Commits python/cpython - SemanticDiff

[3.10] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) (#149797)

miss-islington committed 66 days ago

Verified 2bbcf3fb

[3.10] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982) (#151996)

miss-islington committed 66 days ago

Verified eb63c0f9

[3.10] CI: Move Homebrew dependencies into Brewfile (GH-148335) (GH-149884) (#149990)

hugovk committed 103 days ago

Verified b286d987

[3.10] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371) (#145673)

vstinner committed 107 days ago

Verified 10cf7e2b

[3.10] gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling (#145816)

miss-islington committed 124 days ago

Verified 72dde101

[3.10] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507) (#145516)

miss-islington committed 124 days ago

Verified 876858c9

[3.10] gh-148395: Fix a possible UAF in `{LZMA,BZ2}Decompressor` (GH-148396) (#148505)

StanFromIreland committed 141 days ago

Verified 47128e64

[3.10] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170) (#148521)

StanFromIreland committed 141 days ago

Verified c5767a72

[3.10] Default GHA permissions to `contents: read` (GH-148346) (#148391)

hugovk committed 143 days ago

Verified 80f0bc18

[3.10] gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#146002)

StanFromIreland committed 147 days ago

Verified af856a71

[3.10] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146608)

StanFromIreland committed 147 days ago

Verified 3d7091e6

[3.10] gh-137586: Open external osascript program with absolute path (GH-137584) (#148177)

miss-islington committed 148 days ago

Verified e70ff776

[3.10] gh-145098: Add `permissions: {}` to all workflows (GH-148126) (#148139)

hugovk committed 149 days ago

Verified 2fcd2830

[3.10] gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129) (#148134)

miss-islington committed 149 days ago

Verified 5782d6aa

[3.10] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) (GH-148053)

miss-islington committed 151 days ago

Verified 591ed890

[3.10] Remove MSI build from security-only branch (GH-148007) (GH-148008) (#148009)

hugovk committed 151 days ago

Verified 0ee938dc

[3.10] gh-146488: hash-pin all action references (gh-146489) (#147978)

woodruffw committed 153 days ago

Verified ba74c01a

[3.10] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146359)

tomcruiseqi committed 161 days ago

Verified ad4d5ba3

[3.10] gh-145455: Show output of blurb & sphinx-build version commands (GH-145457) (#145489)

miss-islington committed 180 days ago

Verified ba6eba5a

[3.10] gh-145455: Constrain setuptools to a version with pkg_resources (#145456)

encukou committed 180 days ago

Verified 1b49478d

Post 3.10.20

pablogsal committed 183 days ago

27c64549

Python 3.10.20

pablogsal committed 183 days ago

842e987d

[3.10] gh-143935: Email preserve parens when folding comments (GH-143936) (#144350)

edgarrmondragon committed 183 days ago

Verified 003b8315

[3.10] gh-144363: Update bundled libexpat to 2.7.4 (GH-144365) (#144515)

StanFromIreland committed 183 days ago

Verified 384afddc

[3.10] gh-143916: Allow HTAB in wsgiref header values (#145140)

miss-islington committed 183 days ago

Verified c592227f

[3.10] gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843) (#144862)

miss-islington committed 183 days ago

Verified 4be624a9

[3.10] gh-119342: Fix a potential denial of service in plistlib (GH-119343) (#142151)

serhiy-storchaka committed 183 days ago

Verified 568342cf

[3.10] Pin `setuptools==81` to avoid `pkg_resources` removal (#144781)

rffontenelle committed 183 days ago

Verified a191d071

[3.10] gh-100538: Add workflow to verify bundled libexpat (GH-145359) (#145407)

miss-islington committed 183 days ago

Verified dad6f8df

[3.10] gh-144484: Warn users not to use wsgiref in production

miss-islington committed 208 days ago

Verified e1a8a039