delta/cpython-git.git, branch v3.6.7

3.6.7final

2018-10-20T05:24:09+00:00

bpo-34576: Revert doc change until it can be properly fixed (GH-9720)

2018-10-20T04:47:20+00:00

This reverts commit 3baee3b39765f5e8ec616b2b71b731b140486394.

bpo-34521: Add NEWS entry for changes in GH-9613 (GH-9850)

2018-10-20T04:42:13+00:00

* Add News entry for the change in multiprocessing.reduction.recvfds
made in GH-9613.
(cherry picked from commit bd036d3d15fc1310ccc32a43a3296b8c157ac221)

Co-authored-by: Pablo Galindo

3.6.7rc2

2018-10-13T07:01:32+00:00

bpo-34370: Revert to using released Tk 8.6.8 with macOS installers

2018-10-13T06:08:48+00:00

For 3.7.1rc1 and 3.6.7rc1 we used a pre-release development
snapshot of Tk 8.6 to pick up some post-8.6.8 fixes for macOS.
But the snapshot introduced at least one regression (bpo-34927).
For rc2, revert to using the standard release 8.6.8 for now.
This reverts commit adf493227f1efd5d6b34f46b854142bf3b5a411c.

[3.6] bpo-34922: Fix integer overflow in the digest() and hexdigest() methods (GH-9751) (GH-9798) (GH-9801)

2018-10-11T05:37:37+00:00

for the SHAKE algorithm in the hashlib module.
(cherry picked from commit 9b8c2e767643256202bb11456ba8665593b9a500)
(cherry picked from commit 8b040e55395b37bdb8fd4ec85a270cfc9ec95307)

Co-authored-by: Serhiy Storchaka

Fix a possible decref of a borrowed reference in symtable.c. (GH-9786)

2018-10-11T05:28:08+00:00

(cherry picked from commit fc439d20de32b0ebccca79a96e31f83b85ec4eaf)

Co-authored-by: Zackery Spytz

[3.6] bpo-33729: Fix issues with arguments parsing in hashlib. (GH-8346) (GH-8581) (GH-9657)

2018-10-11T04:56:06+00:00

* help(hashlib) didn't work because of incorrect module name in blake2b and
  blake2s classes.
* Constructors blake2*(), sha3_*(), shake_*() and keccak_*() incorrectly
  accepted keyword argument "string" for binary data, but documented as
  accepting the "data" keyword argument. Now this parameter is positional-only.
* Keyword-only parameters in blake2b() and blake2s() were not documented as
  keyword-only.
* Default value for some parameters of blake2b() and blake2s() was None,
  which is not acceptable value.
* The length argument for shake_*.digest() was wrapped out to 32 bits.
* The argument for shake_128.digest() and shake_128.hexdigest() was not
  positional-only as intended.
* TypeError messages for incorrect arguments in all constructors sha3_*(),
  shake_*() and keccak_*() incorrectly referred to sha3_224.

Also made the following enhancements:

* More accurately specified input and result types for strings, bytes and
  bytes-like objects.
* Unified positional parameter names for update() and constructors.
* Improved formatting.
(cherry picked from commit f1d36d8efaecd5c84cb35e35119b283f37d83c40)
(cherry picked from commit 47957dab94a4efa2fee61c9a8193f78300950769)

bpo-34576 warn users on security for http.server (GH-9720)

2018-10-11T03:31:27+00:00

It was proposed to add an warning for http.server regarding security
issues. The wording was provided at bpo-26005 by @orsenthil
(cherry picked from commit 1d26c72e6a9c5b28b27c158f2f196217707dbb0f)

Co-authored-by: Felipe Rodrigues

[3.6] bpo-34769: Thread safety for _asyncgen_finalizer_hook(). (GH-9716) (GH-9792)

2018-10-10T17:25:58+00:00