Issue #18709: Fix CVE-2013-4238. The SSL module now handles NULL bytes
inside subjectAltName correctly. Formerly the module has used OpenSSL's
GENERAL_NAME_print() function to get the string represention of ASN.1
strings for ``rfc822Name`` (email), ``dNSName`` (DNS) and
``uniformResourceIdentifier`` (URI).

--HG--
branch : 3.2
extra : amend_source : eec631f453f0149d44425795552ac164eae9cebe
Issue #16037: HTTPMessage.readheaders() raises an HTTPException when more than
100 headers are read.  Adapted from patch by Jyrki Pulliainen.

--HG--
branch : 3.2
Issue #16038: CVE-2013-1752: ftplib: Limit amount of data read by
limiting the call to readline().  Original patch by Michał
Jastrzębski and Giampaolo Rodola.

--HG--
branch : 3.2
Issue #18747: document issue with OpenSSL's CPRNG state and fork

--HG--
branch : 3.2
extra : transplant_source : %CD%40%07%FB%9C%7E%ED%A3%8A%0Fm%95o%1B%A8%26%BE%E3R%A7
Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by
limiting the call to readline().  Original patch by Christian Heimes.

--HG--
branch : 3.2
Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to
prevent readline() calls from consuming too much memory.  Patch by Jyrki
Pulliainen.

--HG--
branch : 3.2
Issue #22517: When a io.BufferedRWPair object is deallocated, clear its
weakrefs.

--HG--
branch : 3.2
Issue #22419: Limit the length of incoming HTTP request in wsgiref server to
65536 bytes and send a 414 error code for higher lengths. Patch contributed
by Devin Cook.

--HG--
branch : 3.2
Lax cookie parsing in http.cookies could be a security issue when combined
with non-standard cookie handling in some Web browsers.

Reported by Sergey Bobrov.

--HG--
branch : 3.2
extra : transplant_source : %27%0Fa%EC%11W-%7C%1C%CDNG%E7j%99%81%20%AC%92%DF
Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces.

--HG--
branch : 3.2
extra : amend_source : 3e79e948606c4de59e378c75ff4f97b72a33f9c8
extra : transplant_source : %C48%F6%AA%AF%A9%BD%F4%A2%21%9F%A7%19%A6%FET%01%C8%3B%AF
Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit
line length.  Patch by Emil Lind.

--HG--
branch : 3.2
Issue #20939: Use www.example.com instead of www.python.org to avoid test
failures when ssl is not present.

--HG--
branch : 3.2
extra : transplant_source : a4hK%A2%22%A3%C2%F0%26%80%D3%0B%98%5B%F0%0Bx%97%C4
Fix-up for 0f362676460d: add missing size argument to SSLFakeFile.readline(), as in 2.6 backport 8a6def3add5b

--HG--
branch : 3.2
Add a dummy "touch" target to the Makefile so that the custom buildbots can test this branch.

--HG--
branch : 3.2
Backport b533cc11d114 to fix intermittent test_urllibnet failures.

--HG--
branch : 3.2
Issue #19855: uuid.getnode() on Unix now looks on the PATH for the
executables used to find the mac address, with /sbin and /usr/sbin as
fallbacks.

Issue #11508: Fixed uuid.getnode() and uuid.uuid1() on environment with
virtual interface.  Original patch by Kent Frazier.

Issue #18784: The uuid module no more attempts to load libc via ctypes.CDLL,
if all necessary functions are already found in libuuid.
Patch by Evgeny Sologubov.

Issue #16102: Make uuid._netbios_getnode() work again on Python 3.

--HG--
branch : 3.2