Re: [python-committers] link from github to bpo?

2017-06-22 Thread Brett Cannon
If people would like to see the bpo link be automatically appended to the original PR message, feel free to help with https://github.com/python/bedevere/issues/3 :) On Wed, 21 Jun 2017 at 13:38 Mariatta Wijaya wrote: > PR 2304 is merged. "View Details" still exists (scroll all the way down). > >

Re: [python-committers] Fun fact, The Knights Who Say "Ni" (bot) complained about CLA on Modules/expat/

2017-06-22 Thread Brett Cannon
I hope the bot works as expected! I worked hard to make it appropriately paranoid to make Van and other lawyers happy! ;) On Wed, 21 Jun 2017 at 11:03 Victor Stinner wrote: > Hi, > > Fun fact: I cherry-picked a change from libexpat into Modules/expat > (VS2008 fix for stdint.h), and I kept the a

Re: [python-committers] [Python-Dev] Proposed release schedule for Python 3.5.4

2017-06-22 Thread Brett Cannon
On Thu, 22 Jun 2017 at 02:32 Larry Hastings wrote: > > > On 06/22/2017 01:04 AM, Victor Stinner wrote: > > About the cipher list in ssl, the change itself is simple but it's to > blacklist DES and 3DES since it has been proved that these ciphers are > really too weak nowadays: > > http://python-s

Re: [python-committers] Proposed release schedule for Python 3.5.4

2017-06-22 Thread Larry Hastings
On 06/22/2017 01:04 AM, Victor Stinner wrote: About the cipher list in ssl, the change itself is simple but it's to blacklist DES and 3DES since it has been proved that these ciphers are really too weak nowadays: http://python-security.readthedocs.io/vuln/cve-2016-2183_sweet32_attack_des_3des

Re: [python-committers] Proposed release schedule for Python 3.5.4

2017-06-22 Thread Victor Stinner
For 3.4, please review my pending security fixes :-) There are more of them. About the cipher list in ssl, the change itself is simple but it's to blacklist DES and 3DES since it has been proved that these ciphers are really too weak nowadays: http://python-security.readthedocs.io/vuln/cve-2016-21