Commits

Commit history

1. Commits on Oct 1, 2026

   • Python 3.10.22

     pablogsal

     committed
     acb4dc1View commit details

     Copy full SHA for acb4dc1

     View code at this pointBrowse repository at this point

   • [3.10] gh-156793: Validate SSLContext.wrap_bio() parameters like wrap_socket() (GH-158503) (#158533)

     Show description for 5867d4e
     

     5 peopleauthored
     5867d4eView commit details

     Copy full SHA for 5867d4e

     View code at this pointBrowse repository at this point

   • [3.10] gh-155999: `tarfile`: handle a member that leaves the destination but comes back (GH-156000) (#156046)

     Show description for fc32a70
     

     StanFromIreland

     and

     pablogsal

     authored
     fc32a70View commit details

     Copy full SHA for fc32a70

     View code at this pointBrowse repository at this point

   • [3.10] gh-156002: Bound zipfile decompression for bzip2/LZMA/Zstandard (GH-156003) (GH-156362) (#156741)

     Show description for c2bfbcd
     

     4 peopleauthored
     c2bfbcdView commit details

     Copy full SHA for c2bfbcd

     View code at this pointBrowse repository at this point

   • [3.10] gh-157265: tarfile: Honor None result of filter for link fallbacks (GH-157266) (#157304)

     Show description for c1f106d
     

     3 peopleauthored
     c1f106dView commit details

     Copy full SHA for c1f106d

     View code at this pointBrowse repository at this point

   • [3.10] gh-156353: Fix configparser space delimiter parsing (GH-156382) (#156562)

     Show description for 2af3ca5
     

     3 peopleauthored
     2af3ca5View commit details

     Copy full SHA for 2af3ca5

     View code at this pointBrowse repository at this point

   • [3.10] gh-155292: Don't consider Unicode codepoint attributes outside RFC 3454 (GH-155293) (GH-156020) (#156932)

     Show description for d397a49
     

     3 peopleauthored
     d397a49View commit details

     Copy full SHA for d397a49

     View code at this pointBrowse repository at this point

   • [3.10] gh-148508: Add another common pattern for iOS SSL failures to test_ssl (GH-150442) (#158248)

     Show description for 812b4df
     

     hugovk

     and

     freakboy3742

     authored
     812b4dfView commit details

     Copy full SHA for 812b4df

     View code at this pointBrowse repository at this point

   • [3.10] gh-158446: Reject float format precision near INT_MAX (GH-158474) (#158482)

     Show description for 8eb079f
     gpshead

     authored
     8eb079fView commit details

     Copy full SHA for 8eb079f

     View code at this pointBrowse repository at this point

   • [3.10] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) (#158524)

     Show description for ec44b5a
     gpshead

     authored
     ec44b5aView commit details

     Copy full SHA for ec44b5a

     View code at this pointBrowse repository at this point

   • [3.10] gh-155694: Scope HTTPPasswordMgr credentials by URL scheme (GH-155696) (#155973)

     Show description for dac88d8
     

     3 peopleauthored
     dac88d8View commit details

     Copy full SHA for dac88d8

     View code at this pointBrowse repository at this point
2. Commits on Sep 29, 2026

   • [3.10] gh-157190: Fix tarfile `data`/`tar` filter bypass via hard link to a symlink (GH-157191) (#158457)

     Show description for 197663d
     

     freakboy3742

     and

     StanFromIreland

     authored
     197663dView commit details

     Copy full SHA for 197663d

     View code at this pointBrowse repository at this point
3. Commits on Aug 13, 2026

   • [3.10] gh-145548: Use VMADDR_CID_LOCAL in VSOCK socket tests (GH-145589) (GH-145809) (#148617)

     Show description for 1d5fa34
     

     3 peopleauthored
     1d5fa34View commit details

     Copy full SHA for 1d5fa34

     View code at this pointBrowse repository at this point
4. Commits on Aug 12, 2026

   • Python 3.10.21

     pablogsal

     committed
     3a19c2fView commit details

     Copy full SHA for 3a19c2f

     View code at this pointBrowse repository at this point
5. Commits on Aug 11, 2026

   • [3.10] gh-98820: Fix quadratic time in csv.Sniffer for quoted fields (GH-154867) (#155539)

     serhiy-storchaka

     authored
     fd78b56View commit details

     Copy full SHA for fd78b56

     View code at this pointBrowse repository at this point
6. Commits on Aug 10, 2026

   • [3.10] gh-143927: Normalize all line endings (CR, CRLF, and LF) in configparser (GH-143929) (#152007)

     Show description for 12dcbd7
     

     miss-islington

     and

     sethmlarson

     authored
     12dcbd7View commit details

     Copy full SHA for 12dcbd7

     View code at this pointBrowse repository at this point

   • [3.10] gh-146333: Fix quadratic regex backtracking in configparser option parsing (GH-146399) (GH-148559) (#154878)

     Show description for 0e14e5d
     

     3 peopleauthored
     0e14e5dView commit details

     Copy full SHA for 0e14e5d

     View code at this pointBrowse repository at this point

   • [3.10] gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback (GH-151559) (#152080)

     Show description for 0f852b3
     StanFromIreland

     authored
     0f852b3View commit details

     Copy full SHA for 0f852b3

     View code at this pointBrowse repository at this point

   • [3.10] gh-153030: Fix quadratic complexity in incremental parsing in HTMLParser (GH-153031) (#153043)

     Show description for 1e7956f
     

     serhiy-storchaka

     and

     claude

     authored
     1e7956fView commit details

     Copy full SHA for 1e7956f

     View code at this pointBrowse repository at this point

   • [3.10] gh-152674: Avoid quadratic behavior in xml.etree.ElementPath index predicates (GH-152676) (#154814)

     Show description for 037965c
     

     5 peopleauthored
     037965cView commit details

     Copy full SHA for 037965c

     View code at this pointBrowse repository at this point

   • [3.10] gh-109638: Fix exponential time in csv.Sniffer for doubled quotes (GH-154868) (GH-155113) (#155116)

     Show description for 19e5024
     

     4 peopleauthored
     19e5024View commit details

     Copy full SHA for 19e5024

     View code at this pointBrowse repository at this point

   • [3.10] gh-149079: Fix O(n^2) canonical ordering in unicodedata.normalize() (GH-149080) (GH-150843) (#155159)

     Show description for db744c0
     

     9 peopleauthored
     db744c0View commit details

     Copy full SHA for db744c0

     View code at this pointBrowse repository at this point

   • [3.10] gh-90949: expose Expat API to tune exponential expansion protections (GH-139368) (#151401) (#155414)

     Show description for 14c3f89
     

     3 peopleauthored
     14c3f89View commit details

     Copy full SHA for 14c3f89

     View code at this pointBrowse repository at this point

   • [3.10] gh-149776: Skip UDP Lite tests if it's not supported (#149777) (#153594)

     Show description for d4bea86
     vstinner

     authored
     d4bea86View commit details

     Copy full SHA for d4bea86

     View code at this pointBrowse repository at this point

   • [3.10] gh-100372: Use BIO_eof to detect EOF for SSL_FILETYPE_ASN1 (GH-100373) (#153312)

     Show description for 129667d
     

     3 peopleauthored
     129667dView commit details

     Copy full SHA for 129667d

     View code at this pointBrowse repository at this point

   • [3.10] gh-146581: Fix vulnerability in shutil.unpack_archive() for ZIP files on Windows (GH-146591) (GH-149071) (#155440)

     Show description for 1071290
     

     miss-islington

     and

     serhiy-storchaka

     authored
     1071290View commit details

     Copy full SHA for 1071290

     View code at this pointBrowse repository at this point
7. Commits on Jul 11, 2026

   • [3.10] gh-151987: Pass filter_function to TarFile._extract_one() during .extract() (GH-151988) (#152613)

     Show description for cf23b91
     

     3 peopleauthored
     cf23b91View commit details

     Copy full SHA for cf23b91

     View code at this pointBrowse repository at this point
8. Commits on Jul 6, 2026

   • [3.10] gh-149486: tarfile.data_filter: validate written link target (GH-149487) (#153180)

     StanFromIreland

     authored
     c063191View commit details

     Copy full SHA for c063191

     View code at this pointBrowse repository at this point
9. Commits on Jul 4, 2026

   • [3.10] gh-150599: Prevent bz2 decompressor reuse after errors (#150600) (#151133)

     Show description for 938ec03
     StanFromIreland

     authored
     938ec03View commit details

     Copy full SHA for 938ec03

     View code at this pointBrowse repository at this point
10. Commits on Jun 28, 2026

    • [3.10] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749) (#152529)

      miss-islington

      authored
      1790e58View commit details

      Copy full SHA for 1790e58

      View code at this pointBrowse repository at this point
11. Commits on Jun 27, 2026

    • [3.10] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (#145600) (#146027)

      Show description for 556aa09
      

      vstinner

      and

      StanFromIreland

      authored
      556aa09View commit details

      Copy full SHA for 556aa09

      View code at this pointBrowse repository at this point

    • [3.10] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146… (#148350)

      Show description for 58703ec
      

      sethmlarson

      and

      illia-v

      authored
      58703ecView commit details

      Copy full SHA for 58703ec

      View code at this pointBrowse repository at this point

    • [3.10] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) (#149797)

      Show description for 2bbcf3f
      

      miss-islington

      and

      gpshead

      authored
      2bbcf3fView commit details

      Copy full SHA for 2bbcf3f

      View code at this pointBrowse repository at this point

    • [3.10] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982) (#151996)

      Show description for eb63c0f
      

      3 peopleauthored
      eb63c0fView commit details

      Copy full SHA for eb63c0f

      View code at this pointBrowse repository at this point
12. Commits on May 17, 2026

    • [3.10] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371) (#145673)

      vstinner

      authored
      10cf7e2View commit details

      Copy full SHA for 10cf7e2

      View code at this pointBrowse repository at this point