Commits

Commit history

1. Commits on Oct 25, 2026

   • [3.11] gh-87720 Fix additional header refolding-quoting edge case (GH-134271) (#159065)

     Show description for 26ee788
     

     miss-islington

     and

     bitdancer

     authored
     26ee788View commit details

     Copy full SHA for 26ee788

     View code at this pointBrowse repository at this point

   • [3.11] gh-159428: Don't read mimetypes.knownfiles by default on Windows (GH-159445) (#159573)

     Show description for 35dd324
     cjames23

     authored
     35dd324View commit details

     Copy full SHA for 35dd324

     View code at this pointBrowse repository at this point

   • [3.11] gh-160300: Reject cookies with a negative version in http.cookiejar (GH-160301) (#160649)

     Show description for 6229895
     

     miss-islington

     and

     gpshead

     authored
     6229895View commit details

     Copy full SHA for 6229895

     View code at this pointBrowse repository at this point

   • [3.11] gh-160097: Reject links replacing the destination in `tarfile.tar_filter` (GH-160098) (#160343)

     Show description for bc93f8a
     

     miss-islington

     and

     StanFromIreland

     authored
     bc93f8aView commit details

     Copy full SHA for bc93f8a

     View code at this pointBrowse repository at this point

   • [3.11] gh-159914: Ignore gdb stderr in test_gdb.test_pretty_print (GH-159916) (GH-160201) (#160651)

     Show description for a80d95a
     

     3 peopleauthored
     a80d95aView commit details

     Copy full SHA for a80d95a

     View code at this pointBrowse repository at this point
2. Commits on Oct 24, 2026

   • [3.11] gh-160040: Distrust compromised eMudhra intermediate CA keys (CVE-2026-115557) (GH-160042) (GH-160572)

     Show description for af52b41
     

     3 peopleauthored
     af52b41View commit details

     Copy full SHA for af52b41

     View code at this pointBrowse repository at this point
3. Commits on Oct 1, 2026

   • [3.11] gh-156793: Validate SSLContext.wrap_bio() parameters like wrap_socket() (GH-158503) (#158532)

     Show description for bdebbf9
     

     4 peopleauthored
     bdebbf9View commit details

     Copy full SHA for bdebbf9

     View code at this pointBrowse repository at this point

   • [3.11] gh-156353: Fix configparser space delimiter parsing (GH-156382) (#156561)

     Show description for 23afd17
     

     3 peopleauthored
     23afd17View commit details

     Copy full SHA for 23afd17

     View code at this pointBrowse repository at this point

   • [3.11] gh-156002: Bound zipfile decompression for bzip2/LZMA/Zstandard (GH-156003) (GH-156362) (#156740)

     Show description for 6257029
     

     4 peopleauthored
     6257029View commit details

     Copy full SHA for 6257029

     View code at this pointBrowse repository at this point

   • [3.11] gh-157265: tarfile: Honor None result of filter for link fallbacks (GH-157266) (#157306)

     Show description for 2eb0c2f
     

     3 peopleauthored
     2eb0c2fView commit details

     Copy full SHA for 2eb0c2f

     View code at this pointBrowse repository at this point

   • [3.11] gh-155292: Don't consider Unicode codepoint attributes outside RFC 3454 (GH-155293) (GH-156020) (#156931)

     Show description for 69f92eb
     

     3 peopleauthored
     69f92ebView commit details

     Copy full SHA for 69f92eb

     View code at this pointBrowse repository at this point

   • [3.11] gh-148508: Add another common pattern for iOS SSL failures to test_ssl (GH-150442) (#158247)

     Show description for 86966fd
     

     hugovk

     and

     freakboy3742

     authored
     86966fdView commit details

     Copy full SHA for 86966fd

     View code at this pointBrowse repository at this point

   • [3.11] gh-158446: Reject float format precision near INT_MAX (GH-158474) (#158480)

     Show description for 889c92b
     

     miss-islington

     and

     gpshead

     authored
     889c92bView commit details

     Copy full SHA for 889c92b

     View code at this pointBrowse repository at this point

   • [3.11] gh-156293: Use-after-free for server-side SSLContext with sni_callback (GH-158504) (#158523)

     Show description for b12968c
     gpshead

     authored
     b12968cView commit details

     Copy full SHA for b12968c

     View code at this pointBrowse repository at this point

   • [3.11] gh-155999: `tarfile`: handle a member that leaves the destination but comes back (GH-156000) (#156044)

     Show description for 5aa989c
     

     miss-islington

     and

     StanFromIreland

     authored
     5aa989cView commit details

     Copy full SHA for 5aa989c

     View code at this pointBrowse repository at this point

   • [3.11] gh-155694: Scope HTTPPasswordMgr credentials by URL scheme (GH-155696) (#155972)

     Show description for 95355ee
     

     3 peopleauthored
     95355eeView commit details

     Copy full SHA for 95355ee

     View code at this pointBrowse repository at this point
4. Commits on Sep 29, 2026

   • [3.11] gh-157190: Fix tarfile `data`/`tar` filter bypass via hard link to a symlink (GH-157191) (#158455)

     Show description for 28f3154
     

     freakboy3742

     and

     StanFromIreland

     authored
     28f3154View commit details

     Copy full SHA for 28f3154

     View code at this pointBrowse repository at this point
5. Commits on Aug 12, 2026

   • [3.11] gh-145548: Use VMADDR_CID_LOCAL in VSOCK socket tests (GH-145589) (GH-145809) (#148616)

     Show description for 477f29d
     

     3 peopleauthored
     477f29dView commit details

     Copy full SHA for 477f29d

     View code at this pointBrowse repository at this point
6. Commits on Aug 11, 2026

   • [3.11] gh-98820: Fix quadratic time in csv.Sniffer for quoted fields (GH-154867) (#155538)

     serhiy-storchaka

     authored
     b09a67aView commit details

     Copy full SHA for b09a67a

     View code at this pointBrowse repository at this point
7. Commits on Aug 10, 2026

   • [3.11] gh-143927: Normalize all line endings (CR, CRLF, and LF) in configparser (GH-143929) (#152006)

     Show description for 274de10
     

     miss-islington

     and

     sethmlarson

     authored
     274de10View commit details

     Copy full SHA for 274de10

     View code at this pointBrowse repository at this point

   • [3.11] gh-146333: Fix quadratic regex backtracking in configparser option parsing (GH-146399) (GH-148559) (#154877)

     Show description for 77bcd02
     

     encukou

     and

     joshuaswanson

     authored
     77bcd02View commit details

     Copy full SHA for 77bcd02

     View code at this pointBrowse repository at this point

   • [3.11] gh-153030: Fix quadratic complexity in incremental parsing in HTMLParser (GH-153031) (#153042)

     Show description for c2390b9
     

     serhiy-storchaka

     and

     claude

     authored
     c2390b9View commit details

     Copy full SHA for c2390b9

     View code at this pointBrowse repository at this point

   • [3.11] gh-152674: Avoid quadratic behavior in xml.etree.ElementPath index predicates (GH-152676) (#154813)

     Show description for 0583f24
     

     4 peopleauthored
     0583f24View commit details

     Copy full SHA for 0583f24

     View code at this pointBrowse repository at this point

   • [3.11] gh-109638: Fix exponential time in csv.Sniffer for doubled quotes (GH-154868) (GH-155113) (#155115)

     Show description for f4a8862
     

     miss-islington

     and

     serhiy-storchaka

     authored
     f4a8862View commit details

     Copy full SHA for f4a8862

     View code at this pointBrowse repository at this point

   • [3.11] gh-149079: Fix O(n^2) canonical ordering in unicodedata.normalize() (GH-149080) (GH-150843) (#155158)

     Show description for e322a18
     

     8 peopleauthored
     e322a18View commit details

     Copy full SHA for e322a18

     View code at this pointBrowse repository at this point

   • [3.11] gh-150599: Prevent bz2 decompressor reuse after errors (#150600) (#151132)

     Show description for 1ba6135
     StanFromIreland

     authored
     1ba6135View commit details

     Copy full SHA for 1ba6135

     View code at this pointBrowse repository at this point

   • [3.11] gh-149231: tomllib: Limit the number of parts in a key (GH-149233) (GH-149815) (#154943)

     Show description for 27d55db
     

     encukou

     and

     StanFromIreland

     authored
     27d55dbView commit details

     Copy full SHA for 27d55db

     View code at this pointBrowse repository at this point

   • [3.11] gh-149776: Skip UDP Lite tests if it's not supported (#149777) (#153593)

     Show description for 67d79df
     vstinner

     authored
     67d79dfView commit details

     Copy full SHA for 67d79df

     View code at this pointBrowse repository at this point

   • [3.11] gh-100372: Use BIO_eof to detect EOF for SSL_FILETYPE_ASN1 (GH-100373) (#153311)

     Show description for 5f13018
     

     3 peopleauthored
     5f13018View commit details

     Copy full SHA for 5f13018

     View code at this pointBrowse repository at this point
8. Commits on Aug 9, 2026

   • [3.11] gh-90949: expose Expat API to tune exponential expansion protections (GH-139368) (GH-151401) (#155346)

     Show description for 3c1801a
     

     StanFromIreland

     and

     picnixz

     authored
     3c1801aView commit details

     Copy full SHA for 3c1801a

     View code at this pointBrowse repository at this point

   • [3.11] gh-146581: Fix vulnerability in shutil.unpack_archive() for ZIP files on Windows (GH-146591) (#149071)

     Show description for 7ef7dd0
     serhiy-storchaka

     authored
     7ef7dd0View commit details

     Copy full SHA for 7ef7dd0

     View code at this pointBrowse repository at this point

   • [3.11] gh-148808: Add boundary check to asyncio.AbstractEventLoop.sock_recvf… (GH-148809) (#148834)

     Show description for f5ca387
     

     miss-islington

     and

     sethmlarson

     authored
     f5ca387View commit details

     Copy full SHA for f5ca387

     View code at this pointBrowse repository at this point
9. Commits on Jul 4, 2026

   • [3.11] gh-151987: Pass filter_function to TarFile._extract_one() during .extract() (GH-151988) (#152612)

     Show description for d2b2f5e
     

     3 peopleauthored
     d2b2f5eView commit details

     Copy full SHA for d2b2f5e

     View code at this pointBrowse repository at this point

   • [3.11] gh-149486: tarfile.data_filter: validate written link target (GH-149487) (#150904)

     Show description for 10a13be
     

     3 peopleauthored
     10a13beView commit details

     Copy full SHA for 10a13be

     View code at this pointBrowse repository at this point
10. Commits on Jun 28, 2026

    • [3.11] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (GH-145600) (#146026)

      Show description for dae4b1a
      

      3 peopleauthored
      dae4b1aView commit details

      Copy full SHA for dae4b1a

      View code at this pointBrowse repository at this point