Commits

History for

Commits on Sep 6, 2024

[3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123770)

authored
4d069d5

Commits on Sep 4, 2024

[3.8] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122611)

authored
b158a76

Commits on Jul 22, 2024

[3.8] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122121)
ambv
authored
1fb69b3

Commits on May 24, 2024

[3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118742)

zooba
and
ambv
authored
91e3669

Commits on May 7, 2024

Commits on Mar 6, 2024

[3.8] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116275)

hartwork
and
gpshead
authored
854f645

Commits on Feb 21, 2024

[3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) (GH-115764)

miss-islington
and
hartwork
authored
1e7f79a

Commits on Aug 22, 2023

[3.8] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108279)

authored
b4368b5

Commits on Jun 5, 2023

Commits on May 17, 2023

[3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104548)
encukou
authored
79e63e5

Commits on Mar 13, 2023

[3.8] gh-102627: Replace address pointing toward malicious web page (GH-102630) (GH-102667)

authored
045b252

Commits on Feb 9, 2023

[3.8] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101710)

authored
32a1a61

Commits on Jan 30, 2023

gh-101422: (docs) TarFile default errorlevel argument is 1, not 0 (GH-101424)

miss-islington
and
OTheDev
authored
db924a4

Commits on Jan 20, 2023

[3.8] Correct CVE-2020-10735 documentation (GH-100306) (#100698)

gpshead
and
ucodery
authored
594ba19

Commits on Dec 6, 2022

[3.8] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100033)

miss-islington
and
gpshead
authored
e43393a

Commits on Oct 11, 2022

[3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98192)

authored
0a4f650

Commits on Oct 4, 2022

[3.8] gh-95778: Mention sys.set_int_max_str_digits() in error message (GH-96874) (GH-96877) (GH-97835)

miss-islington
and
vstinner
authored
dca2fd2

Commits on Sep 5, 2022

[3.8] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96503)

authored
b5e331f

Commits on Jul 1, 2022

[3.8] gh-81054: Document that SimpleHTTPRequestHandler follows symbolic links (GH-94416) (GH-94495)

ambv
and
dignissimus
authored
bd0f2a1

Commits on Mar 16, 2022

bpo-31327: Update time documentation to reflect possible errors (GH-31460) (GH-31827)

miss-islington
and
slateny
authored
4d8e08b

Commits on Nov 16, 2021

bpo-45792: Fix contextvar.Token's intersphinx FQN (GH-29533) (GH-29537)

miss-islington
and
hynek
authored
c37a0d9

Commits on Sep 23, 2021

[docs] Update documentation for `multiprocessing.get_start_method` (GH-18170) (GH-28535)

miss-islington
and
gsnedders
authored
8344fef

Commits on Aug 29, 2021

bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28033)

miss-islington
and
vstinner
authored
c9c2a0b

Commits on Aug 17, 2021

[3.8] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) (GH-27801)

achraf-mer
and
ambv
authored
03dd89d

Commits on Jul 28, 2021

Spell out 's.pop() or s.pop(i)' (GH-27398) (GH-27414)

miss-islington
and
sweeneyde
authored
af441df

Commits on Jul 21, 2021

bpo-30511: Add note on thread safety to shutil.make_archive() (GH-26933) (#27276)

miss-islington
and
akulakov
authored
54d3871

Commits on May 5, 2021

[3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595) (#25726)

authored
515a7bc

Commits on May 3, 2021

bpo-42800: Add audit events for f_code and tb_frame (GH-24182)

miss-islington
and
zooba
authored
8ab272f

Commits on May 1, 2021

Fix exceptions mentioned in os.setxattr() docs (GH-25742) (GH-25795)

miss-islington
and
Shreyash Sharma
authored
ce081fb
Fixing doc for callback for lambda (GH-25779) (GH-25789)

miss-islington
and
Shreyash Sharma
authored
3519ac4
bpo-43971: Add spaces around annotated arg default '=' (GH-25702)

miss-islington
and
moselhy
authored
606bb1c

Commits on Apr 30, 2021

[3.8] bpo-42589: Change URL for 'from' link when used in a raised exc… (GH-25755)
sblondon
authored
ea6ec96

Commits on Apr 29, 2021

[doc] Be more clear on super() regarding multiple base classes methods (GH-21789) (GH-25707)

miss-islington
and
andresdelfino
authored
e010031