+++++++++++

Python News

+++++++++++

What's New in Python 3.2.6?

===========================

*Release date: 11-Oct-2014*

Core and Builtins

-----------------

- Issue #19529: Fix a potential crash in converting Unicode objects to wchar_t

when Py_UNICODE is 4 bytes but wchar_t is 2 bytes, for example on AIX.

Library

-------

- Issue #16040: CVE-2013-1752: nntplib: Limit maximum line lengths to 2048 to

prevent readline() calls from consuming too much memory. Patch by Jyrki

Pulliainen.

- Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit

line length. Patch by Emil Lind.

- Issue #22421: Fix a regression that caused the pydoc server to be bound to

all interfaces instead of only localhost.

- Issue #22419: Limit the length of incoming HTTP request in wsgiref server to

65536 bytes and send a 414 error code for higher lengths. Patch contributed

by Devin Cook.

- Issue #22517: When a io.BufferedRWPair object is deallocated, clear its

weakrefs.

- Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to

prevent readline() calls from consuming too much memory. Patch by Jyrki

Pulliainen.

- Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by

limiting the call to readline(). Original patch by Christian Heimes.

- Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by

limiting the call to readline(). Original patch by Michał

Jastrzębski and Giampaolo Rodola.

- Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more than

100 headers are read. Adapted from patch by Jyrki Pulliainen.

- Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes

inside subjectAltName correctly. Formerly the module has used OpenSSL's

GENERAL_NAME_print() function to get the string represention of ASN.1

strings for ``rfc822Name`` (email), ``dNSName`` (DNS) and

``uniformResourceIdentifier`` (URI).

- Lax cookie parsing in http.cookies could be a security issue when combined

with non-standard cookie handling in some Web browsers. Reported by

Sergey Bobrov.

- Issue #19855: uuid.getnode() on Unix now looks on the PATH for the

executables used to find the mac address, with /sbin and /usr/sbin as

fallbacks.

- Issue #11508: Fixed uuid.getnode() and uuid.uuid1() on environment with

virtual interface. Original patch by Kent Frazier.

- Issue #18784: The uuid module no more attempts to load libc via ctypes.CDLL,

if all necessary functions are already found in libuuid.

Patch by Evgeny Sologubov.

- Issue #16102: Make uuid._netbios_getnode() work again on Python 3.

- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths

before checking for a CGI script at that path.

- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second

parameter. Bug reported by Guido Vranken.

- Issue #21082: In os.makedirs, do not set the process-wide umask. Note this

changes behavior of makedirs when exist_ok=True.

- Issue #20246: Fix buffer overflow in socket.recvfrom_into.

- Issue #12226: HTTPS is now used by default when connecting to PyPI.

- Issue #19435: Fix directory traversal attack on CGIHttpRequestHandler.

- Issue #14984: On POSIX systems, when netrc is called without a filename

argument (and therefore is reading the user's $HOME/.netrc file), it now

enforces the same security rules as typical ftp clients: the .netrc file must

be owned by the user that owns the process and must not be readable by any

other user.

- Fix tkinter regression introduced by the security fix in issue #16248.

- Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of

service using certificates with many wildcards (CVE-2013-2099).

- Issue #21323: Fix http.server to again handle scripts in CGI subdirectories,

broken by the fix for security issue #19435. Patch by Zach Byrne.

Tests

-----

- Issue #20939: Avoid various network test failures due to new

redirect of http://www.python.org/ to https://www.python.org:

use http://www.example.com instead.

What's New in Python 3.2.5?

===========================

*Release date: 13-May-2013*

Library

-------

- Issue #17980: Fix possible abuse of ssl.match_hostname() for denial of

service using certificates with many wildcards (CVE-2013-2099).

- Issue #17192: Restore the patch for Issue #11729 and Issue #10309

which were omitted in 3.2.4 when updating the bundled version of

libffi used by ctypes.

- Issue #15535: Fix namedtuple pickles which were picking up the OrderedDict

instead of just the underlying tuple.

- Issue #1159051: Back out a fix for handling corrupted gzip files that

broke backwards compatibility.

- Issue #17915: Fix interoperability of xml.sax with file objects returned by

codecs.open().

Build

-----

- Issue #17857: Prevent build failures with pre-3.5.0 versions of sqlite3,

such as was shipped with Centos 5 and Mac OS X 10.4.

Tests

-----

- Issue #17843: Removed bz2 test data file that was triggering false-positive

virus warnings with certain antivirus software.

What's New in Python 3.2.4?

===========================

*Release date: 07-Apr-2013*

Library

-------

- Issue #17625: In IDLE, close the replace dialog after it is used.

What's New in Python 3.2.4 release candidate 1?

===============================================

*Release date: 24-Mar-2013*

Core and Builtins

-----------------

- Issue #1692335: Move initial args assignment to

BaseException.__new__ to help pickling of naive subclasses.

- Issue #17275: Corrected class name in init error messages of the C version of

BufferedWriter and BufferedRandom.

- Issue #7963: Fixed misleading error message that issued when object is

called without arguments.

- Issue #5308: Raise ValueError when marshalling too large object (a sequence

with size >= 2**31), instead of producing illegal marshal data.

- Issue #12983: Bytes literals with invalid \x escape now raise a SyntaxError

and a full traceback including line number.

- Issue #17173: Remove uses of locale-dependent C functions (isalpha() etc.)

in the interpreter.

- Issue #17043: The unicode-internal decoder no longer read past the end of

input buffer.

- Issue #16979: Fix error handling bugs in the unicode-escape-decode decoder.

- Issue #10156: In the interpreter's initialization phase, unicode globals

are now initialized dynamically as needed.

- Issue #16975: Fix error handling bug in the escape-decode bytes decoder.

- Issue #14850: Now a charmap decoder treats U+FFFE as "undefined mapping"

in any mapping, not only in a string.

- Issue #11461: Fix the incremental UTF-16 decoder. Original patch by

Amaury Forgeot d'Arc.

- Issue #16367: Fix FileIO.readall() on Windows for files larger than 2 GB.

- Issue #16455: On FreeBSD and Solaris, if the locale is C, the

ASCII/surrogateescape codec is now used, instead of the locale encoding, to

decode the command line arguments. This change fixes inconsistencies with

os.fsencode() and os.fsdecode() because these operating systems announces an

ASCII locale encoding, whereas the ISO-8859-1 encoding is used in practice.

- Issue #16761: Calling int() with base argument only now raises TypeError.

- Issue #16759: Support the full DWORD (unsigned long) range in Reg2Py

when retrieving a REG_DWORD value. This corrects functions like

winreg.QueryValueEx that may have been returning truncated values.

- Issue #14420: Support the full DWORD (unsigned long) range in Py2Reg

when passed a REG_DWORD value. Fixes OverflowError in winreg.SetValueEx.

- Issue #16602: When a weakref's target was part of a long deallocation

chain, the object could remain reachable through its weakref even though

its refcount had dropped to zero.

- Issue #16416: On Mac OS X, operating system data are now always

encoded/decoded to/from UTF-8/surrogateescape, instead of the locale encoding

(which may be ASCII if no locale environment variable is set), to avoid

inconsistencies with os.fsencode() and os.fsdecode() functions which are

already using UTF-8/surrogateescape.

- Issue #16588: Silence unused-but-set warnings in Python/thread_pthread.h

- Issue #16306: Fix multiple error messages when unknown command line

parameters where passed to the interpreter. Patch by Hieu Nguyen.

- Issue #16453: Fix equality testing of dead weakref objects.

- Issue #9535: Fix pending signals that have been received but not yet

handled by Python to not persist after os.fork() in the child process.

- Issue #15001: fix segfault on "del sys.module['__main__']". Patch by Victor

Stinner.

- Issue #5057: the peepholer no longer optimizes subscription on unicode

literals (e.g. u'foo'[0]) in order to produce compatible pyc files between

narrow and wide builds.

- Issue #16402: When slicing a range, fix shadowing of exceptions from

__index__.

- Issue #16336: fix input checking in the surrogatepass error handler.

Patch by Serhiy Storchaka.

- Issue #8401: assigning an int to a bytearray slice (e.g. b[3:4] = 5) now

raises an error.

- Issue #16345: Fix an infinite loop when ``fromkeys`` on a dict subclass

received a nonempty dict from the constructor.

- Issue #16197: Update winreg docstrings and documentation to match code.

Patch by Zachary Ware.

- Issue #14700: Fix buggy overflow checks when handling large precisions and

widths in old-style and new-style formatting.

- Issue #6074: Ensure cached bytecode files can always be updated by the

user that created them, even when the source file is read-only.

- Issue #14783: Improve int() docstring and switch docstrings for str(),

range(), and slice() to use multi-line signatures.

- Issue #15379: Fix passing of non-BMP characters as integers for the charmap

decoder (already working as unicode strings). Patch by Serhiy Storchaka.

- Issue #13992: The trashcan mechanism is now thread-safe. This eliminates

sporadic crashes in multi-thread programs when several long deallocator

chains ran concurrently and involved subclasses of built-in container

types.

- Issue #15846: Fix SystemError which happened when using ast.parse in an

exception handler on code with syntax errors.

- Issue #15761: Fix crash when PYTHONEXECUTABLE is set on Mac OS X.

- Issue #15801: Make sure mappings passed to '%' formatting are actually

subscriptable.

- Issue #15726: Fix incorrect bounds checking in PyState_FindModule.

Patch by Robin Schreiber.

- Issue #15604: Update uses of PyObject_IsTrue() to check for and handle

errors correctly. Patch by Serhiy Storchaka.

- Issue #13119: sys.stdout and sys.stderr are now using "\r\n" newline on

Windows, as Python 2.

- Issue #14579: Fix CVE-2012-2135: vulnerability in the utf-16 decoder after

error handling. Patch by Serhiy Storchaka.

- Issue #15404: Refleak in PyMethodObject repr.

- Issue #15394: An issue in PyModule_Create that caused references to

be leaked on some error paths has been fixed. Patch by Julia Lawall.

- Issue #15368: An issue that caused bytecode generation to be

non-deterministic when using randomized hashing (-R) has been fixed.

- Issue #16369: Global PyTypeObjects not initialized with PyType_Ready(...).

- Issue #15020: The program name used to search for Python's path is now

"python3" under Unix, not "python".

- Issue #15897: zipimport.c doesn't check return value of fseek().

Patch by Felipe Cruz.

- Issue #15033: Fix the exit status bug when modules invoked using -m switch,

return the proper failure return value (1). Patch contributed by Jeff Knupp.

- Issue #12268: File readline, readlines and read() or readall() methods

no longer lose data when an underlying read system call is interrupted.

IOError is no longer raised due to a read system call returning EINTR

from within these methods.

- Issue #15142: Fix reference leak when deallocating instances of types

created using PyType_FromSpec().

- Issue #10053: Don't close FDs when FileIO.__init__ fails. Loosely based on

the work by Hirokazu Yamamoto.

- Issue #14775: Fix a potential quadratic dict build-up due to the garbage

collector repeatedly trying to untrack dicts.

- Issue #14494: Fix __future__.py and its documentation to note that

absolute imports are the default behavior in 3.0 instead of 2.7.

Patch by Sven Marnach.

- Issue #14761: Fix potential leak on an error case in the import machinery.

- Issue #14699: Fix calling the classmethod descriptor directly.

- Issue #14433: Prevent msvcrt crash in interactive prompt when stdin

is closed.

- Issue #11603 (again): Setting __repr__ to __str__ now raises a RuntimeError

when repr() or str() is called on such an object.

- Issue #14658: Fix binding a special method to a builtin implementation of a

special method with a different name.

- Issue #14630: Fix a memory access bug for instances of a subclass of int

with value 0.

- Issue #14612: Fix jumping around with blocks by setting f_lineno.

- Issue #14607: Fix keyword-only arguments which started with ``__``.

- Issue #13889: Check and (if necessary) set FPU control word before calling

any of the dtoa.c string <-> float conversion functions, on MSVC builds of

Python. This fixes issues when embedding Python in a Delphi app.

- Issue #14474: Save and restore exception state in thread.start_new_thread()

while writing error message if the thread leaves a unhandled exception.

- Issue #13019: Fix potential reference leaks in bytearray.extend(). Patch

by Suman Saha.

- Issue #14378: Fix compiling ast.ImportFrom nodes with a "__future__" string as

the module name that was not interned.

- Issue #14331: Use significantly less stack space when importing modules by

allocating path buffers on the heap instead of the stack.

- Issue #14334: Prevent in a segfault in type.__getattribute__ when it was not

passed strings.

- Issue #1469629: Allow cycles through an object's __dict__ slot to be

collected. (For example if ``x.__dict__ is x``).

- Issue #14172: Fix reference leak when marshalling a buffer-like object

(other than a bytes object).

- Issue #13521: dict.setdefault() now does only one lookup for the given key,

making it "atomic" for many purposes. Patch by Filip Gruszczyński.

- Issue #1602133: on Mac OS X a shared library build (``--enable-shared``)

now fills the ``os.environ`` variable correctly.

- Issue #14471: Fix a possible buffer overrun in the winreg module.

Library

-------

- Issue #17488: Change the subprocess.Popen bufsize parameter default value

from unbuffered (0) to buffering (-1) to match the behavior existing code

expects and match the behavior of the subprocess module in Python 2 to avoid

introducing hard to track down bugs.

- Issue #17521: Corrected non-enabling of logger following two calls to

fileConfig().

- Issue #17508: Corrected MemoryHandler configuration in dictConfig() where

the target handler wasn't configured first.

- Issue #5713: smtplib now handles 421 (closing connection) error codes when

sending mail by closing the socket and reporting the 421 error code via the

exception appropriate to the command that received the error response.

- Issue #8862: Fixed curses cleanup when getkey is interrputed by a signal.

- Issue #17443: impalib.IMAP4_stream was using the default unbuffered IO

in subprocess, but the imap code assumes buffered IO. In Python2 this

worked by accident. IMAP4_stream now explicitly uses buffered IO.

- Issue #17476: Fixed regression relative to Python2 in undocumented pydoc

'allmethods'; it was missing unbound methods on the class.

- Issue #16389: Fixed a performance regression relative to Python 3.1 in the

caching of compiled regular expressions.

- Issue #17431: Fix missing import of BytesFeedParser in email.parser.

- Issue #1285086: Get rid of the refcounting hack and speed up

urllib.parse.unquote() and urllib.parse.unquote_to_bytes().

- Issue #17368: Fix an off-by-one error in the Python JSON decoder that caused

a failure while decoding empty object literals when object_pairs_hook was

specified.

- Issue #14645: The email generator classes now produce output using the

specified linesep throughout. Previously if the prolog, epilog, or

body were stored with a different linesep, that linesep was used. This

fix corrects an RFC non-compliance issue with smtplib.send_message.

- Issue #17278: Fix a crash in heapq.heappush() and heapq.heappop() when

the list is being resized concurrently.

- Issue #17018: Make Process.join() retry if os.waitpid() fails with EINTR.

- Issue #14720: sqlite3: Convert datetime microseconds correctly.

Patch by Lowe Thiderman.

- Issue #17225: JSON decoder now counts columns in the first line starting

with 1, as in other lines.

- Issue #13700: Fix byte/string handling in imaplib authentication when an

authobject is specified.

- Issue #13153: Tkinter functions now raise TclError instead of ValueError when

a string argument contains non-BMP character.

- Issue #9669: Protect re against infinite loops on zero-width matching in

non-greedy repeat. Patch by Matthew Barnett.

- Issue #13169: The maximal repetition number in a regular expression has been

increased from 65534 to 2147483647 (on 32-bit platform) or 4294967294 (on

64-bit).

- Issue #16743: Fix mmap overflow check on 32 bit Windows.

- Issue #16800: tempfile.gettempdir() no longer left temporary files when

the disk is full. Original patch by Amir Szekely.

- Issue #16564: Fixed regression relative to Python2 in the operation of

email.encoders.encode_7or8bit when used with binary data.

- Issue #17052: unittest discovery should use self.testLoader.

- Issue #4591: Uid and gid values larger than 2**31 are supported now.

- Issue #17141: random.vonmisesvariate() no more hangs for large kappas.

- Issue #17149: Fix random.vonmisesvariate to always return results in

[0, 2*math.pi].

- Issue #1470548: XMLGenerator now works with binary output streams.

- Issue #6975: os.path.realpath() now correctly resolves multiple nested

symlinks on POSIX platforms.

- Issue #17156: pygettext.py now uses an encoding of source file and correctly

writes and escapes non-ascii characters.

- Issue #16564: Fixed regression relative to Python2 in the operation of

email.encoders.encode_noop when used with binary data.

- Issue #10355: In SpooledTemporaryFile class mode, name, encoding and

newlines properties now work for unrolled files. Obsoleted and never

working on Python 3 xreadline method now removed.

- Issue #16686: Fixed a lot of bugs in audioop module. Fixed crashes in

avgpp(), maxpp() and ratecv(). Fixed an integer overflow in add(), bias(),

and ratecv(). reverse(), lin2lin() and ratecv() no more lose precision for

32-bit samples. max() and rms() no more returns a negative result and

various other functions now work correctly with 32-bit sample -0x80000000.

- Issue #17073: Fix some integer overflows in sqlite3 module.

- Issue #17114: IDLE now uses non-strict config parser.

- Issue #16723: httplib.HTTPResponse no longer marked closed when the connection

is automatically closed.

- Issue #16948: Fix quoted printable body encoding for non-latin1 character

sets in the email package.

- Issue #17089: Expat parser now correctly works with string input not only when

an internal XML encoding is UTF-8 or US-ASCII. It now accepts bytes and

strings larger than 2 GiB.

- Issue #16903: Popen.communicate() on Unix now accepts strings when

universal_newlines is true as on Windows.

- Issue #6083: Fix multiple segmentation faults occured when PyArg_ParseTuple

parses nested mutating sequence.

- Issue #17106: Fix a segmentation fault in io.TextIOWrapper when an underlying

stream or a decoder produces data of an unexpected type (i.e. when

io.TextIOWrapper initialized with text stream or use bytes-to-bytes codec).

- Issue #15633: httplib.HTTPResponse is now mark closed when the server

sends less than the advertised Content-Length.

- Issue #6972: The zipfile module no longer overwrites files outside of

its destination path when extracting malicious zip files.

- Issue #4844: ZipFile now raises BadZipFile when opens a ZIP file with an

incomplete "End of Central Directory" record. Original patch by Guilherme

Polo and Alan McIntyre.

- Issue #15505: `unittest.installHandler` no longer assumes SIGINT handler is

set to a callable object.

- Issue #12004: Fix an internal error in PyZipFile when writing an invalid

Python file. Patch by Ben Morgan.

- Issue #9290: In IDLE the sys.std* streams now implement io.TextIOBase

interface and support all mandatory methods and properties.

- Issue #13454: Fix a crash when deleting an iterator created by itertools.tee()

if all other iterators were very advanced before.

- Issue #12411: Fix to cgi.parse_multipart to correctly use bytes boundaries

and bytes data. Patch by Jonas Wagner.

- Issue #1159051: GzipFile now raises EOFError when reading a corrupted file

with truncated header or footer.

- Issue #15861: tkinter now correctly works with lists and tuples containing

strings with whitespaces, backslashes or unbalanced braces.

- Issue #10527: Use poll() instead of select() for multiprocessing pipes.

- Issue #9720: zipfile now writes correct local headers for files larger than

4 GiB.

- Issue #16829: IDLE printing no longer fails if there are spaces or other

special characters in the file path.

- Issue #13899: \A, \Z, and \B now correctly match the A, Z, and B literals

when used inside character classes (e.g. '[\A]'). Patch by Matthew Barnett.

- Issue #15545: Fix regression in sqlite3's iterdump method where it was

failing if the connection used a row factory (such as sqlite3.Row) that

produced unsortable objects. (Regression was introduced by fix for 9750).

- Issue #16491: IDLE now prints chained exception tracebacks.

- Issue #16828: Fix error incorrectly raised by bz2.compress(''). Patch by

Martin Packman.

- Issue #16541: tk_setPalette() now works with keyword arguments.

- Issue #16820: In configparser, `parser.popitem()` no longer raises ValueError.

This makes `parser.clean()` work correctly.

- Issue #16820: In configparser, ``parser['section'] = {}`` now preserves

section order within the parser. This makes `parser.update()` preserve section

order as well.

- Issue #9644: Fix the encoding used by os.statvfs(): use the filesystem

encoding with the surrogateescape error handler, instead of UTF-8 in strict

mode.

- Issue #16819: IDLE method completion now correctly works for bytes literals.

- Issue #9586: Redefine SEM_FAILED on MacOSX to keep compiler happy.

- Issue #10527: make multiprocessing use poll() instead of select() if available.

- Issue #16485: Now file descriptors are closed if file header patching failed

on closing an aifc file.

- Issue #16504: IDLE now catches SyntaxErrors raised by tokenizer. Patch by

Roger Serwy.

- Issue #16618: Make glob.glob match consistently across strings and bytes

regarding leading dots. Patch by Serhiy Storchaka.

- Issue #16702: test_urllib2_localnet tests now correctly ignores proxies for

localhost tests.

- Issue #16511: Use default IDLE width and height if config param is not valid.

Patch Serhiy Storchaka.

- Issue #16713: Parsing of 'tel' urls using urlparse separates params from

path.

- Issue #16443: Add docstrings to regular expression match objects.

Patch by Anton Kasyanov.

- Issue #15701: Fix HTTPError info method call to return the headers information.

- Issue #16646: ftplib.FTP.makeport() might lose socket error details.

(patch by Serhiy Storchaka)

- Issue #16626: Fix infinite recursion in glob.glob() on Windows when the

pattern contains a wildcard in the drive or UNC path. Patch by Serhiy

Storchaka.

- Issue #16298: In HTTPResponse.read(), close the socket when there is no

Content-Length and the incoming stream is finished. Patch by Eran

Rundstein.

- Issue #16248: Disable code execution from the user's home directory by

tkinter when the -E flag is passed to Python. Patch by Zachary Ware.

- Issue #16628: Fix a memory leak in ctypes.resize().

- Issue #13614: Fix setup.py register failure with invalid rst in description.

Patch by Julien Courteau and Pierre Paul Lefebvre.

- Issue #13512: Create ~/.pypirc securely (CVE-2011-4944). Initial patch by

Philip Jenvey, tested by Mageia and Debian.

- Issue #7719: Make distutils ignore ``.nfs*`` files instead of choking later

on. Initial patch by SilentGhost and Jeff Ramnani.

- Issue #13120: Allow to call pdb.set_trace() from thread.

Patch by Ilya Sandler.

- Issue #10182: The re module doesn't truncate indices to 32 bits anymore.

Patch by Serhiy Storchaka.

- Issue #16573: In 2to3, treat enumerate() like a consuming call, so superfluous

list() calls aren't added to filter(), map(), and zip() which are directly

passed enumerate().

- Issue #16476: Fix json.tool to avoid including trailing whitespace.

- Issue #16549: Make json.tool work again on Python 3 and add tests.

Initial patch by Berker Peksag and Serhiy Storchaka.

- Issue #12848: The pure Python pickle implementation now treats object

lengths as unsigned 32-bit integers, like the C implementation does.

Patch by Serhiy Storchaka.

- Issue #1160: Fix compiling large regular expressions on UCS2 builds.

Patch by Serhiy Storchaka.

- Issue #14313: zipfile now raises NotImplementedError when the compression

type is unknown.

- Issue #16408: Fix file descriptors not being closed in error conditions

in the zipfile module. Patch by Serhiy Storchaka.

- Issue #16140: The subprocess module no longer double closes its child

subprocess.PIPE parent file descriptors on child error prior to exec().

- Remove a bare print to stdout from the subprocess module that could have

happened if the child process wrote garbage to its pre-exec error pipe.

- Issue #16327: The subprocess module no longer leaks file descriptors

used for stdin/stdout/stderr pipes to the child when fork() fails.

- Issue #14396: Handle the odd rare case of waitpid returning 0 when not

expected in subprocess.Popen.wait().

- Issue #16411: Fix a bug where zlib.decompressobj().flush() might try to access

previously-freed memory. Patch by Serhiy Storchaka.

- Issue #16357: fix calling accept() on a SSLSocket created through

SSLContext.wrap_socket(). Original patch by Jeff McNeil.

- Issue #16350: zlib.decompressobj().decompress() now accumulates data from

successive calls after EOF in unused_data, instead of only saving the argument

to the last call. decompressobj().flush() now correctly sets unused_data and

unconsumed_tail. A bug in the handling of MemoryError when setting the

unconsumed_tail attribute has also been fixed. Patch by Serhiy Storchaka.

- Issue #12759: sre_parse now raises a proper error when the name of the group

is missing. Initial patch by Serhiy Storchaka.

- Issue #16152: fix tokenize to ignore whitespace at the end of the code when

no newline is found. Patch by Ned Batchelder.

- Issue #1207589: Add Cut/Copy/Paste items to IDLE right click Context Menu

Patch by Todd Rovito.

- Issue #16230: Fix a crash in select.select() when one the lists changes

size while iterated on. Patch by Serhiy Storchaka.

- Issue #16228: Fix a crash in the json module where a list changes size

while it is being encoded. Patch by Serhiy Storchaka.

- Issue #14897: Enhance error messages of struct.pack and

struct.pack_into. Patch by Matti Mäki.

- Issue #12890: cgitb no longer prints spurious <p> tags in text

mode when the logdir option is specified.

- Issue #16250: Fix URLError invocation with proper args.

- Issue #16305: Fix a segmentation fault occurring when interrupting

math.factorial.

- Issue #14398: Fix size truncation and overflow bugs in the bz2 module.

- Issue #16220: wsgiref now always calls close() on an iterable response.

Patch by Brent Tubbs.

- Issue #16270: urllib may hang when used for retrieving files via FTP by using

a context manager. Patch by Giampaolo Rodola'.

- Issue #16461: Wave library should be able to deal with 4GB wav files,

and sample rate of 44100 Hz.

- Issue #16176: Properly identify Windows 8 via platform.platform()

- Issue #16114: The subprocess module no longer provides a misleading

error message stating that args[0] did not exist when either the cwd or

executable keyword arguments specified a path that did not exist.

- Issue #15756: subprocess.poll() now properly handles errno.ECHILD to

return a returncode of 0 when the child has already exited or cannot

be waited on.

- Issue #12376: Pass on parameters in TextTestResult.__init__ super call

- Issue #15222: Insert blank line after each message in mbox mailboxes

- Issue #16013: Fix CSV Reader parsing issue with ending quote characters.

Patch by Serhiy Storchaka.

- Issue #15421: fix an OverflowError in Calendar.itermonthdates() after

datetime.MAXYEAR. Patch by Cédric Krier.

- Issue #15970: xml.etree.ElementTree now serializes correctly the empty HTML

elements 'meta' and 'param'.

- Issue #15842: the SocketIO.{readable,writable,seekable} methods now

raise ValueError when the file-like object is closed. Patch by Alessandro

Moura.

- Issue #15881: Fixed atexit hook in multiprocessing. Original patch

by Chris McDonough.

- Issue #15340: Fix importing the random module when /dev/urandom cannot

be opened. This was a regression caused by the hash randomization patch.

- Issue #15841: The readable(), writable() and seekable() methods of BytesIO

and StringIO objects now raise ValueError when the object has been closed.

Patch by Alessandro Moura.

- Issue #15509: webbrowser.UnixBrowser no longer passes empty arguments to

Popen when %action substitutions produce empty strings.

- Issue #16112: platform.architecture does not correctly escape argument to

/usr/bin/file. Patch by David Benjamin.

- Issue #12776,#11839: call argparse type function (specified by add_argument)

only once. Before, the type function was called twice in the case where the

default was specified and the argument was given as well. This was

especially problematic for the FileType type, as a default file would always

be opened, even if a file argument was specified on the command line.

- Issue #15906: Fix a regression in argparse caused by the preceding change,

when action='append', type='str' and default=[].

- Issue #13370: Ensure that ctypes works on Mac OS X when Python is

compiled using the clang compiler

- Issue #15544: Fix Decimal.__float__ to work with payload-carrying NaNs.

- Issue #15249: BytesGenerator now correctly mangles From lines (when

requested) even if the body contains undecodable bytes.

- Issue #15777: Fix a refleak in _posixsubprocess.

- Issue #15199: Fix JavaScript's default MIME type to application/javascript.

Patch by Bohuslav Kabrda.

- Issue #13579: string.Formatter now understands the 'a' conversion specifier.

- Issue #15793: Stack corruption in ssl.RAND_egd().

Patch by Serhiy Storchaka.

- Issue #15595: Fix subprocess.Popen(universal_newlines=True)

for certain locales (utf-16 and utf-32 family). Patch by Chris Jerdonek.

- Issue #15477: In cmath and math modules, add workaround for platforms whose

system-supplied log1p function doesn't respect signs of zeros.

- Issue #11062: Fix adding a message from file to Babyl mailbox.

- Issue #15646: Prevent equivalent of a fork bomb when using

multiprocessing on Windows without the "if __name__ == '__main__'"

idiom.

- Issue #15424: Add a __sizeof__ implementation for array objects.

Patch by Ludwig Hähne.

- Issue #15546: Fix handling of pathological input data in the peek() method

of the GzipFile class.

- Issue #13052: Fix IDLE crashing when replace string in Search/Replace dialog

ended with '\'. Patch by Roger Serwy.

- Issue #15538: Fix compilation of the getnameinfo() / getaddrinfo()

emulation code. Patch by Philipp Hagemeister.

- Issue #9803: Don't close IDLE on saving if breakpoint is open.

Patch by Roger Serwy.

- Issue #12288: Consider '0' and '0.0' as valid initialvalue

for tkinter SimpleDialog.

- Issue #15512: Add a __sizeof__ implementation for parser.

Patch by Serhiy Storchaka.

- Issue #15469: Add a __sizeof__ implementation for deque objects.

Patch by Serhiy Storchaka.

- Issue #15489: Add a __sizeof__ implementation for BytesIO objects.

Patch by Serhiy Storchaka.

- Issue #15487: Add a __sizeof__ implementation for buffered I/O objects.

Patch by Serhiy Storchaka.

- Issue #6056: Make multiprocessing use setblocking(True) on the

sockets it uses. Original patch by J Derek Wilson.

- Issue #15041: update "see also" list in tkinter documentation.

- Issue #15402: An issue in the struct module that caused sys.getsizeof to

return incorrect results for struct.Struct instances has been fixed.

Initial patch by Serhiy Storchaka.

- Issue #15232: when mangle_from is True, email.Generator now correctly mangles

lines that start with 'From ' that occur in a MIME preamble or epilogue.

- Issue #13922: argparse no longer incorrectly strips '--'s that appear

after the first one.

- Issue #12353: argparse now correctly handles null argument values.

- Issues #10017 and #14998: Fix TypeError using pprint on dictionaries with

user-defined types as keys or other unorderable keys.

- Issue #14635: telnetlib will use poll() rather than select() when possible

to avoid failing due to the select() file descriptor limit.

- Issue #15180: Clarify posixpath.join() error message when mixing str & bytes

- Issue #15230: runpy.run_path now correctly sets __package__ as described

in the documentation

- Issue #14990: Correctly fail with SyntaxError on invalid encoding

declaration.

- Issue #15247: FileIO now raises an error when given a file descriptor

pointing to a directory.

- Issue #5346: Preserve permissions of mbox, MMDF and Babyl mailbox

files on flush().

- Issue #10571: Fix the "--sign" option of distutils' upload command.

Patch by Jakub Wilk.

- Issue #9559: If messages were only added, a new file is no longer

created and renamed over the old file when flush() is called on an

mbox, MMDF or Babyl mailbox.

- Issue #14653: email.utils.mktime_tz() no longer relies on system

mktime() when timezone offest is supplied.

- Fix GzipFile's handling of filenames given as bytes objects.

- Issue #15101: Make pool finalizer avoid joining current thread.

- Issue #15036: Mailbox no longer throws an error if a flush is done

between operations when removing or changing multiple items in mbox,

MMDF, or Babyl mailboxes.

- Issue #10133: Make multiprocessing deallocate buffer if socket read

fails. Patch by Hallvard B Furuseth.

- Issue #13854: Make multiprocessing properly handle non-integer

non-string argument to SystemExit.

- Issue #12157: Make pool.map() empty iterables correctly. Initial

patch by mouad.

- Issue #14992: os.makedirs(path, exist_ok=True) would raise an OSError

when the path existed and had the S_ISGID mode bit set when it was

not explicitly asked for. This is no longer an exception as mkdir

cannot control if the OS sets that bit for it or not.

- Issue #14962: Update text coloring in IDLE shell window after changing

options. Patch by Roger Serwy.

- Issue #10997: Prevent a duplicate entry in IDLE's "Recent Files" menu.

- Issue #14443: Tell rpmbuild to use the correct version of Python in

bdist_rpm. Initial patch by Ross Lagerwall.

- Issue #14929: Stop Idle 3.x from closing on Unicode decode errors when

grepping. Patch by Roger Serwy.

- Issue #12510: Attempting to get invalid tooltip no longer closes Idle.

Other tooltipss have been corrected or improved and the number of tests

has been tripled. Original patch by Roger Serwy.

- Issue #10365: File open dialog now works instead of crashing even when

the parent window is closed before the dialog. Patch by Roger Serwy.

- Issue #14876: Use user-selected font for highlight configuration.

- Issue #14920: Fix the help(urllib.parse) failure on locale C on terminals.

Have ascii characters in help.

- Issue #14863: Update the documentation of os.fdopen() to reflect the

fact that it's only a thin wrapper around open() anymore.

- Issue #14036: Add an additional check to validate that port in urlparse does

not go in illegal range and returns None.

- Issue #14875: Use float('inf') instead of float('1e66666') in the json module.

- Issue #14426: Correct the Date format in Expires attribute of Set-Cookie

Header in Cookie.py.

- Issue #14721: Send the correct 'Content-length: 0' header when the body is an

empty string ''. Initial Patch contributed by Arve Knudsen.

- Issue #14072: Fix parsing of 'tel' URIs in urlparse by making the check for

ports stricter.

- Issue #9374: Generic parsing of query and fragment portions of url for any

scheme. Supported both by RFC3986 and RFC2396.

- Issue #14798: Fix the functions in pyclbr to raise an ImportError

when the first part of a dotted name is not a package. Patch by

Xavier de Gaye.

- Issue #14829: Fix bisect and range() indexing with large indices

(>= 2 ** 32) under 64-bit Windows.

- Issue #14777: tkinter may return undecoded UTF-8 bytes as a string when

accessing the Tk clipboard. Modify clipboad_get() to first request type

UTF8_STRING when no specific type is requested in an X11 windowing

environment, falling back to the current default type STRING if that fails.

Original patch by Thomas Kluyver.

- Issue #12541: Be lenient with quotes around Realm field of HTTP Basic

Authentation in urllib2.

- Issue #14662: Prevent shutil failures on OS X when destination does not

support chflag operations. Patch by Hynek Schlawack.

- Issue #14157: Fix time.strptime failing without a year on February 29th.

Patch by Hynek Schlawack.

- Issue #14768: os.path.expanduser('~/a') doesn't works correctly when HOME is '/'.

- Issue #14741: Fix missing support for Ellipsis ('...') in parser module.

- Issue #14697: Fix missing support for set displays and set comprehensions in

parser module.

- Issue #14701: Fix missing support for 'raise ... from' in parser module.

- Issue #13183: Fix pdb skipping frames after hitting a breakpoint and running

step. Patch by Xavier de Gaye.

- Issue #14696: Fix parser module to understand 'nonlocal' declarations.

- Issue #10941: Fix imaplib.Internaldate2tuple to produce correct result near

the DST transition. Patch by Joe Peterson.

- Issue #9154: Fix parser module to understand function annotations.

- Issue #14664: It is now possible to use @unittest.skip{If,Unless} on a

test class that doesn't inherit from TestCase (i.e. a mixin).

- Issue #14160: TarFile.extractfile() failed to resolve symbolic links when

the links were not located in an archive subdirectory.

- Issue #14638: pydoc now treats non-string __name__ values as if they

were missing, instead of raising an error.

- Issue #13684: Fix httplib tunnel issue of infinite loops for certain sites

which send EOF without trailing \r\n.

- Issue #14629: Raise SyntaxError in tokenizer.detect_encoding if the