Commits python/cpython - SemanticDiff

[3.11] gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (GH-145600) (#146026)

miss-islington committed 65 days ago

Verified dae4b1a2

[3.11] gh-150743: Limit trailer lines and interim responses read by http.client (GH-150749) (#152528)

miss-islington committed 65 days ago

Verified f86064e0

[3.11] gh-146211: Reject CR/LF in HTTP tunnel request headers (GH-146… (#148351)

sethmlarson committed 66 days ago

Verified 56b7100b

[3.11] gh-87451: Apply CVE-2021-4189 PASV fix to ftplib.ftpcp() (GH-149648) (#149796)

miss-islington committed 66 days ago

Verified ef12d0dc

[3.11] gh-151558: Fix symlink escape via `tarfile` hardlink-extraction fallback (GH-151559) (#152001)

miss-islington committed 66 days ago

Verified be13e86f

[3.11] gh-151981: Make tarfile._Stream.seek break at EOF (GH-151982) (#151995)

miss-islington committed 66 days ago

Verified 7f0dc59c

[3.11] Replace deprecated action with RtD app (GH-149111) (GH-150233) (#151657)

hugovk committed 76 days ago

Verified 79f66145

[3.11] CI: Move Homebrew dependencies into Brewfile (GH-148335) (GH-149884) (#149989)

miss-islington committed 103 days ago

Verified a7370a9c

[3.11] Replace `pre-commit/action` with `j178/prek-action` (#150237)

hugovk committed 103 days ago

Verified e59b6209

[3.11] gh-144370: Disallow usage of control characters in status in wsgiref.handlers for security (#144371) (#145672)

vstinner committed 107 days ago

Verified 3b80905f

[3.11] gh-141707: Skip TarInfo DIRTYPE normalization during GNU long name handling (#145815)

miss-islington committed 124 days ago

Verified 9a23b753

[3.11] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507) (#145515)

miss-islington committed 124 days ago

Verified 69ddd9bb

[3.11] gh-148395: Fix a possible UAF in `{LZMA,BZ2}Decompressor` (GH-148396) (#148504)

StanFromIreland committed 141 days ago

Verified e20c6c96

[3.11] gh-148169: Fix webbrowser `%action` substitution bypass of dash-prefix check (GH-148170) (#148520)

StanFromIreland committed 141 days ago

Verified f4654824

[3.11] Default GHA permissions to `contents: read` (GH-148346) (#148389)

hugovk committed 143 days ago

Verified 776d39f2

[3.11] gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#146000)

StanFromIreland committed 147 days ago

Verified 642865dd

[3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146607)

StanFromIreland committed 147 days ago

Verified 0d046dec

[3.11] gh-137586: Open external osascript program with absolute path (GH-137584) (#148176)

miss-islington committed 148 days ago

Verified 0ec71cd1

[3.11] gh-145098: Use `macos-15-intel` instead of unstable `macos-26-…intel` in `{jit,tail-call}.yml` (GH-148126) (#148138)

hugovk committed 149 days ago

Verified f07b4005

[3.11] gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129) (#148133)

miss-islington committed 149 days ago

Verified 7d2ecdf4

[3.11] Add `permissions: {}` to all reusable workflows (#148114) (#148123)

ezio-melotti committed 150 days ago

Verified a3347aaa

[3.11] gh-143930: Tweak the exception message and increase test coverage (GH-146476) (GH-148045) (GH-148051) (GH-148052)

miss-islington committed 151 days ago

Verified 96fc5048

[3.11] Remove MSI build from security-only branch (GH-148007) (#148008)

hugovk committed 153 days ago

Verified a78cbed7

[3.11] gh-146488: hash-pin all action references (gh-146489) (#147979)

woodruffw committed 153 days ago

Verified 1729d99f

[3.11] gh-145098: Run Apple Silicon macOS CI on macos-26 (Tahoe) (GH-145099) (GH-146412) (GH-146414) (GH-146635) (#146638)

hugovk committed 155 days ago

Verified 5ed08c4a

[3.11] gh-143930: Reject leading dashes in webbrowser URLs (GH-143931) (GH-146364)

tomcruiseqi committed 161 days ago

Verified ceac1efc

[3.11] Add `mkdir`s to fix 3.11 docs build (#145571)

hugovk committed 180 days ago

Verified 86a67f8a

[3.11] gh-145455: Show output of blurb & sphinx-build version commands (GH-145457) (#145491)

miss-islington committed 180 days ago

Verified c7ab95ad

Post 3.11.15

pablogsal committed 183 days ago

30447075

Python 3.11.15

pablogsal committed 183 days ago

2340a037