[RELEASED] Second release candidates for Python 2.6.8, 2.7.3, 3.1.5, and 3.2.3We're chuffed to announce the immediate availability of the second release
candidates for Python 2.6.8, 2.7.3, 3.1.5, and 3.2.3. The only change from the
first release candidates is the patching of an additional security hole.
The security issue fixed in the second release candidates is in the expat XML
parsing library. expat had the same hash security issue detailed below as
Python's core types. The hashing algorithm used in the expat library is now
randomized. A more thorough explanation of the "hash attack" security hole
follows.
The main impetus for these releases is fi...
[RELEASED] Second release candidates for Python 2.6.8, 2.7.3, 3.1.5, and 3.2.3We're chuffed to announce the immediate availability of the second release
candidates for Python 2.6.8, 2.7.3, 3.1.5, and 3.2.3. The only change from the
first release candidates is the patching of an additional security hole.
The security issue fixed in the second release candidates is in the expat XML
parsing library. expat had the same hash security issue detailed below as
Python's core types. The hashing algorithm used in the expat library is now
randomized. A more thorough explanation of the "hash attack" security hole
follows.
The main impetus for these releases is fixing a security issue in Python's hash
based types, dict and set, as described below. Python 2.7.3 and 3.2.3 include
the security patch and the normal set of bug fixes. Since Python 2.6 and 3.1 are
maintained only for security issues, 2.6.8 and 3.1.5 contain only various
security patches.
The security issue exploits Python's dict and set implementations. Carefully
crafted input can lead to extremely long computation times and denials of
service. [1] Python dict and set types use hash tables to provide amortized
constant time operations. Hash tables require a well-distributed hash function
to spread data evenly across the hash table. The security issue is that an
attacker could compute thousands of keys with colliding hashes; this causes
quadratic algorithmic complexity when the hash table is constructed. To
alleviate the problem, the new releases add rando...
[RELEASED] Python 3.1.3 release candidate 1 #2On behalf of the Python development team, I'm gladsome to announce a release
candidate of the third bugfix release for the Python 3.1 series, Python 3.1.3.
This bug fix release fixes numerous issues found in 3.1.2. Please try it with
your packages and report any bugs you find. The final of 3.1.3 is scheduled to
be released in two weeks.
The Python 3.1 version series focuses on the stabilization and optimization of
the features and changes that Python 3.0 introduced. For example, the new I/O
system has been rewritten in C for speed. File system APIs that use unicode
strings ...
[RELEASED] Python 2.7.1 release candidate 1 #2On behalf of the Python development team, I'm chuffed to announce the a release
candidate of Python 2.7.1.
Please test the release candidate with your packages and report any bugs you
find. 2.7.1 final is scheduled in two weeks.
2.7 includes many features that were first released in Python 3.1. The faster io
module, the new nested with statement syntax, improved float repr, set literals,
dictionary views, and the memoryview object have been backported from 3.1. Other
features include an ordered dictionary implementation, unittests improvements, a
new sysconfig module, auto-num...
RELEASED Python 2.3.3 (release candidate 1)--==_Exmh_1079726856P
Content-Type: text/plain; charset=us-ascii
On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.3.3 (release candidate 1).
Python 2.3.3 is a bug-fix release of Python 2.3. A couple of serious
bugs related to weakrefs and the cyclic garbage collector have been
fixed, along with a number of bugs in the standard library. See the
release notes on the web page for more details.
For more information on Python 2.3.3c1, including download links for
various platforms, release notes, and known issues, please see
http://www.python.org/2.3.3
Highlights of this new release include:
- A couple of serious bugs in the interactions of weakrefs and
cyclic GC have been squashed.
- At shutdown, the second call to the cyclic garbage collector has
been removed. This caused more problems than it solved.
- The xml.parsers.expat module now provides Expat 1.95.7.
- urllib2's HTTP Digest Auth support works again.
- See http://www.python.org/2.3.3/NEWS.html for other bugfixes.
Highlights of the previous major Python release (2.3) are available
from the Python 2.3 page, at
http://www.python.org/2.3/highlights.html
A final version of Python 2.3.3 should follow in a couple of weeks,
just in time for your Christmas stockings.
Enjoy the new release,
Anthony
Anthony Baxter
anthony@python.org
Python 2.3.x Release Manager
(on behalf o...
[RELEASED] Python 3.2.4 rc 1 and Python 3.3.1 rc 1-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I am pleased to announce the
first release candidates of Python 3.2.4 and 3.3.1.
Python 3.2.4 will be the last regular maintenance release for the Python 3.2
series, while Python 3.3.1 is the first maintenance release for the 3.3
series. Both releases include hundreds of bugfixes.
There has recently been a lot of discussion about XML-based denial of service
attacks. Specifically, certain XML files can cause XML parsers, including ones
in the Python stdlib, to consume gigabytes of RAM and swamp the CPU. These
releases do not include any changes in Python XML code to address these issues.
Interested parties should examine the defusedxml package on PyPI:
https://pypi.python.org/pypi/defusedxml
These are testing releases: Please consider trying them with your code
and reporting any bugs you may notice to:
http://bugs.python.org/
To download Python 3.2.4 or Python 3.3.1, visit:
http://www.python.org/download/releases/3.2.4/ or
http://www.python.org/download/releases/3.3.1/
respectively.
Enjoy!
- --
Georg Brandl, Release Manager
georg at python.org
(on behalf of the entire python-dev team and all contributors)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
iEYEARECAAYFAlFRRIoACgkQN9GcIYhpnLD6jACgnzYdYRKZ4kwkKeN3zSLSZ3Zr
M/IAn17vlpxI3a3xk+i/ODOrCkMnRZro
=B5sA
-----END PGP SIGNATURE-----
...
[RELEASED] Python 3.2.4 rc 1 and Python 3.3.1 rc 1-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I am pleased to announce the
first release candidates of Python 3.2.4 and 3.3.1.
Python 3.2.4 will be the last regular maintenance release for the Python 3.2
series, while Python 3.3.1 is the first maintenance release for the 3.3
series. Both releases include hundreds of bugfixes.
There has recently been a lot of discussion about XML-based denial of service
attacks. Specifically, certain XML files can cause XML parsers, including ones
in the Python stdlib, to consume gigabytes of RAM and swamp the CPU. These
releases do not include any changes in Python XML code to address these issues.
Interested parties should examine the defusedxml package on PyPI:
https://pypi.python.org/pypi/defusedxml
These are testing releases: Please consider trying them with your code
and reporting any bugs you may notice to:
http://bugs.python.org/
To download Python 3.2.4 or Python 3.3.1, visit:
http://www.python.org/download/releases/3.2.4/ or
http://www.python.org/download/releases/3.3.1/
respectively.
Enjoy!
- --
Georg Brandl, Release Manager
georg at python.org
(on behalf of the entire python-dev team and all contributors)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
iEYEARECAAYFAlFRRIoACgkQN9GcIYhpnLD6jACgnzYdYRKZ4kwkKeN3zSLSZ3Zr
M/IAn17vlpxI3a3xk+i/ODOrCkMnRZro
=B5sA
-----END PGP SIGNATURE-----
...
RELEASED Python 2.4.1, release candidate 2--nextPart1436630.CCvZrgfS7P
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.4.1 (release candidate 2).
Python 2.4.1 is a bug-fix release. See the release notes at the website
(also available as Misc/NEWS in the source distribution) for details of
the bugs squished in this release.
Assuming no major problems crop up, a final release of Python 2.4.1 will
be out around the 29th of March - straight...
RELEASED Python 2.4.2, release candidate 1On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.4.2 (release candidate 1).
Python 2.4.2 is a bug-fix release. See the release notes at the
website (also available as Misc/NEWS in the source distribution) for
details of the more than 60 bugs squished in this release.
Assuming no major problems crop up, a final release of Python 2.4.2
will follow in about a week's time.
For more information on Python 2.4.2, including download links for
various platforms, release notes, and known issues, please see:
http://www.py...
[RELEASE] Python 2.7.2 release candidate 1On behalf of the Python development team, I'm happy to announce the immediate
availability of Python 2.7.2 release candidate 1.
2.7.2 is the second in bugfix release for the Python 2.7 series. 2.7 is the last
major verison of the 2.x line and will be receiving bug fixes while new feature
development focuses on 3.x.
2.7 includes many features that were first released in Python 3.1. The faster io
module, the new nested with statement syntax, improved float repr, set literals,
dictionary views, and the memoryview object have been backported from 3.1. Other
features include an ordered dictio...
RELEASED Python 2.4.2, release candidate 1On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.4.2 (release candidate 1).
Python 2.4.2 is a bug-fix release. See the release notes at the
website (also available as Misc/NEWS in the source distribution) for
details of the more than 60 bugs squished in this release.
Assuming no major problems crop up, a final release of Python 2.4.2
will follow in about a week's time.
For more information on Python 2.4.2, including download links for
various platforms, release notes, and known issues, please see:
http://www.python.org/2.4.2
Highlights of this new release include:
- Bug fixes. According to the release notes, more than 60 have been
fixed, including bugs that prevented Python from working properly
on 64 bit HP/UX and AIX systems.
Highlights of the previous major Python release (2.4) are available
from the Python 2.4 page, at
http://www.python.org/2.4/highlights.html
Enjoy the new release,
Anthony
Anthony Baxter
anthony@python.org
Python Release Manager
(on behalf of the entire python-dev team)
...
[RELEASE] Python 2.7.2 release candidate 1On behalf of the Python development team, I'm happy to announce the immediate
availability of Python 2.7.2 release candidate 1.
2.7.2 is the second in bugfix release for the Python 2.7 series. 2.7 is the last
major verison of the 2.x line and will be receiving bug fixes while new feature
development focuses on 3.x.
2.7 includes many features that were first released in Python 3.1. The faster io
module, the new nested with statement syntax, improved float repr, set literals,
dictionary views, and the memoryview object have been backported from 3.1. Other
features include an ordered dictionary implementation, unittests improvements, a
new sysconfig module, auto-numbering of fields in the str/unicode format method,
and support for ttk Tile in Tkinter. For a more extensive list of changes in
2.7, see http://doc.python.org/dev/whatsnew/2.7.html or Misc/NEWS in the Python
distribution.
To download Python 2.7.2rc1 visit:
http://www.python.org/download/releases/2.7.1/
The 2.7.2 changelog is at:
http://hg.python.org/cpython/file/439396b06416/Misc/NEWS
2.7 documentation can be found at:
http://docs.python.org/2.7/
This is a preview release. Assuming no major problems, 2.7.2 will be released in
two weeks. Please report any bugs you find to
http://bugs.python.org/
Enjoy!
--
Benjamin Peterson
Release Manager
benjamin at python.org
(on behalf of the entire python-dev team and 2.7.2's contributors)
...
RE: RELEASED Python 2.3.4, release candidate 1 #3"""
What gives you the right to say this? *I'm offended.*
Speaking of moral and ethics, there seem to be other things to care
about, especially these days.
Thomas
"""
Ok, so perhaps "moral" and "ethical" is slightly strong. Sheesh. Levity.
Point being, if the developers of Python (and Perl and .... so on) spent =
so much time and energy creating something cross platform, it should be =
used thusly. I'm not saying it's "evil" not to do so, I'm saying that if =
you NEED platform-specific tools (which, let's be h...
Problem installing matplotlib 1.3.1 with Python 2.7.6 and 3.3.3 (release candidate 1)Hello,
I tried to install matplotlib 1.3.1 on the release candidates of Python 2.7.6 and 3.3.3.
I am on Mac OS X 10.6.8.
Although the installation gave no problems, there is a problem with Tcl/Tk.
The new Pythons have their own embedded Tcl/Tk, but when installing matplotlib it links to the Frameworks version of Tcl and TK, not to the embedded version. This causes confusion when importing matplotlib.pyplot:
objc[70648]: Class TKApplication is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined.
objc[70648]: Class TKMenu is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined.
objc[70648]: Class TKContentView is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined.
objc[70648]: Class TKWindow is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined.
And then later it gives a lot of error messages.
So I think it should be linked to the embedded version. For this the matplotlib setupext.py should be ad...
[RELEASED] Python 3.1 Release Candidate 2On behalf of the Python development team, I'm happy to announce the second
release candidate of Python 3.1.
Python 3.1 focuses on the stabilization and optimization of the features and
changes that Python 3.0 introduced. For example, the new I/O system has been
rewritten in C for speed. File system APIs that use unicode strings now handle
paths with undecodable bytes in them. Other features include an ordered
dictionary implementation, a condensed syntax for nested with statements, and
support for ttk Tile in Tkinter. For a more extensive list of changes in 3.1,
see http://doc.python.org/dev/py3k/whatsnew/3.1.html or Misc/NEWS in the Python
distribution.
This is a release candidate, and as such, we do not recommend use in production
environments. However, please take this opportunity to test the release with
your libraries or applications. This will hopefully discover bugs before the
final release and allow you to determine how changes in 3.1 might impact you.
If you find things broken or incorrect, please submit a bug report at
http://bugs.python.org
For more information and downloadable distributions, see the Python 3.1 website:
http://www.python.org/download/releases/3.1/
See PEP 375 for release schedule details:
http://www.python.org/dev/peps/pep-0375/
Enjoy,
-- Benjamin
Benjamin Peterson
benjamin at python.org
Release Manager
(on behalf of the entire python-dev team and 3.1's contributors)
...
[RELEASED] Python 3.3.3 release candidate 2-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I'm quite happy to announce the
Python 3.3.3 release candidate 2.
Python 3.3.3 includes several security fixes and over 150 bug fixes compared to
the Python 3.3.2 release.
This release fully supports OS X 10.9 Mavericks. In particular, this release
fixes an issue that could cause previous versions of Python to crash when typing
in interactive mode on OS X 10.9.
Python 3.3 includes a range of improvements of the 3.x series, as well as easier
porting between 2.x and 3.x. In total, almost 500 API items are new or improved
in Python 3.3. For a more extensive list of changes in the 3.3 series, see
http://docs.python.org/3.3/whatsnew/3.3.html
To download Python 3.3.3 rc2 visit:
http://www.python.org/download/releases/3.3.3/
This is a preview release, please report any bugs to
http://bugs.python.org/
Enjoy!
- --
Georg Brandl, Release Manager
georg at python.org
(on behalf of the entire python-dev team and 3.3's contributors)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlKB1G4ACgkQN9GcIYhpnLAu5gCfRkfpnEs+rmtZ9iTjaaZcHDx3
sNYAn180Q4cFZmKtwJdaG+g/3jHAVd97
=n/Tt
-----END PGP SIGNATURE-----
...
RELEASED Python 2.3.5, release candidate 1--nextPart1243888.3dvV1cK3uc
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.3.5 (release candidate 1).
Python 2.3.5 is a bug-fix release. See the release notes at the website
(also available as Misc/NEWS in the source distribution) for details of
the bugs squished in this release.
Assuming no major problems crop up, a final release of Python 2.3.5 will
follow in about a week's time.=20
Python 2.3.5 is the last release in the Python 2.3 series, and is being
released for those people who still need to use Python 2.3. Python 2.4
is a newer release, and should be preferred if possible. From here,
bugfix releases are switching to the Python 2.4 branch - a 2.4.1 will
follow 2.3.5 final.
=46or more information on Python 2.3.5, including download links for
various platforms, release notes, and known issues, please see:
http://www.python.org/2.3.5
Highlights of this new release include:
- Bug fixes. According to the release notes, more than 50 bugs=20
have been fixed, including a couple of bugs that could cause=20
Python to crash.=20
Highlights of the previous major Python release (2.3) are available =20
from the Python 2.3 page, at =20
http://www.python.org/2.3/highlights.htm...
RELEASED Python 2.5.1, release candidate 1On behalf of the Python development team and the Python community,
I'm happy to announce the release of Python 2.5.1 (release
candidate 1).
This is the first bugfix release of Python 2.5. Python 2.5 is now
in bugfix-only mode; no new features are being added. According to
the release notes, over 150 bugs and patches have been addressed
since Python 2.5, including a fair number in the new AST compiler
(an internal implementation detail of the Python interpreter).
For more information on Python 2.5.1, including download links for
various platforms, release notes, and known issues, please see:
http://www.python.org/2.5.1/
Highlights of this new release include:
Bug fixes. According to the release notes, at least 150 have
been fixed.
Highlights of the previous major Python release (2.5) are available
from the Python 2.5 page, at
http://www.python.org/2.5/highlights.html
Enjoy this release,
Anthony
Anthony Baxter
anthony@python.org
Python Release Manager
(on behalf of the entire python-dev team)
...
[RELEASED] Python 3.3.0 release candidate 2-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I'm delighted to announce the
second release candidate of Python 3.3.0.
This is a preview release, and its use is not recommended in
production settings.
Python 3.3 includes a range of improvements of the 3.x series, as well
as easier porting between 2.x and 3.x. Major new features and changes
in the 3.3 release series are:
* PEP 380, syntax for delegating to a subgenerator ("yield from")
* PEP 393, flexible string representation (doing away with the
distinction between "wide" and "narrow" Unicode builds)
* A C implementation of the "decimal" module, with up to 80x speedup
for decimal-heavy applications
* The import system (__import__) now based on importlib by default
* The new "lzma" module with LZMA/XZ support
* PEP 397, a Python launcher for Windows
* PEP 405, virtual environment support in core
* PEP 420, namespace package support
* PEP 3151, reworking the OS and IO exception hierarchy
* PEP 3155, qualified name for classes and functions
* PEP 409, suppressing exception context
* PEP 414, explicit Unicode literals to help with porting
* PEP 418, extended platform-independent clocks in the "time" module
* PEP 412, a new key-sharing dictionary implementation that
significantly saves memory for object-oriented code
* PEP 362, the function-signature object
* The new "faulth...
[RELEASED] Python 3.3.5 release candidate 2-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I'm happy to announce
the release of Python 3.3.5, release candidate 2.
Python 3.3.5 includes a fix for a regression in zipimport in 3.3.4
(see http://bugs.python.org/issue20621) and a few other bugs.
Python 3.3 includes a range of improvements of the 3.x series, as well
as easier porting between 2.x and 3.x. In total, almost 500 API items
are new or improved in Python 3.3. For a more extensive list of
changes in the 3.3 series, see
http://docs.python.org/3.3/whatsnew/3.3.html
To download Python 3.3.5 visit:
http://www.python.org/download/releases/3.3.5/
This is a preview release, please report any bugs to
http://bugs.python.org/
The final release is scheduled one week from now.
Enjoy!
- --
Georg Brandl, Release Manager
georg at python.org
(on behalf of the entire python-dev team and 3.3's contributors)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlMUUKoACgkQN9GcIYhpnLD5OACfTpRkcM9aXUx2XbiXoZtIgSE7
BqwAnjwpAuqc9lKJ0O3XOw5qDvDPYsNb
=EGuB
-----END PGP SIGNATURE-----
...
RELEASED Python 2.4.1, release candidate 1--nextPart9283459.QEzjqcje3T
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
On behalf of the Python development team and the Python community, I'm
happy to announce the release of Python 2.4.1 (release candidate 1).
Python 2.4.1 is a bug-fix release. See the release notes at the website
(also available as Misc/NEWS in the source distribution) for details of
the bugs squished in this release.
Assuming no major problems crop up, a final release of Python 2.4.1 will
follow in about a week's time.=20
=46o...
[RELEASED] Python 3.3.5 release candidate 2-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On behalf of the Python development team, I'm happy to announce
the release of Python 3.3.5, release candidate 2.
Python 3.3.5 includes a fix for a regression in zipimport in 3.3.4
(see http://bugs.python.org/issue20621) and a few other bugs.
Python 3.3 includes a range of improvements of the 3.x series, as well
as easier porting between 2.x and 3.x. In total, almost 500 API items
are new or improved in Python 3.3. For a more extensive list of
changes in the 3.3 series, see
http://docs.python.org/3.3/whatsnew/3.3.html
...
RELEASED Python 2.5 (release candidate 2)On behalf of the Python development team and the Python
community, I'm happy to announce the second RELEASE
CANDIDATE of Python 2.5.
After the first release candidate a number of new bugfixes
have been applied to the Python 2.5 code. In the interests
of making 2.5 the best release possible, we've decided to
put out a second (and hopefully last) release candidate. We
plan for a 2.5 final in a week's time.
This is not yet the final release - it is not suitable for
production use. It is being released to solicit feedback
and hopefully expose bugs, as well as allowing you to
determin...
[RELEASED] Python 3.1.3 release candidate 1On behalf of the Python development team, I'm gladsome to announce a release
candidate of the third bugfix release for the Python 3.1 series, Python 3.1.3.
This bug fix release fixes numerous issues found in 3.1.2. Please try it with
your packages and report any bugs you find. The final of 3.1.3 is scheduled to
be released in two weeks.
The Python 3.1 version series focuses on the stabilization and optimization of
the features and changes that Python 3.0 introduced. For example, the new I/O
system has been rewritten in C for speed. File system APIs that use unicode
strings ...