# Changes (upstream)
1.5.30a
* Some additional comments
* Fedora compile fix
# Local Changes
* Fixed a couple of compile-time warnings.
* Fixed bug in error handling.
* Fixed a typo in header causing linker error on Linux.
* Honor package's own LIBS definition, while still passing LDFLAGS to
properly set the runtime library path for X11 libs.
* Add missing LICENSE.
* Specify missing dependencies to allow the package to link against
libICE/libSM.
* Add a post-install target to install .desktop file (borrowed from
from AUR) and relevant pixmap (taken from the official site).
* Taking maintainership.
Changelog (obtained from https://github.com/superseriousbusiness/gotosocial/releases)
v0.6.0 Soothing Sloth
Hello everyone! Welcome to the v0.6.0 alpha release of GoToSocial,
aka Soothing Sloth!
We've been very busy the last months making a preposterous amount
of changes to the code, fixing bugs, and building a prettier frontend
and settings panel.
Highlights of this release:
Brand spanking new combined profile settings/admin panel at /settings.
Custom emoji categories! Editing custom emojis via the admin panel!
New, higher contrast default color scheme for web views.
Opt-in support for an RSS feed of your public posts!
Markdown format for account bio/note (if you have markdown enabled as
your default post format).
Set your instance thumbnail via the admin panel!
And more!
This is by far the biggest release we've ever done of GoToSocial :) Thank you
to everyone who raised issues, contributed code and documentation, supported
us financially and emotionally, and helped us squash bugs.
Your help has been much appreciated!
Detailed Changelog
Features
5a0e418 [feature] Support PKCS1 "RSA PUBLIC KEY" pem block type (#1179)
13e9abd [feature] Add admin media prune orphaned CLI command (#1146)
665d902 [feature/frogend] modify local emoji (#1143)
b6dbe21 [feature] PATCH /api/v1/admin/custom_emojis/{id} endpoint (#1061)
50dc179 [feature] Prune timelines once per hour to plug memory leak (#1117)
67106c9 [feature] Support markdown format for Account bio/note (#1037)
aa5c4e0 [frogend] Emoji categories (#1051)
a39a664 [feature] Serialize local account role via API, and show it via web view (#1045)
4cd00d5 [feature] Allow newly uploaded emojis to be placed in categories (#939)
d120743 [feature] add instance-expose-public-timeline flag (#1039)
edcee14 [feature] Read + Write tombstones for deleted Actors (#1005)
948e90b [feature] S3: add config flag to proxy S3 media (#1014)
b4f7316 [feature] Make instance thumbnail configurable via admin panel (#973)
eb25739 [frontend] Custom Emoji Deletion (#994)
4d66fb9 [feature] Make rate limit requests amount configurable (#966)
f3fc040 [feature] Allow user to show instead of landing page on / (#922)
f7416d6 [feature] Add emoji DELETE handler at /api/v1/admin/custom_emojis (#913)
6a95f5f [feature] Add /api/v1/admin/custom_emojis/{id} endpoint for single emoji GET (#910)
70d65b6 [feature] Refetch emojis when they change on remote instances (#905)
3ca7164 [frontend] Use new GET custom_emoji admin api (#908)
30aaedb [frontend] use ISO639 library for language selection (#909)
eb85ef7 [feature] Add /api/v1/admin/custom_emojis endpoint (#902)
8066306 [feature] Add opt-in RSS feed for account's latest Public posts (#897)
3bb45b7 [feature] oob oauth token support (#889)
f8528aa [feature] Add emoji image size to instance response (#892)
1a56352 [frontend] scroll to highlighted toot, improve highlight (#885)
fe238f8 [frontend] change spacing of status, text always on it's own line, move status date on mobile (#883)
f7af7c0 [feature] Enlarge active/hovered custom emojis in statuses (#877)
1d99971 [feature] update config types to use bytesize.Size (#828)
dd83ad0 [feature] Add meta robots tag; allow robots to index profile card if user is Discoverable (#842)
938328c [frontend] Unified panels (#812)
Bug fixes
611df7b [bugfix]: Prevent extension of S3 presigned url TTL (#1208)
281f712 [bugfix] Fix admin account confirm on pre-confirmed account setting email address to empty string (#1203)
34716d7 [bugfix] Add missing continues in emoji get funcs (#1200)
85524f8 [bugfix/frontend] fix profile grid scaling in webkit based browsers (#1193)
cf20397 [bugfix] Use case-insensitive selects when getting remote accounts by username/domain (#1191)
3a11861 [bugfix] Don't call strings.ToLower() on usernames when selecting account by domain+username (#1190)
8d581de [bugfix] use correct key for PATCHing admin email (#1189)
927117d [bugfix] Avoid accidentally marking changed emojis as orphaned + pruning them (#1188)
a1dda22 [bugfix] change page width to prevent scrollbar overflow (#1182)
cfa8d79 [bugfix] don't return error during account serialize on deleted emoji (#1177)
d445c60 [bugfix] wrap the correct error on failed account update (#1176)
0c1b1b0 fix missing lookup cache key for invalid domain block (#1158)
c534230 [bugfix] Use Host domain for UA (#1156)
e6cd81b [bugfix]: Fix IPv6 validation (#1150)
9e18c7f [bugfix] Change emailVerified to true for admin account create (#1140)
3e82196 [bugfix] Fix status boosts giving 404 (#1137)
da89548 [bugfix] Prevent future statuses entering timelines (#1134)
9be1685 [bugfix] fix possible infinite loop on federated AP profile delete (#1091)
5210977 [bugfix] Fix unicode-unaware word boundary check in hashtags (#1049)
96f11e7 [bugfix] Fix login on Mastodon iOS app for users with no statuses (#1042)
05a8baa [bugfix] KVStore doesn't like lost+found directory (#972)
15be356 [bugfix] Check media-description-min-chars on submission of new status (#960)
a9addb5 [bugfix] Increase field size limits when registering apps (#958)
ee6a0a1 [bugfix] use the landing page user directly (#956)
1dfa7fe [bugfix] Wrap media in read closer (#941)
bd05040 [bugfix] Use []rune to check length of user-submitted text (#948)
29a71cf [frontend] Fix#923 and markdown css (#925)
4a925e4 [bugfix] create admin_account_actions table in tx (#940)
31f0f27 [bugfix] Fix imports for helpers.gen.go (#924)
c7ba195 [bugfix] Prevent future statuses showing in timelines (#932)
5cd0872 [bugfix] add in-use checks for admin cli account creation (#904)
5cf0f99 [bugfix] Fix new domain block date (#893)
359ed1b [bugfix] Use background context instead of request context for async processing (#888)
196e474 fix emojis not showing in spoiler text (#878)
97b747b [bugfix] Fix incorrect use of bun.Ident (#866)
Performance
bc917a4 [performance]: make s3 urls cacheable (#1194)
c9d893f [feature/performance] Fail fast when doing remote transport calls inside incoming request contexts (#1119)
5d55e8d [performance] add account block DB cache and remove block query joins (#1085)
45ae719 [performance] replace account emojis relational query with separate calls to emojiDB to rely on cache (#1074)
dccc2ee [performance] replace status query relationals with separate calls in order to rely on caches more (#1073)
d98a48b [performance] don't use relations to select notification structs, use caches instead (#1072)
0e57246 [feature] various worker / request queue improvements (#995)
e58a6a2 [performance] cache domains after max retries in transport (#884)
56f53a2 [performance] add user cache and database (#879)
Chores
847e7c7 [chore] Fix a few possible cases of int truncation (#1207)
bb7948f [chore/frontend] remove domain block edit functionality until implemented in backend (#1199)
558b448 [chore] Remove duplicate prefixes from sanitizer (#1195)
97f5453 [chore] Tidy up some of the search logic (#1082)
daf44ac [chore] Bump database dependencies (#1164)
fe39d50 [chore]: Bump codeberg.org/gruf/go-store/v2 from 2.0.9 to 2.0.10 (#1160)
c5ae88c [chore] Set User-Agent header in transport (#1154)
d6f4d19 Tweak the User-Agent a bit (#1153)
746f3fa Additional IP range validations (#1152)
5c5c8ce [chore] Fix frogend admin emoji patch (#1148)
fcb9c0b [chore] cleanup storage implementation, no need for multiple interface types (#1131)
5ba5fb3 [chore/frogend] fix profile preview css, use role info (#1130)
1281a9f [chore/frontend] remove references to unused bundle.js (#1128)
11cd608 [chore] fix broken buildx (whoops) (#1116)
a898160 [chore] use kv.KVStore also for S3 storage (#1113)
f88cb3a [chore] markdown: disable Smartypants rendering (#1111)
0c2971a [chore] update readme with kim's links (#1093)
274626a [chore]: Bump github.com/minio/minio-go/v7 from 7.0.43 to 7.0.44 (#1107)
4a95385 [chore] simplify logging to remove "safetywriter" given os.File has concurrency protection (#1083)
2eea3d5 [chore] improve errors returned fetching account/statues from DB (#1084)
be3d999 [chore] Little Dockerfile updates (#1071)
c1824b0 [chore] Replace blocking Floc with Topics. (#1068)
f3e87ba [chore] cicd: snapshot snapshot instead of latest (#1066)
81c1fe0 [frogend] upgrade deps (#1063)
940abc2 [chore] reversion: use specific columns for updating user again (#1059)
8598dea [chore] update database caching library (#1040)
9ebc29b [chore] Update .drone.yml signature (#1052)
1f256e2 [chore] refactor test/cliparsing.sh into a go test below internal/config (#1036)
fece7fa [chore] fix profile spacing on very small screens (#1050)
8c20ccd [chore] Remove unused admin account suspend action (#1047)
8f2d3ca [chore]: Bump codeberg.org/gruf/go-cache/v3 from 3.1.7 to 3.1.8 (#1043)
e8c733d [chore] bump go-cache to v3.1.7 to fix possible issues ...
v0.6.0-rc3
Changelog
bc917a4 [performance]: make s3 urls cacheable (#1194)
281f712 [bugfix] Fix admin account confirm on pre-confirmed account setting email address to empty string (#1203)
34716d7 [bugfix] Add missing continues in emoji get funcs (#1200)
bb7948f [chore/frontend] remove domain block edit functionality until implemented in backend (#1199)
558b448 [chore] Remove duplicate prefixes from sanitizer (#1195)
85524f8 [bugfix/frontend] fix profile grid scaling in webkit based browsers (#1193)
v0.6.0-rc2
Changelog
cf20397 [bugfix] Use case-insensitive selects when getting remote accounts by username/domain (#1191)
5a0e418 [feature] Support PKCS1 "RSA PUBLIC KEY" pem block type (#1179)
1652633 [docs] Add AppArmor profile for Debian and Ubuntu installations (#1183)
3a11861 [bugfix] Don't call strings.ToLower() on usernames when selecting account by domain+username (#1190)
8d581de [bugfix] use correct key for PATCHing admin email (#1189)
927117d [bugfix] Avoid accidentally marking changed emojis as orphaned + pruning them (#1188)
a1dda22 [bugfix] change page width to prevent scrollbar overflow (#1182)
cfa8d79 [bugfix] don't return error during account serialize on deleted emoji (#1177)
d445c60 [bugfix] wrap the correct error on failed account update (#1176)
v0.6.0-rc1
Changelog
97f5453 [chore] Tidy up some of the search logic (#1082)
daf44ac [chore] Bump database dependencies (#1164)
fe39d50 [chore]: Bump codeberg.org/gruf/go-store/v2 from 2.0.9 to 2.0.10 (#1160)
0c1b1b0 fix missing lookup cache key for invalid domain block (#1158)
c534230 [bugfix] Use Host domain for UA (#1156)
c5ae88c [chore] Set User-Agent header in transport (#1154)
d6f4d19 Tweak the User-Agent a bit (#1153)
746f3fa Additional IP range validations (#1152)
e6cd81b [bugfix]: Fix IPv6 validation (#1150)
8b0c92e [docs] Explain that before 0.6.0, account confirm was necessary. (#1149)
13e9abd [feature] Add admin media prune orphaned CLI command (#1146)
9e18c7f [bugfix] Change emailVerified to true for admin account create (#1140)
5c5c8ce [chore] Fix frogend admin emoji patch (#1148)
665d902 [feature/frogend] modify local emoji (#1143)
b6dbe21 [feature] PATCH /api/v1/admin/custom_emojis/{id} endpoint (#1061)
3e82196 [bugfix] Fix status boosts giving 404 (#1137)
da89548 [bugfix] Prevent future statuses entering timelines (#1134)
fcb9c0b [chore] cleanup storage implementation, no need for multiple interface types (#1131)
c9d893f [feature/performance] Fail fast when doing remote transport calls inside incoming request contexts (#1119)
8942a70 [docs] Clarify that reverse proxy setups need trusted-proxies (#1127)
5ba5fb3 [chore/frogend] fix profile preview css, use role info (#1130)
1281a9f [chore/frontend] remove references to unused bundle.js (#1128)
50dc179 [feature] Prune timelines once per hour to plug memory leak (#1117)
90bbcf1 [docs] Document http/s/socks5 proxy use (#1118)
11cd608 [chore] fix broken buildx (whoops) (#1116)
a898160 [chore] use kv.KVStore also for S3 storage (#1113)
6d43319 [docs] Document non-buildx cross compilation for docker image (#1115)
f88cb3a [chore] markdown: disable Smartypants rendering (#1111)
b153808 [docs] Add first draft of FAQ (#1086)
0c2971a [chore] update readme with kim's links (#1093)
274626a [chore]: Bump github.com/minio/minio-go/v7 from 7.0.43 to 7.0.44 (#1107)
4a95385 [chore] simplify logging to remove "safetywriter" given os.File has concurrency protection (#1083)
2eea3d5 [chore] improve errors returned fetching account/statues from DB (#1084)
5d55e8d [performance] add account block DB cache and remove block query joins (#1085)
9be1685 [bugfix] fix possible infinite loop on federated AP profile delete (#1091)
0490440 [docs] update forking instructions (#1080)
be3d999 [chore] Little Dockerfile updates (#1071)
67106c9 [feature] Support markdown format for Account bio/note (#1037)
2216f25 [docs] Move and document logs (#1076)
c964856 [docs] Remove trailing / from proxy_pass for nginx (#1077)
45ae719 [performance] replace account emojis relational query with separate calls to emojiDB to rely on cache (#1074)
dccc2ee [performance] replace status query relationals with separate calls in order to rely on caches more (#1073)
d98a48b [performance] don't use relations to select notification structs, use caches instead (#1072)
91c3489 [docs] Add AUR Reference (#1054)
c56998f [docs] add account domain documentation (#1065)
c1824b0 [chore] Replace blocking Floc with Topics. (#1068)
1852175 [docs] Update docker.md with docker tag / version stuff (#1067)
f3e87ba [chore] cicd: snapshot snapshot instead of latest (#1066)
81c1fe0 [frogend] upgrade deps (#1063)
aa5c4e0 [frogend] Emoji categories (#1051)
940abc2 [chore] reversion: use specific columns for updating user again (#1059)
8598dea [chore] update database caching library (#1040)
9ab6013 [docs] Both HTTP proxies and NAT can cause rate limiting issues (#1053)
9ebc29b [chore] Update .drone.yml signature (#1052)
1f256e2 [chore] refactor test/cliparsing.sh into a go test below internal/config (#1036)
5210977 [bugfix] Fix unicode-unaware word boundary check in hashtags (#1049)
fece7fa [chore] fix profile spacing on very small screens (#1050)
a39a664 [feature] Serialize local account role via API, and show it via web view (#1045)
4cd00d5 [feature] Allow newly uploaded emojis to be placed in categories (#939)
8c20ccd [chore] Remove unused admin account suspend action (#1047)
e2e2bed [docs] Use correct Friendica link in README (#1046)
d120743 [feature] add instance-expose-public-timeline flag (#1039)
8f2d3ca [chore]: Bump codeberg.org/gruf/go-cache/v3 from 3.1.7 to 3.1.8 (#1043)
96f11e7 [bugfix] Fix login on Mastodon iOS app for users with no statuses (#1042)
e8c733d [chore] bump go-cache to v3.1.7 to fix possible issues with zero value keys (#1038)
f7cde0d [documentation] Change default log path (#1030)
6fb4765 [chore] Fixes + updates in emoji dereferencing logic (#1022)
edcee14 [feature] Read + Write tombstones for deleted Actors (#1005)
948e90b [feature] S3: add config flag to proxy S3 media (#1014)
3ce0e33 [chore] close in-storage media reader before opening write, no need to leave it hanging around (#1016)
b755906 [docs] postgres collation warning (#1017)
847a466 [docs] Replace old references to the previous streaming with websockets (#1015)
ebff71f [chore/frontend] CI steps for frontend stuff (#997)
ad08c6c [frontend] fix conflict introduced by merge (#1007)
b4f7316 [feature] Make instance thumbnail configurable via admin panel (#973)
eb25739 [frontend] Custom Emoji Deletion (#994)
be011b1 [chore]: Bump github.com/spf13/viper from 1.13.0 to 1.14.0 (#1003)
a51da97 [chore]: Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#1002)
a9a43be [chore]: Bump github.com/microcosm-cc/bluemonday from 1.0.20 to 1.0.21 (#1004)
18e7e00 [chore] dependabot: prefix correctly, ignore npm deps (#1001)
b08fd12 [docs] add link to SELinux policy (#993)
0e57246 [feature] various worker / request queue improvements (#995)
7c0bbd3 [chore] update gruf libraries (#996)
0d51d5c [docs] refer to the latest release version (#992)
53a1e47 [chore] Fix rel="nofollow" so that it only applies to external links (#991)
076680a [chore] Bump github.com/tdewolff/minify/v2 from 2.12.1 to 2.12.4 (#985)
459a5c8 [chore] Bump github.com/minio/minio-go/v7 from 7.0.37 to 7.0.43 (#983)
a5f31e5 [chore] Bump github.com/spf13/cobra from 1.5.0 to 1.6.1 (#982)
e7978f6 [chore] Bump github.com/go-playground/validator/v10 from 10.11.0 to 10.11.1 (#980)
1638470 Bump golang.org/x/text from 0.3.7 to 0.4.0 (#981)
1a23fb0 [chore] Enable Dependabot support for Go modules (#976)
05a8baa [bugfix] KVStore doesn't like lost+found directory (#972)
298a7ad [docs] add note about Alpha status right at the top (#971)
f800970 [chore] gitignore /bin entry (#970)
4d66fb9 [feature] Make rate limit requests amount configurable (#966)
15be356 [bugfix] Check media-description-min-chars on submission of new status (#960)
fc9038d bump dependencies (#959)
bcb80d3 [chore] bump gruf/go-store to v2 (#953)
a9addb5 [bugfix] Increase field size limits when registering apps (#958)
ee6a0a1 [bugfix] use the landing page user directly (#956)
2311c8e [docs] add matrix space to readme (#952)
1dfa7fe [bugfix] Wrap media in read closer (#941)
bd05040 [bugfix] Use []rune to check length of user-submitted text (#948)
f3fc040 [feature] Allow user to show instead of landing page on / (#922)
c4c7139 [frontend] change bundler to skulk (#942)
f81f1e7 [chore] Bump CI dependencies (#944)
29a71cf [frontend] Fix#923 and markdown css (#925)
4a925e4 [bugfix] create admin_account_actions table in tx (#940)
ba46e62 [docs] Update apache-httpd.md (#937)
47de702 [docs] Change Apache SSL setup to automatic and manual mode (#936)
ea90d12 [docs] Add Apache HTTP Server without LetsEncrypt (#935)
972bd17 [docs] Update Apache2 HTTP Server docs for websockets (#934)
c0a2d70 [docs] Update swagger.md (#933)
31f0f27 [bugfix] Fix imports for helpers.gen.go (#924)
c7ba195 [bugfix] Prevent future statuses showing in timelines (#932)
2a83390 [chore] update profile screenshot (#927)
b4a83e4 FIx typo (#918)
ccd5b34 [docs] Use correct form for status submit (#915)
f7416d6 [feature] Add emoji DELETE handler at /api/v1/admin/custom_emojis (#913)
6a95f5f [feature] Add /api/v1/admin/custom_emojis/{id} endpoint for single emoji GET (#910)
70d65b6 [feature] Refetch emojis when they change on remote instances (#905)
3ca7164 [frontend] Use new GET custom_emoji admin api (#908)
30aaedb [frontend] use ISO639 library for language selection (#909)
80c2833 [frontend] small fixes (#907)
eb85ef7 [feature] Add /api/v1/admin/custom_emojis endpoint (#902)
5cd0872 [bugfix] add in-use checks for admin cli account creation (#904)
832befd [chore] Make paging logic more generic (#901)
8066306 [feature] Add opt-in RSS feed for account's latest Public posts (#897)
aa07750 [chore] Standardize database queries, use bun.Ident() properly (#886)
e58a6a2 [performance] cache domains after max retries in transport (#884)
3bb45b7 [feature] oob oauth token support (#889)
5cf0f99 [bugfix] Fix new domain block date (#893)
f8528aa [feature] Add emoji image size to instance response (#892)
41aad21 [frontend] Make emojis v. slightly larger (#891)
51ff62d [chore] Reduced distributed assets with 'optipng -o7 -zm1-9 -keep FILENAME' between 28-56% (#890)
359ed1b [bugfix] Use background context instead of request context for async processing (#888)
1a56352 [frontend] scroll to highlighted toot, improve highlight (#885)
fe238f8 [frontend] change spacing of status, text always on it's own line, move status date on mobile (#883)
3d9fb49 [chore] Old browser fixes (#882)
5249294 [chore] Bundler restructure (#880)
56f53a2 ...
Patchlevel 8b (Aug 2021)
BUGS FIXED:
o Adding points to splines works if boxes are present in the figure.
o Stay in the working directory when browsing picture files.
Patchlevel 8b (Aug 2021)
NEW FEATURES:
o Detect the output language from the output file name.
o On the command line, a minus (-) as input or output file name refers
to standard input or standard output.
BUGS FIXED:
Ticket numbers refer to https://sourceforge.net/p/mcj/tickets/#.
o Correct buffer overflows and segfaults, mainly due to maliciously
crafted input files, tickets #113-117, #122, #123, #125-#135.
o With -Lepic -P, generate a complete tex file.
o Correctly produce a gif if a transparent color is given, ticket #121.
o Return with error if no space is left on the device. Ticket #101.
editors/ee was originally renamed to editors/easyedit due to conflict
with the now non-existent graphics/ee (former GNOME1 package).
Currently editors/ee is in par with the most recent available
version of EasyEdit.
Python 3.11.1 final
Security
gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.
This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printing.
gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module
gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.
gh-98739: Update bundled libexpat to 2.5.0
gh-97612: Fix a shell code injection vulnerability in the get-remote-certificate.py example script. The script no longer uses a shell to run openssl commands. Issue reported and initial fix by Caleb Shortt. Patch by Victor Stinner.
Core and Builtins
gh-99886: Fix a crash when an object which does not have a dictionary frees its instance values.
gh-99891: Fix a bug in the tokenizer that could cause infinite recursion when showing syntax warnings that happen in the first line of the source. Patch by Pablo Galindo
gh-99729: Fix an issue that could cause frames to be visible to Python code as they are being torn down, possibly leading to memory corruption or hard crashes of the interpreter.
gh-99578: Fix a reference bug in _imp.create_builtin() after the creation of the first sub-interpreter for modules builtins and sys. Patch by Victor Stinner.
gh-99581: Fixed a bug that was causing a buffer overflow if the tokenizer copies a line missing the newline caracter from a file that is as long as the available tokenizer buffer. Patch by Pablo galindo
gh-99553: Fix bug where an ExceptionGroup subclass can wrap a BaseException.
gh-99370: Fix zip path for venv created from a non-installed python on POSIX platforms.
gh-99298: Fix an issue that could potentially cause incorrect error handling for some bytecode instructions.
gh-99205: Fix an issue that prevented PyThreadState and PyInterpreterState memory from being freed properly.
gh-99181: Fix failure in except* with unhashable exceptions.
gh-99204: Fix calculation of sys._base_executable when inside a POSIX virtual environment using copies of the python binary when the base installation does not provide the executable name used by the venv. Calculation will fall back to alternative names (“python<MAJOR>”, “python<MAJOR>.<MINOR>”).
gh-96055: Update faulthandler to emit an error message with the proper unexpected signal number. Patch by Dong-hee Na.
gh-99153: Fix location of SyntaxError for a try block with both except and except*.
gh-99103: Fix the error reporting positions of specialized traceback anchors when the source line contains Unicode characters.
gh-98852: Fix subscription of type aliases containing bare generic types or types like TypeVar: for example tuple[A, T][int] and tuple[TypeVar, T][int], where A is a generic type, and T is a type variable.
gh-98925: Lower the recursion depth for marshal on WASI to support wasmtime 2.0/main.
gh-98783: Fix multiple crashes in debug mode when str subclasses are used instead of str itself.
gh-99257: Fix an issue where member descriptors (such as those for __slots__) could behave incorrectly or crash instead of raising a TypeError when accessed via an instance of an invalid type.
gh-98374: Suppress ImportError for invalid query for help() command. Patch by Dong-hee Na.
gh-98415: Fix detection of MAC addresses for uuid on certain OSs. Patch by Chaim Sanders
gh-92119: Print exception class name instead of its string representation when raising errors from ctypes calls.
gh-96078: os.sched_yield() now release the GIL while calling sched_yield(2). Patch by Dong-hee Na.
gh-93354: Fix an issue that could delay the specialization of PRECALL instructions.
gh-97943: Bugfix: PyFunction_GetAnnotations() should return a borrowed reference. It was returning a new reference.
gh-97779: Ensure that all Python frame objects are backed by “complete” frames.
gh-97591: Fixed a missing incref/decref pair in Exception.__setstate__(). Patch by Ofey Chan.
gh-94526: Fix the Python path configuration used to initialized sys.path at Python startup. Paths are no longer encoded to UTF-8/strict to avoid encoding errors if it contains surrogate characters (bytes paths are decoded with the surrogateescape error handler). Patch by Victor Stinner.
gh-95921: Fix overly-broad source position information for chained comparisons used as branching conditions.
gh-96387: At Python exit, sometimes a thread holding the GIL can wait forever for a thread (usually a daemon thread) which requested to drop the GIL, whereas the thread already exited. To fix the race condition, the thread which requested the GIL drop now resets its request before exiting. Issue discovered and analyzed by Mingliang ZHAO. Patch by Victor Stinner.
gh-96864: Fix a possible assertion failure, fatal error, or SystemError if a line tracing event raises an exception while opcode tracing is enabled.
gh-96678: Fix undefined behaviour in C code of null pointer arithmetic.
gh-96754: Make sure that all frame objects created are created from valid interpreter frames. Prevents the possibility of invalid frames in backtraces and signal handlers.
gh-95196: Disable incorrect pickling of the C implemented classmethod descriptors.
gh-96005: On WASI ENOTCAPABLE is now mapped to PermissionError. The errno modules exposes the new error number. getpath.py now ignores PermissionError when it cannot open landmark files pybuilddir.txt and pyenv.cfg.
gh-93696: Allow pdb to locate source for frozen modules in the standard library.
bpo-31718: Raise ValueError instead of SystemError when methods of uninitialized io.IncrementalNewlineDecoder objects are called. Patch by Oren Milman.
bpo-38031: Fix a possible assertion failure in io.FileIO when the opener returns an invalid file descriptor.
Library
gh-100001: Also escape s in the http.server BaseHTTPRequestHandler.log_message so that it is technically possible to parse the line and reconstruct what the original data was. Without this a xHH is ambiguious as to if it is a hex replacement we put in or the characters r”x” came through in the original request line.
gh-93453: asyncio.get_event_loop() now only emits a deprecation warning when a new event loop was created implicitly. It no longer emits a deprecation warning if the current event loop was set.
gh-51524: Fix bug when calling trace.CoverageResults with valid infile.
gh-99645: Fix a bug in handling class cleanups in unittest.TestCase. Now addClassCleanup() uses separate lists for different TestCase subclasses, and doClassCleanups() only cleans up the particular class.
gh-97001: Release the GIL when calling termios APIs to avoid blocking threads.
gh-99341: Fix ast.increment_lineno() to also cover ast.TypeIgnore when changing line numbers.
gh-99418: Fix bug in urllib.parse.urlparse() that causes URL schemes that begin with a digit, a plus sign, or a minus sign to be parsed incorrectly.
gh-99382: Check the number of arguments in substitution in user generics containing a TypeVarTuple and one or more TypeVar.
gh-99379: Fix substitution of ParamSpec followed by TypeVarTuple in generic aliases.
gh-99344: Fix substitution of TypeVarTuple and ParamSpec together in user generics.
gh-74044: Fixed bug where inspect.signature() reported incorrect arguments for decorated methods.
gh-99275: Fix SystemError in ctypes when exception was not set during __initsubclass__.
gh-99277: Remove older version of _SSLProtocolTransport.get_write_buffer_limits in asyncio.sslproto
gh-99248: fix negative numbers failing in verify()
gh-99155: Fix statistics.NormalDist pickle with 0 and 1 protocols.
gh-93464: enum.auto() is now correctly activated when combined with other assignment values. E.g. ONE = auto(), 'some text' will now evaluate as (1, 'some text').
gh-99134: Update the bundled copy of pip to version 22.3.1.
gh-83004: Clean up refleak on failed module initialisation in _zoneinfo
gh-83004: Clean up refleaks on failed module initialisation in in _pickle
gh-83004: Clean up refleak on failed module initialisation in _io.
gh-98897: Fix memory leak in math.dist() when both points don’t have the same dimension. Patch by Kumar Aditya.
gh-98706: [3.11] Applied changes from importlib_metadata 4.11.4 through 4.13, including compatibility and robustness fixes for Distribution objects without _normalized_name, disallowing invalid inputs to Distribution.from_name, and refined behaviors in PathDistribution._name_from_stem and PathDistribution._normalized_name.
gh-98793: Fix argument typechecks in _overlapped.WSAConnect() and _overlapped.Overlapped.WSASendTo() functions.
gh-98744: Prevent crashing in traceback when retrieving the byte-offset for some source files that contain certain unicode characters.
gh-98740: Fix internal error in the re module which in very rare circumstances prevented compilation of a regular expression containing a conditional expression without the “else” branch.
gh-98703: Fix asyncio.StreamWriter.drain() to call protocol.connection_lost callback only once on Windows.
gh-98624: Add a mutex to unittest.mock.NonCallableMock to protect concurrent access to mock attributes.
gh-89237: Fix hang on Windows in subprocess.wait_closed() in asyncio with ProactorEventLoop. Patch by Kumar Aditya.
gh-98458: Fix infinite loop in unittest when a self-referencing chained exception is raised
gh-97928: tkinter.Text.count() raises now an exception for options starting with “-” instead of silently ignoring them.
gh-97966: On uname_result, restored expectation that _fields and _asdict would include all six properties including processor.
gh-98307: A createSocket() method was added to SysLogHandler.
gh-96035: Fix bug in urllib.parse.urlparse() that causes certain port numbers containing whitespace, underscores, plus and minus signs, or non-ASCII digits to be incorrectly accepted.
gh-98251: Allow venv to pass along PYTHON* variables to ensurepip and pip when they do not impact path resolution
gh-98178: On macOS, fix a crash in syslog.syslog() in multi-threaded applications. On macOS, the libc syslog() function is not thread-safe, so syslog.syslog() no longer releases the GIL to call it. Patch by Victor Stinner.
gh-96151: Allow BUILTINS to be a valid field name for frozen dataclasses.
gh-87730: Wrap network errors consistently in urllib FTP support, so the test suite doesn’t fail when a network is available but the public internet is not reachable.
gh-98086: Make sure patch.dict() can be applied on async functions.
gh-90985: Earlier in 3.11 we deprecated asyncio.Task.cancel("message"). We realized we were too harsh, and have undeprecated it.
gh-97837: Change deprecate warning message in unittest from
It is deprecated to return a value!=None
to
It is deprecated to return a value that is not None from a test case
gh-97825: Fixes AttributeError when subprocess.check_output() is used with argument input=None and either of the arguments encoding or errors are used.
gh-82836: Fix is_private properties in the ipaddress module. Previously non-private networks (0.0.0.0/0) would return True from this method; now they correctly return False.
gh-96827: Avoid spurious tracebacks from asyncio when default executor cleanup is delayed until after the event loop is closed (e.g. as the result of a keyboard interrupt).
gh-97592: Avoid a crash in the C version of asyncio.Future.remove_done_callback() when an evil argument is passed.
gh-97639: Remove tokenize.NL check from tabnanny.
gh-73588: Fix generation of the default name of tkinter.Checkbutton. Previously, checkbuttons in different parent widgets could have the same short name and share the same state if arguments “name” and “variable” are not specified. Now they are globally unique.
gh-97005: Update bundled libexpat to 2.4.9
gh-85760: Fix race condition in asyncio where process_exited() called before the pipe_data_received() leading to inconsistent output. Patch by Kumar Aditya.
gh-96819: Fixed check in multiprocessing.resource_tracker that guarantees that the length of a write to a pipe is not greater than PIPE_BUF.
gh-96741: Corrected type annotation for dataclass attribute pstats.FunctionProfile.ncalls to be str.
gh-95987: Fix repr of Any subclasses.
gh-96388: Work around missing socket functions in socket’s __repr__.
gh-96073: In inspect, fix overeager replacement of “typing.” in formatting annotations.
gh-96192: Fix handling of bytes path-like objects in os.ismount().
gh-96052: Fix handling compiler warnings (SyntaxWarning and DeprecationWarning) in codeop.compile_command() when checking for incomplete input. Previously it emitted warnings and raised a SyntaxError. Now it always returns None for incomplete input without emitting any warnings.
gh-88863: To avoid apparent memory leaks when asyncio.open_connection() raises, break reference cycles generated by local exception and future instances (which has exception instance as its member var). Patch by Dong Uk, Kang.
gh-91212: Fixed flickering of the turtle window when the tracer is turned off. Patch by Shin-myoung-serp.
gh-88050: Fix asyncio subprocess transport to kill process cleanly when process is blocked and avoid RuntimeError when loop is closed. Patch by Kumar Aditya.
gh-93858: Prevent error when activating venv in nested fish instances.
gh-91078: TarFile.next() now returns None when called on an empty tarfile.
bpo-47220: Document the optional callback parameter of WeakMethod. Patch by Géry Ogam.
bpo-46364: Restrict use of sockets instead of pipes for stdin of subprocesses created by asyncio to AIX platform only.
bpo-38523: shutil.copytree() now applies the ignore_dangling_symlinks argument recursively.
bpo-36267: Fix IndexError in argparse.ArgumentParser when a store_true action is given an explicit argument.
Documentation
gh-92892: Document that calling variadic functions with ctypes requires special care on macOS/arm64 (and possibly other platforms).
gh-85525: Remove extra row
gh-95588: Clarified the conflicting advice given in the ast documentation about ast.literal_eval() being “safe” for use on untrusted input while at the same time warning that it can crash the process. The latter statement is true and is deemed unfixable without a large amount of work unsuitable for a bugfix. So we keep the warning and no longer claim that literal_eval is safe.
bpo-41825: Restructured the documentation for the os.wait* family of functions, and improved the docs for os.waitid() with more explanation of the possible argument constants.
Tests
gh-99892: Skip test_normalization() of test_unicodedata if it fails to download NormalizationTest.txt file from pythontest.net. Patch by Victor Stinner.
gh-99934: Correct test_marsh on (32 bit) x86: test_deterministic sets was failing.
gh-99659: Optional big memory tests in test_sqlite3 now catch the correct sqlite.DataError exception type in case of too large strings and/or blobs passed.
gh-98713: Fix a bug in the typing tests where a test relying on CPython-specific implementation details was not decorated with @cpython_only and was not skipped on other implementations.
gh-87390: Add tests for star-unpacking with PEP 646, and some other miscellaneous PEP 646 tests.
gh-96853: Added explicit coverage of Py_Initialize (and hence Py_InitializeEx) back to the embedding tests (all other embedding tests migrated to Py_InitializeFromConfig in Python 3.11)
bpo-34272: Some C API tests were moved into the new Lib/test/test_capi/ directory.
Build
gh-99086: Fix -Wimplicit-int, -Wstrict-prototypes, and -Wimplicit-function-declaration compiler warnings in configure checks.
gh-99337: Fix a compilation issue with GCC 12 on macOS.
gh-99086: Fix -Wimplicit-int compiler warning in configure check for PTHREAD_SCOPE_SYSTEM.
gh-98872: Fix a possible fd leak in Programs/_freeze_module.c introduced in Python 3.11.
gh-99016: Fix build with PYTHON_FOR_REGEN=python3.8.
gh-97731: Specify the full path to the source location for make docclean (needed for cross-builds).
gh-98707: Don’t use vendored libmpdec headers if --with-system-libmpdec is passed to configure. Don’t use vendored libexpat headers if --with-system-expat is passed to !configure.
gh-96761: Fix the build process of clang compiler for _bootstrap_python if LTO optimization is applied. Patch by Matthias Görgens and Dong-hee Na.
gh-96883: wasm32-emscripten builds for browsers now include concurrent.futures for asyncio and unittest.mock.
gh-84461: wasm32-emscripten platform no longer builds resource module, getresuid(), getresgid(), and their setters. The APIs are stubs and not functional.
gh-94280: Updated pegen regeneration script on Windows to find and use Python 3.9 or higher. Prior to this, pegen regeneration already required 3.9 or higher, but the script may have used lower versions of Python.
Windows
gh-99345: Use faster initialization functions to detect install location for Windows Store package
gh-98629: Fix initialization of sys.version and sys._git on Windows
gh-99442: Fix handling in Python Launcher for Windows when argv[0] does not include a file extension.
gh-98689: Update Windows builds to zlib v1.2.13. v1.2.12 has CVE-2022-37434, but the vulnerable inflateGetHeader API is not used by Python.
gh-98790: Assumes that a missing DLLs directory means that standard extension modules are in the executable’s directory.
gh-98745: Update py.exe launcher to install 3.11 by default and 3.12 on request.
gh-98692: Fix the Python Launcher for Windows ignoring unrecognized shebang lines instead of treating them as local paths
gh-94328: Update Windows installer to use SQLite 3.39.4.
gh-97728: Fix possible crashes caused by the use of uninitialized variables when pass invalid arguments in os.system() on Windows and in Windows-specific modules (like winreg).
gh-96965: Update libffi to 3.4.3
gh-94781: Fix pcbuild.proj to clean previous instances of ouput files in Python\deepfreeze and Python\frozen_modules directories on Windows. Patch by Charlie Zhao.
bpo-40882: Fix a memory leak in multiprocessing.shared_memory.SharedMemory on Windows.
macOS
gh-87235: On macOS python3 /dev/fd/9 9</path/to/script.py failed for any script longer than a couple of bytes.
gh-98940: Fix Mac/Extras.install.py file filter bug.
gh-94328: Update macOS installer to SQLite 3.39.4.
IDLE
gh-97527: Fix a bug in the previous bugfix that caused IDLE to not start when run with 3.10.8, 3.12.0a1, and at least Microsoft Python 3.10.2288.0 installed without the Lib/test package. 3.11.0 was never affected.
Tools/Demos
gh-95853: The wasm_build.py script now pre-builds Emscripten ports, checks for broken EMSDK versions, and warns about pkg-config env vars.
gh-95853: The new tool Tools/wasm/wasm_builder.py automates configure, compile, and test steps for building CPython on WebAssembly platforms.
gh-95731: Fix handling of module docstrings in Tools/i18n/pygettext.py.
C API
gh-98680: PyBUF_* constants were marked as part of Limited API of Python 3.11+. These were available in 3.11.0 with Py_LIMITED_API defined for 3.11, and are necessary to use the buffer API.
gh-98978: Fix use-after-free in Py_SetPythonHome(NULL), Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL) function calls. Issue reported by Benedikt Reinartz. Patch by Victor Stinner.
gh-96853: Py_InitializeEx now correctly calls PyConfig_Clear after initializing the interpreter (the omission didn’t cause a memory leak only because none of the dynamically allocated config fields are populated by the wrapper function)
Python 3.10.9 final
Security
gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.
This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printing.
gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module
gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.
gh-98739: Update bundled libexpat to 2.5.0
gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454).
gh-97514: On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected.
Abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier.
This prevents Linux CVE-2022-42919.
Core and Builtins
gh-99578: Fix a reference bug in _imp.create_builtin() after the creation of the first sub-interpreter for modules builtins and sys. Patch by Victor Stinner.
gh-99581: Fixed a bug that was causing a buffer overflow if the tokenizer copies a line missing the newline caracter from a file that is as long as the available tokenizer buffer. Patch by Pablo galindo
gh-96055: Update faulthandler to emit an error message with the proper unexpected signal number. Patch by Dong-hee Na.
gh-98852: Fix subscription of types.GenericAlias instances containing bare generic types: for example tuple[A, T][int], where A is a generic type, and T is a type variable.
gh-98415: Fix detection of MAC addresses for uuid on certain OSs. Patch by Chaim Sanders
gh-92119: Print exception class name instead of its string representation when raising errors from ctypes calls.
gh-93696: Allow pdb to locate source for frozen modules in the standard library.
bpo-31718: Raise ValueError instead of SystemError when methods of uninitialized io.IncrementalNewlineDecoder objects are called. Patch by Oren Milman.
bpo-38031: Fix a possible assertion failure in io.FileIO when the opener returns an invalid file descriptor.
Library
gh-100001: Also escape s in the http.server BaseHTTPRequestHandler.log_message so that it is technically possible to parse the line and reconstruct what the original data was. Without this a xHH is ambiguious as to if it is a hex replacement we put in or the characters r”x” came through in the original request line.
gh-93453: asyncio.get_event_loop() now only emits a deprecation warning when a new event loop was created implicitly. It no longer emits a deprecation warning if the current event loop was set.
gh-51524: Fix bug when calling trace.CoverageResults with valid infile.
gh-99645: Fix a bug in handling class cleanups in unittest.TestCase. Now addClassCleanup() uses separate lists for different TestCase subclasses, and doClassCleanups() only cleans up the particular class.
gh-97001: Release the GIL when calling termios APIs to avoid blocking threads.
gh-99341: Fix ast.increment_lineno() to also cover ast.TypeIgnore when changing line numbers.
gh-74044: Fixed bug where inspect.signature() reported incorrect arguments for decorated methods.
gh-99275: Fix SystemError in ctypes when exception was not set during __initsubclass__.
gh-99155: Fix statistics.NormalDist pickle with 0 and 1 protocols.
gh-99134: Update the bundled copy of pip to version 22.3.1.
gh-99130: Apply bugfixes from importlib_metadata 4.11.4, namely: In PathDistribution._name_from_stem, avoid including parts of the extension in the result. In PathDistribution._normalized_name, ensure names loaded from the stem of the filename are also normalized, ensuring duplicate entry points by packages varying only by non-normalized name are hidden.
gh-83004: Clean up refleak on failed module initialisation in _zoneinfo
gh-83004: Clean up refleaks on failed module initialisation in in _pickle
gh-83004: Clean up refleak on failed module initialisation in _io.
gh-98897: Fix memory leak in math.dist() when both points don’t have the same dimension. Patch by Kumar Aditya.
gh-98793: Fix argument typechecks in _overlapped.WSAConnect() and _overlapped.Overlapped.WSASendTo() functions.
gh-98740: Fix internal error in the re module which in very rare circumstances prevented compilation of a regular expression containing a conditional expression without the “else” branch.
gh-98703: Fix asyncio.StreamWriter.drain() to call protocol.connection_lost callback only once on Windows.
gh-98624: Add a mutex to unittest.mock.NonCallableMock to protect concurrent access to mock attributes.
gh-89237: Fix hang on Windows in subprocess.wait_closed() in asyncio with ProactorEventLoop. Patch by Kumar Aditya.
gh-98458: Fix infinite loop in unittest when a self-referencing chained exception is raised
gh-97928: tkinter.Text.count() raises now an exception for options starting with “-” instead of silently ignoring them.
gh-97966: On uname_result, restored expectation that _fields and _asdict would include all six properties including processor.
gh-98331: Update the bundled copies of pip and setuptools to versions 22.3 and 65.5.0 respectively.
gh-96035: Fix bug in urllib.parse.urlparse() that causes certain port numbers containing whitespace, underscores, plus and minus signs, or non-ASCII digits to be incorrectly accepted.
gh-98251: Allow venv to pass along PYTHON* variables to ensurepip and pip when they do not impact path resolution
gh-98178: On macOS, fix a crash in syslog.syslog() in multi-threaded applications. On macOS, the libc syslog() function is not thread-safe, so syslog.syslog() no longer releases the GIL to call it. Patch by Victor Stinner.
gh-96151: Allow BUILTINS to be a valid field name for frozen dataclasses.
gh-98086: Make sure patch.dict() can be applied on async functions.
gh-88863: To avoid apparent memory leaks when asyncio.open_connection() raises, break reference cycles generated by local exception and future instances (which has exception instance as its member var). Patch by Dong Uk, Kang.
gh-93858: Prevent error when activating venv in nested fish instances.
bpo-46364: Restrict use of sockets instead of pipes for stdin of subprocesses created by asyncio to AIX platform only.
bpo-38523: shutil.copytree() now applies the ignore_dangling_symlinks argument recursively.
bpo-36267: Fix IndexError in argparse.ArgumentParser when a store_true action is given an explicit argument.
Documentation
gh-92892: Document that calling variadic functions with ctypes requires special care on macOS/arm64 (and possibly other platforms).
Tests
gh-99892: Skip test_normalization() of test_unicodedata if it fails to download NormalizationTest.txt file from pythontest.net. Patch by Victor Stinner.
bpo-34272: Some C API tests were moved into the new Lib/test/test_capi/ directory.
Build
gh-99086: Fix -Wimplicit-int, -Wstrict-prototypes, and -Wimplicit-function-declaration compiler warnings in configure checks.
gh-99086: Fix -Wimplicit-int compiler warning in configure check for PTHREAD_SCOPE_SYSTEM.
gh-97731: Specify the full path to the source location for make docclean (needed for cross-builds).
gh-98671: Fix NO_MISALIGNED_ACCESSES being not defined for the SHA3 extension when HAVE_ALIGNED_REQUIRED is set. Allowing builds on hardware that unaligned memory accesses are not allowed.
Windows
gh-99345: Use faster initialization functions to detect install location for Windows Store package
gh-98689: Update Windows builds to zlib v1.2.13. v1.2.12 has CVE-2022-37434, but the vulnerable inflateGetHeader API is not used by Python.
gh-94328: Update Windows installer to use SQLite 3.39.4.
bpo-40882: Fix a memory leak in multiprocessing.shared_memory.SharedMemory on Windows.
macOS
gh-94328: Update macOS installer to SQLite 3.39.4.
IDLE
gh-97527: Fix a bug in the previous bugfix that caused IDLE to not start when run with 3.10.8, 3.12.0a1, and at least Microsoft Python 3.10.2288.0 installed without the Lib/test package. 3.11.0 was never affected.
Tools/Demos
gh-95731: Fix handling of module docstrings in Tools/i18n/pygettext.py.
Python 3.9.16 final
Security
gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.
This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printing.
gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module
gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.
gh-98739: Update bundled libexpat to 2.5.0
gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454).
gh-97514: On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected.
Abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier.
This prevents Linux CVE-2022-42919.
gh-68966: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed).
Python 3.8.16 final
Security
gh-100001: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.
This is done by changing the http.server BaseHTTPRequestHandler .log_message method to replace control characters with a \xHH hex escape before printing.
gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module
gh-98433: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name.
gh-98739: Update bundled libexpat to 2.5.0
gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454).
gh-68966: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed).
3.0.36: 2022-12-06
------------------
Fixes:
- Another Python 3.6 fix for a bug that was introduced in 3.0.34.
3.0.35: 2022-12-06
------------------
Fixes:
- Fix bug introduced in 3.0.34 for Python 3.6. Use asynccontextmanager
implementation from prompt_toolkit itself.
3.0.34: 2022-12-06
------------------
Fixes:
- Improve completion performance in various places.
- Improve renderer performance.
- Handle `KeyboardInterrupt` when the stacktrace of an unhandled error is
displayed.
- Use correct event loop in `Application.create_background_task()`.
- Fix `show_cursor` attribute in `ScrollablePane`.
7.0.4
Fixed
- The `alt` attributes are once again set in the cmap output. This was a
regression in Graphviz 7.0.2, that intentionally removed these but did not
account for the W3C specification making these attributes required when the
`href` attribute is set.
- Building Graphviz from source using the Autotools build system in now possible
on NetBSD.
- The ortho library now allocates trapezoid structures on-demand, removing the
“Trapezoid-table overflow” error that previously occurred when its upfront
estimation was exceeded.
7.0.3
Changed
* Support for the Intel C Compiler in the Autotools build system has been
removed.
* Fallback typedefs for `ssize_t` have been removed from the CMake build system.
version 2.88
Fix bug in --dynamic-host when an interface has /16 IPv4
address. Thanks to Mark Dietzer for spotting this.
Add --fast-dns-retry option. This gives dnsmasq the ability
to originate retries for upstream DNS queries itself, rather
than relying on the downstream client. This is most useful
when doing DNSSEC over unreliable upstream networks. It comes
with some cost in memory usage and network bandwidth.
Add --use-stale-cache option. When set, if a DNS name exists
in the cache, but its time-to-live has expired, dnsmasq will
return the data anyway. (It attempts to refresh the
data with an upstream query after returning the stale data.)
This can improve speed and reliability. It comes
at the expense of sometimes returning out-of-date data and
less efficient cache utilisation, since old data cannot be
flushed when its TTL expires, so the cache becomes
strictly least-recently-used.
Make --hostsdir (but NOT --dhcp-hostsdir and --dhcp-optsdir)
handle removal of whole files or entries within files.
Thanks to Dominik Derigs for the initial patches for this.
Fix bug, introduced in 2.87, which could result in DNS
servers being removed from the configuration when reloading
server configuration from DBus, or re-reading /etc/resolv.conf
Only servers from the same source should be replaced, but some
servers from other sources (i.e., hard coded or another dynamic source)
could mysteriously disappear. Thanks to all reporting this,
but especially Christopher J. Madsen who reduced the problem
to an easily reproducible case which saved much labour in
finding it.
Add --no-round-robin option.
Allow domain names as well as IP addresses when specifying
upstream DNS servers. There are some gotchas associated with this
(it will mysteriously fail to work if the dnsmasq instance
being started is in the path from the system resolver to the DNS),
and a seemingly sensible configuration like
--server=domain.name@1.2.3.4 is unactionable if domain.name
only resolves to an IPv6 address). There are, however,
cases where is can be useful. Thanks to Dominik Derigs for
the patch.
Handle DS records for unsupported crypto algorithms correctly.
Such a DS, as long as it is validated, should allow answers
in the domain it attests to be returned as unvalidated, and not
as a validation error.
Optimise reading large numbers of --server options. When re-reading
upstream servers from /etc/resolv.conf or other sources that
can change dnsmasq tries to avoid memory fragmentation by re-using
existing records that are being re-read unchanged. This involves
seaching all the server records for each new one installed.
During startup this search is pointless, and can cause long
start times with thousands of --server options because the work
needed is O(n^2). Handle this case more intelligently.
Thanks to Ye Zhou for spotting the problem and an initial patch.
If we detect that a DNS reply from upstream is malformed don't
return it to the requestor; send a SEVFAIL rcode instead.
libpng 1.6.39, is a maintenance release with various fixes and improvements, including a change to signal large PNG chunks as benign errors rather than hard errors.
vins
wiz
pin
nikita
jperkin
tsutsui
fcambus
gdt
adam