Commits

History for

Commits on Sep 6, 2024

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123770)

authored

Commits on Sep 4, 2024

[3.8] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119028)

serhiy-storchaka
and
ambv
authored
[3.8] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123642)

authored
[3.8] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123433)
jaraco
authored
[3.8] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123108)

miss-islington
and
serhiy-storchaka
authored
[3.8] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122611)

authored

Commits on Aug 2, 2024

[3.8] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122509)

authored

Commits on Jul 30, 2024

[3.8] gh-122133: Authenticate socket connection for `socket.socketpair()` fallback (GH-122134) (GH-122429)

authored

Commits on May 30, 2024

[3.8] gh-112769: test_zlib: test_zlib: Fix comparison of ZLIB_RUNTIME_VERSION with non-int suffix (GH-112771) (GH-119567)
ned-deily
authored

Commits on May 24, 2024

[3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118742)

zooba
and
ambv
authored

Commits on May 7, 2024

[3.8] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118479)

encukou
and
jstasiak
authored

Commits on Mar 27, 2024

Commits on Mar 19, 2024

[3.8] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116069)

miss-islington
and
weiiwang01
authored

Commits on Mar 6, 2024

[3.8] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116275)

hartwork
and
gpshead
authored

Commits on Feb 21, 2024

[3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164) (GH-115536)

sethmlarson
and
serhiy-storchaka
authored

Commits on Jan 17, 2024

Commits on Nov 6, 2023

[3.8] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111781)

ambv
and
moriyama
authored

Commits on Aug 24, 2023

Commits on Aug 22, 2023

Commits on Jun 5, 2023

[3.8] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) (#104895)

authored

Commits on May 22, 2023

Commits on May 17, 2023

[3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104548)
encukou
authored

Commits on Dec 6, 2022

[3.8] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100033)

miss-islington
and
gpshead
authored

Commits on Nov 21, 2022

[3.8] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99661)

miss-islington
and
zooba
authored

Commits on Nov 10, 2022

[3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (GH-99231)

miss-islington
and
gpshead
authored

Commits on Oct 28, 2022

[3.8] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98527)

miss-islington
and
botovq
authored