SRU: update python3.6 to the new minor release 3.6.7
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python3-defaults (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Cosmic |
Fix Released
|
Undecided
|
Unassigned | ||
python3.6 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Cosmic |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
SRU: update python3.6 to the new minor release 3.6.7
See LP: #1792143 for the rationale, going one minor release ahead (and planning to do 3.6.8 in January, the last source release from the 3.6 branch).
[Impact]
Provide the branch updates for the stable 3.6 branch in the LTS release.
[Regression Potential]
There is regression potential, but this version is in use in 18.10, which didn't show regressions.
[Test Case]
No regressions in the Python 3.6 test suite, no regressions in the autopkg tests
Failing autopkg tests:
- http://
failed before, flaky autopkg tests history, now passes in disco.
- snapcraft: amd64 and i386 try to download some rust installation,
which then fails to build some downloaded code. This doesn't look
like a reliable test.
- python-
Fixed in cosmic, filed LP: #1802835 for a fix anyway.
- http://
doesn't look like a regression in the autopkg test history.
pinged the lxd maintainers, but no response yet. LP: #1803344
lxd now passes after giving back several times
- ocrmypdf has a hint: adconrad:unblock ocrmypdf/
This does not seem to be a regression, although fixed in disco via
a new upstream version 6.2.5.
And now fixed by another SRU ...
What's New in Python 3.6.7 final? ======= ======= ======= =====
=======
*Release date: 2018-10-20*
There were no new changes in version 3.6.7.
What's New in Python 3.6.7 release candidate 2? ======= ======= ======= ======= ======= =====
=======
*Release date: 2018-10-13*
Core and Builtins
-----------------
- bpo-34879: Fix a possible null pointer dereference in bytesobject.c.
Patch by Zackery Spytz.
- bpo-34320: Fix ``dict(od)`` didn't copy iteration order of OrderedDict.
Library
-------
- bpo-34769: Fix for async generators not finalizing when event loop is in
debug mode and garbage collector runs in another thread.
- bpo-34922: Fixed integer overflow in the :meth:` ~hashlib. shake.digest( )` ~hashlib. shake.hexdigest ()` methods for the SHAKE algorithm in
and :meth:`
the :mod:`hashlib` module.
- bpo-34871: Fix inspect module polluted ``sys.modules`` when parsing signature_ _`` of callable.
``__text_
- bpo-34872: Fix self-cancellation in C implementation of asyncio.Task
- bpo-34819: Use a monotonic clock to compute timeouts in `Executor. map` and :func:` as_completed` , in order to prevent
:meth:
timeouts from deviating when the system clock is adjusted.
- bpo-34521: Use :func:` socket. CMSG_SPACE` to calculate ancillary data size socket. CMSG_LEN` in `multiprocessin g.reduction. recvfds` as :rfc:`3542` requires the use
instead of :func:`
:func:
of the former for portable applications.
- bpo-34282: Fix enum members getting shadowed by parent attributes.
- bpo-34172: Fix a reference issue inside multiprocessing .Pool that caused
the pool to remain alive if it was deleted without being closed or
terminated explicitly.
- bpo-33729: Fixed issues with arguments parsing in :mod:`hashlib`.
Documentation
-------------
- bpo-32174: chm document displays non-ASCII charaters properly on some MBCS
Windows systems.
Tests
-----
- bpo-32962: Fixed test_gdb when Python is compiled with flags -mcet
-fcf-protection -O0.
macOS
-----
- bpo-34370: Revert to using the released Tk 8.6.8 with macOS installers
instead of the Tk 8.6.x development snapshot used with 3.7.1rc1 and
3.6.7rc1. The snapshot introduced at least one significant regression
(bpo-34927).
C API
-----
- bpo-34910: Ensure that :c:func: `PyObject_ Print` always returns ``-1`` on
error. Patch by Zackery Spytz.
What's New in Python 3.6.7 release candidate 1? ======= ======= ======= ======= ======= =====
=======
*Release date: 2018-09-26*
Security
--------
- bpo-17239: The xml.sax and xml.dom.minidom parsers no longer processes
external entities by default. External DTD and ENTITY declarations no
longer load files or create network connections.
- bpo-34623: CVE-2018-14647: The C accelerated _elementtree module now
initializes hash randomization salt from _Py_HashSecret instead of
libexpat's default CSPRNG.
- bpo-34405: Updated to OpenSSL 1.0.2p for Windows builds.
- bpo-33871: Fixed sending the part of the file in :func:`os.sendfile` on
macOS. Using the *trailers* argument could cause sending more bytes from
the input file than was specified.
- bpo-32533: Fixed thread-safety of error handling in _ssl.
Core and Builtins
-----------------
- bpo-34735: Fix...