

Library

-------

- Issue #5111: IPv6 Host in the Header is wrapped inside [ ]. Patch by Chandru.

- Issue #4471: Properly shutdown socket in IMAP.shutdown(). Patch by

Lorenzo M. Catucci.

- Fix IMAP.login() to work properly.

- Issue #10126: Fix distutils' test_build when Python was built with

--enable-shared.

- Fix typo in one sdist option (medata-check).

- Issue #9199: Fix incorrect use of distutils.cmd.Command.announce.

- Issue #1718574: Fix options that were supposed to accept arguments but did

not in build_clib.

- Issue #9281: Prevent race condition with mkdir in distutils. Patch by

Arfrever.

- Issue #10229: Fix caching error in gettext.

- Issue #10252: Close file objects in a timely manner in distutils code and

tests. Patch by Brian Brazil, completed by Éric Araujo.

- Issue #10311: The signal module now restores errno before returning from

its low-level signal handler. Patch by Hallvard B Furuseth.

- The keyword only restriction for the places argument in

unittest.TestCase.assert[Not]AlmostEqual methods has been removed.

- Issue #6706: asyncore accept() method no longer raises EWOULDBLOCK/ECONNABORTED

on incomplete connection attempt but returns None instead.

- Issue #10266: uu.decode didn't close in_file explicitly when it was given

as a filename. Patch by Brian Brazil.

- Issue #10246: uu.encode didn't close file objects explicitly when filenames

were given to it. Patch by Brian Brazil.

- Issue #10253: FileIO leaks a file descriptor when trying to open a file

for append that isn't seekable. Patch by Brian Brazil.

- Issue #5027: The standard ``xml`` namespace is now understood by

xml.sax.saxutils.XMLGenerator as being bound to

http://www.w3.org/XML/1998/namespace. Patch by Troy J. Farrell.

- Issue #7761: telnetlib.interact failures on Windows fixed.

- Issue #5117: Case normalization was needed on ntpath.relpath(). And

fixed root directory issue on posixpath.relpath(). (Ported working fixes

from ntpath)

- Issue #10041: The signature of optional arguments in socket.makefile()

didn't match that of io.open(), and they also didn't get forwarded

properly to TextIOWrapper in text mode. Patch by Kai Zhu.

- Issue #6612: Fix site and sysconfig to catch os.getcwd() error, eg. if the

current directory was deleted. Patch written by W. Trevor King.

- Issue #9759: GzipFile now raises ValueError when an operation is attempted

after the file is closed. Patch by Jeffrey Finkelstein.

- Issue #9042: Fix interaction of custom translation classes and caching in

gettext.

- Issue #9065: tarfile no longer uses "root" as the default for the uname and

gname field.

- Issue #8980: Fixed a failure in distutils.command check that was shadowed

by an environment that does not have docutils. Patch by Arfrever.

- Issue #1050268: parseaddr now correctly quotes double quote and backslash

characters that appear inside quoted strings in email addresses.

- Issue #10004: quoprimime no longer generates a traceback when confronted

with invalid characters after '=' in a Q-encoded word.

- Issue #9950: Fix socket.sendall() crash or misbehaviour when a signal is

received. Now sendall() properly calls signal handlers if necessary,

and retries sending if these returned successfully, including on sockets

with a timeout.

- Issue #9936: Fixed executable lines' search in the trace module.

- Issue #9928: Properly initialize the types exported by the bz2 module.

- Issue #9854: The default read() implementation in io.RawIOBase now

handles non-blocking readinto() returning None correctly.

- Issue #9853: Fix the signature of SSLSocket.recvfrom() and

SSLSocket.sendto() to match the corresponding socket methods.

- Issue #9792: In case of connection failure, socket.create_connection()

would swallow the exception and raise a new one, making it impossible

to fetch the original errno, or to filter timeout errors. Now the

original error is re-raised.

- Issue #9826: OrderedDict.__repr__ can now handle self-referential

values: d['x'] = d.

- Issue #9758: When fcntl.ioctl() was called with mutable_flag set to True,

and the passed buffer was exactly 1024 bytes long, the buffer wouldn't

be updated back after the system call. Original patch by Brian Brazil.

- Issue #6656: fix locale.format_string to handle escaped percents

and mappings.

- Issue #1100562: Fix deep-copying of objects derived from the list and

dict types. Patch by Michele Orrù and Björn Lindqvist.

- Issue #9753: Fixed socket.dup, which did not always work correctly

on Windows.

- Issue #1868: Eliminate subtle timing issues in thread-local objects by

getting rid of the cached copy of thread-local attribute dictionary.

- Issue #8797: urllib2 does a retry for Basic Authentication failure instead of

falling into recursion.

- Issue #1194222: email.utils.parsedate now returns RFC2822 compliant four

character years even if the message contains RFC822 two character years.

- Issue #8750: Fixed MutableSet's methods to correctly handle

reflexive operations, namely x -= x and x ^= x.

- Issue #9129: smtpd.py is vulnerable to DoS attacks deriving from missing

error handling when accepting a new connection.

- Issue #658749: asyncore's connect() method now correctly interprets winsock

errors.

- Issue #9214: Set operations on KeysView or ItemsView in the collections

module now correctly return a set. (Patch by Eli Bendersky.)

- Issue #9617: Signals received during a low-level write operation aren't

ignored by the buffered IO layer anymore.

- Issue #9605: posix.getlogin() decodes the username with file filesystem

encoding and surrogateescape error handler. Patch written by David Watson.

- Issue #9603: posix.ttyname() and posix.ctermid() decode the terminal name

using the filesystem encoding and surrogateescape error handler. Patch

written by David Watson.

- Issue #8688: MANIFEST files created by distutils now include a magic

comment indicating they are generated. Manually maintained MANIFESTs

without this marker will not be overwritten or removed.

- Issue #7467: when reading a file from a ZIP archive, its CRC is checked

and a BadZipfile error is raised if it doesn't match (as used to be the

case in Python 2.5 and earlier).

- Issue #9550: a BufferedReader could issue an additional read when the

original read request had been satisfied, which could block indefinitely

when the underlying raw IO channel was e.g. a socket. Report and original

patch by Jason V. Miller.

- Issue #6915: Under Windows, os.listdir() didn't release the Global

Interpreter Lock around all system calls. Original patch by Ryan Kelly.

- Issue #3757: thread-local objects now support cyclic garbage collection.

Thread-local objects involved in reference cycles will be deallocated

timely by the cyclic GC, even if the underlying thread is still running.

- Fix Issue8280 - urllib2's Request method will remove fragements in the url.

This is how it is supposed to work, wget and curl do the same. Previous

behavior was wrong.

- Issue #2944: asyncore doesn't handle connection refused correctly.

- Issue #3196: email header decoding is now forgiving if an RFC2047

encoded word encoded in base64 is lacking padding.

- Issue #8447: Make distutils.sysconfig follow symlinks in the path to

the interpreter executable. This fixes a failure of test_httpservers

on OS X.

- Issue #7372: Fix pstats regression when stripping paths from profile

data generated with the profile module.

- Issue #4108: In urllib.robotparser, if there are multiple 'User-agent: *'

entries, consider the first one.

- Issue #8397: Raise an error when attempting to mix iteration and regular

reads on a BZ2File object, rather than returning incorrect results.

- Issue #7909: Do not touch paths with the special prefixes ``\\.\``

or ``\\?\`` in ntpath.normpath().

- Issue #5294: Fix the behavior of pdb's "continue" command when called

in the top-level debugged frame.

- Issue #5727: Restore the ability to use readline when calling into pdb

in doctests.

- Issue #6719: In pdb, do not stop somewhere in the encodings machinery

if the source file to be debugged is in a non-builtin encoding.

- Issue #8048: Prevent doctests from failing when sys.displayhook has

been reassigned.

- Issue #8015: In pdb, do not crash when an empty line is entered as

a breakpoint command.

- Issue #5146: Handle UID THREAD command correctly in imaplib.

- Issue #5147: Fix the header generated for cookie files written by

http.cookiejar.MozillaCookieJar.

- Issue #8198: In pydoc, output all help text to the correct stream

when sys.stdout is reassigned.

- Issue #8230: Fix Lib/test/sortperf.py.

- Issue #7395: Fix tracebacks in pstats interactive browser.

- Issue #1713: Fix os.path.ismount(), which returned true for symbolic links

across devices.

- Issue #8826: Properly load old-style "expires" attribute in http.cookies.

- Issue #1690103: Fix initial namespace for code run with trace.main().

- Issue #9354: Provide getsockopt() in asyncore's file_wrapper.

- Issue #9448: Fix a leak of OS resources (mutexes or semaphores) when

re-initializing a buffered IO object by calling its ``__init__`` method.

- Issue #8620: when a Cmd is fed input that reaches EOF without a final

newline, it no longer truncates the last character of the last command line.

- Issue #3704: http.cookiejar was not properly handling URLs with a / in the

parameters.

- Issue #4629: getopt raises an error if an argument ends with = whereas getopt

doesn't except a value (eg. --help= is rejected if getopt uses ['help='] long

options).

- Issue #7895: platform.mac_ver() no longer crashes after calling os.fork()

- Issue #9323: Fixed a bug in trace.py that resulted in loosing the

name of the script being traced. Patch by Eli Bendersky.

- Issue #9282: Fixed --listfuncs option of trace.py. Thanks Eli

Bendersky for the patch.

- Issue #1555570: email no longer inserts extra blank lines when a \r\n

combo crosses an 8192 byte boundary.

- Issue #9243: Fix sndhdr module and add unit tests, contributed by James Lee.

- Issue #9137: Fix issue in MutableMapping.update, which incorrectly

treated keyword arguments called 'self' or 'other' specially.

- Issue #7646: The fnmatch pattern cache no longer grows without bound.

- Issue #9136: Fix 'dictionary changed size during iteration'

RuntimeError produced when profiling the decimal module. This was

due to a dangerous iteration over 'locals()' in Context.__init__.

- Fix extreme speed issue in Decimal.pow when the base is an exact

power of 10 and the exponent is tiny (for example,

Decimal(10) ** Decimal('1e-999999999')).

- Issue #9130: Fix validation of relative imports in parser module.

- Issue #9128: Fix validation of class decorators in parser module.

- Issue #5468: urlencode to handle bytes type and other encodings in its query

parameter. Patch by Dan Mahn.

- Issue #7673: Fix security vulnerability (CVE-2010-2089) in the audioop

module, ensure that the input string length is a multiple of the frame size

- Issue #6589: cleanup asyncore.socket_map in case smtpd.SMTPServer constructor

raises an exception.

- Issue #9075: In the ssl module, remove the setting of a ``debug`` flag

on an OpenSSL structure.

- Issue #8682: The ssl module now temporary increments the reference count of

a socket object got through ``PyWeakref_GetObject``, so as to avoid possible

deallocation while the object is still being used.

- Issue #1368368: FancyURLOpener class changed to throw an Exception on wrong

password instead of presenting an interactive prompt. Older behavior can be

obtained by passing retry=True to http_error_xxx methods of FancyURLOpener.

- Issue #8203: Fix IDLE Credits dialog: view_file() uses its encoding argument.

- Issue #8720: fix regression caused by fix for #4050 by making getsourcefile

smart enough to find source files in the linecache.

- Issue #5610: feedparser no longer eats extra characters at the end of

a body part if the body part ends with a \r\n.

- Fix codecs.escape_encode to return the correct consumed size.

- Issue #8897: Fix sunau module, use bytes to write the header. Patch written

by Thomas Jollans.

- Issue #6470: Drop UNC prefix in FixTk.

- Issue #4768: base64 encoded email body parts were incorrectly stored as

binary strings. They are now correctly converted to strings.

- Issue #8833: tarfile created hard link entries with a size field != 0 by

mistake.