Commits

Branch selector

 opensuse_3.6

User selector

All users

All time

Commit History

Commits on Jun 11, 2025

• Fix use-after-free in the unicode-escape decoder with an error handler

  Show description for 6616512
  

  serhiy-storchaka

  authored and

  mcepl

  committed
  6616512

  Copy full SHA for 6616512

Commits on Feb 7, 2025

• [CVE-2025-0938] disallow square brackets (`[` and `]`) in domain names for parsed URLs

  Show description for a438682
  

  2 peopleauthored and

  mcepl

  committed
  a438682

  Copy full SHA for a438682

Commits on Dec 2, 2024

• [CVE-2024-9287] ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format

  Show description for 4f2496b
  

  mcepl

  and

  JamesJohnUtley

  committed
  4f2496b

  Copy full SHA for 4f2496b

Commits on Nov 5, 2024

• [CVE-2024-9287] properly quote path names provided when creating a venv

  Show description for c9571a5
  

  3 peoplecommitted
  c9571a5

  Copy full SHA for c9571a5

Commits on Sep 18, 2024

• [CVE-2024-6232] Remove backtracking when parsing tarfile headers

  Show description for bfc7d56
  

  3 peopleauthored and

  mcepl

  committed
  bfc7d56

  Copy full SHA for bfc7d56

• [CVE-2024-5642] Switch off NPN support

  Show description for 1036c4b
  

  AdrianBunk

  authored and

  mcepl

  committed
  1036c4b

  Copy full SHA for 1036c4b

Commits on Sep 11, 2024

• [CVE-2024-7592] Fix quadratic complexity in parsing "-quoted cookie

  Show description for cdffb9f
  

  serhiy-storchaka

  authored and

  mcepl

  committed
  cdffb9f

  Copy full SHA for cdffb9f

Commits on Aug 29, 2024

• [CVE-2024-6923] Encode newlines in headers, and verify headers are sound

  Show description for 3be49f5
  

  4 peopleauthored and

  mcepl

  committed
  3be49f5

  Copy full SHA for 3be49f5

Commits on Jun 26, 2024

• [CVE-2024-4032] Fix "private" (non-global) IP address ranges

  Show description for 2976e94
  

  2 peopleauthored and

  mcepl

  committed
  2976e94

  Copy full SHA for 2976e94

Commits on Jun 21, 2024

• [CVE-2024-0397] Fix locking in cert_store_stats and get_ca_certs

  Show description for e701181
  

  sethmlarson

  authored and

  mcepl

  committed
  e701181

  Copy full SHA for e701181

Commits on May 16, 2024

• Modernize siginterrupt calls

  Show description for 878403d
  

  pablogsal

  authored and

  mcepl

  committed
  878403d

  Copy full SHA for 878403d

• [CVE-2024-0450] Protect zipfile from "quoted-overlap" zipbomb

  Show description for d8877aa
  

  serhiy-storchaka

  authored and

  mcepl

  committed
  d8877aa

  Copy full SHA for d8877aa

Commits on May 11, 2024

• Fix thread safety of zipfile._SharedFile.tell

  Show description for 9ec41b7
  

  kevinmehall

  authored and

  mcepl

  committed
  9ec41b7

  Copy full SHA for 9ec41b7

Commits on May 10, 2024

• Fix etree XMLPullParser tests for Expat >=2.6.0 with reparse deferral

  Show description for d7133c7
  

  hartwork

  authored and

  mcepl

  committed
  d7133c7

  Copy full SHA for d7133c7

• [CVE-2023-6597] tempfile.TemporaryDirectory: fix symlink bug in cleanup

  Show description for 23fc28b
  

  kwi-dk

  authored and

  mcepl

  committed
  23fc28b

  Copy full SHA for 23fc28b

• [CVE-2023-27043] detect email address parsing errors

  Show description for f2b841f
  mcepl

  committed
  f2b841f

  Copy full SHA for f2b841f

• fixes syslog making default "ident" from sys.argv[0]

  Show description for 7175dcb
  mcepl

  committed
  7175dcb

  Copy full SHA for 7175dcb

Commits on Apr 25, 2024

• [CVE-2023-40217] Check for & avoid the ssl pre-close flaw

  Show description for 5afa628
  

  2 peopleauthored and

  mcepl

  committed
  5afa628

  Copy full SHA for 5afa628

• make sure ``patch.dict()`` can be applied on async functions

  Show description for 1c57ada
  mcepl

  committed
  1c57ada

  Copy full SHA for 1c57ada

• [CVE-2007-4559] implement PEP-706 to filter outcome of the tarball extracing

  Show description for 0a9188a
  mcepl

  committed
  0a9188a

  Copy full SHA for 0a9188a

• don't run PyThread_exit_thread() when you don't have to

  Show description for f9cff83
  mcepl

  committed
  f9cff83

  Copy full SHA for f9cff83

• [CVE-2023-24329] blocklist bypass via the urllib.parse component

  Show description for 378a07b
  

  kenballus

  authored and

  mcepl

  committed
  378a07b

  Copy full SHA for 378a07b

• fix email.generator.py to not replace a non-existent header

  Show description for 3c864b7
  

  msapiro

  authored and

  mcepl

  committed
  3c864b7

  Copy full SHA for 3c864b7

• [CVE-2022-45061] avoid DoS by decoding IDNA for too long domain names

  Show description for 5dacc6c
  

  gpshead

  authored and

  mcepl

  committed
  5dacc6c

  Copy full SHA for 5dacc6c

• fix PyThreadState_Clear(): don't decref frame

  Show description for d7c7ce2
  

  vstinner

  authored and

  mcepl

  committed
  d7c7ce2

  Copy full SHA for d7c7ce2

• [CVE-2022-37454] fix original buffer overflow

  Show description for 6483e4b
  

  2 peopleauthored and

  mcepl

  committed
  6483e4b

  Copy full SHA for 6483e4b

• [CVE-2020-10735] prevent DoS by very large int()

  Show description for e091acd
  

  vstinner

  authored and

  mcepl

  committed
  e091acd

  Copy full SHA for e091acd

• [CVE-2021-28861] fix an open redirection vulnerability in http.server

  Show description for 8bcea2f
  

  gpshead

  authored and

  mcepl

  committed
  8bcea2f

  Copy full SHA for 8bcea2f

• skip two test_zlib tests failing on s390x

  Show description for 95e5313
  

  vstinner

  authored and

  mcepl

  committed
  95e5313

  Copy full SHA for 95e5313

• [CVE-2015-20107] Make mailcap refuse to match unsafe filenames/types/params

  Show description for 328ed9c
  

  encukou

  authored and

  mcepl

  committed
  328ed9c

  Copy full SHA for 328ed9c

Commits on Apr 11, 2024

• remove Sphinx40 warning

  Show description for b750df9
  

  corona10

  authored and

  mcepl

  committed
  b750df9

  Copy full SHA for b750df9

• stop calling removed Sphinx function

  Show description for 052a4a3
  

  pablogsal

  authored and

  mcepl

  committed
  052a4a3

  Copy full SHA for 052a4a3

• ignore deprecation warning for old version of pip

  Show description for f56a8e2
  mcepl

  committed
  f56a8e2

  Copy full SHA for f56a8e2

• RISC-V needs CTYPES_PASS_BY_REF_HACK

  Show description for 01e7f5c
  

  andreas-schwab

  authored and

  mcepl

  committed
  01e7f5c

  Copy full SHA for 01e7f5c

• add triplets for mips-r6 and riscv

  Show description for 71c8df9
  

  doko42

  authored and

  mcepl

  committed
  71c8df9

  Copy full SHA for 71c8df9

Pagination

Previous

Next