Commit history

1. Commits on Sep 4, 2020

   • bpo-39603: Prevent header injection in http methods (GH-18485) (#21946)

     Show description for 524b8de
     

     vstinner

     and

     amiremohamadi

     authored
     524b8deView commit details

     Copy full SHA for 524b8de

     View code at this pointBrowse repository at this point
2. Commits on Aug 4, 2020

   • [3.5] bpo-41004: Resolve hash collisions for IPv4Interface and IPv6Interface (GH-21033) (#21233)

     Show description for 11d258c
     tapakund

     authored
     11d258cView commit details

     Copy full SHA for 11d258c

     View code at this pointBrowse repository at this point
3. Commits on Jul 16, 2020

   • [3.5] bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) (#21489)

     Show description for cac9ca8
     

     encukou

     and

     rishi93

     authored
     cac9ca8View commit details

     Copy full SHA for cac9ca8

     View code at this pointBrowse repository at this point
4. Commits on Jul 2, 2020

   • bpo-41183: Update finite DH params to 3072 bits (#21278)

     Show description for f52bf62
     tiran

     authored
     f52bf62View commit details

     Copy full SHA for f52bf62

     View code at this pointBrowse repository at this point

   • bpo-41183: Update test certs and keys (#21258)

     Show description for d565be8
     tiran

     authored
     d565be8View commit details

     Copy full SHA for d565be8

     View code at this pointBrowse repository at this point
5. Commits on Jun 20, 2020

   • [3.5] closes bpo-38576: Disallow control characters in hostnames in http.client. (#19300)

     Show description for 09d8172
     tapakund

     authored
     09d8172View commit details

     Copy full SHA for 09d8172

     View code at this pointBrowse repository at this point

   • bpo-39503: CVE-2020-8492: Fix AbstractBasicAuthHandler (GH-18284) (#19305)

     Show description for 37fe316
     vstinner

     authored
     37fe316View commit details

     Copy full SHA for 37fe316

     View code at this pointBrowse repository at this point
6. Commits on Jun 12, 2020

   • bpo-39073: validate Address parts to disallow CRLF (#19007) (#20450)

     Show description for f91a0b6
     vstinner

     authored
     f91a0b6View commit details

     Copy full SHA for f91a0b6

     View code at this pointBrowse repository at this point
7. Commits on Apr 3, 2020

   • bpo-38804: Fix REDoS in http.cookiejar (GH-17157) (#17344)

     Show description for 55a6a16
     

     vstinner

     and

     bcaller

     authored
     55a6a16View commit details

     Copy full SHA for 55a6a16

     View code at this pointBrowse repository at this point
8. Commits on Mar 21, 2020

   • bpo-38945: UU Encoding: Don't let newline in filename corrupt the output format (GH-17418) (GH-17444) (#17445)

     Show description for 8835f46
     

     ned-deily

     and

     stealthcopter

     authored
     8835f46View commit details

     Copy full SHA for 8835f46

     View code at this pointBrowse repository at this point
9. Commits on Oct 29, 2019

   • [3.5] bpo-31026: Fix test_dbm if dbm.ndbm is build with Berkeley DB. (GH-6632)

     Show description for d7b336f
     

     serhiy-storchaka

     authored and

     larryhastings

     committed
     d7b336fView commit details

     Copy full SHA for d7b336f

     View code at this pointBrowse repository at this point

   • bpo-38243, xmlrpc.server: Escape the server_title (GH-16373) (GH-16441) (#16516)

     Show description for 3fe1b19
     

     vstinner

     authored and

     larryhastings

     committed
     3fe1b19View commit details

     Copy full SHA for 3fe1b19

     View code at this pointBrowse repository at this point
10. Commits on Oct 8, 2019

    • [3.5] bpo-38216, bpo-36274: Allow subclasses to separately override validation and encoding behavior (GH-16448) (#16475)

      Show description for 2784e78
      

      jaraco

      authored and

      larryhastings

      committed
      2784e78View commit details

      Copy full SHA for 2784e78

      View code at this pointBrowse repository at this point
11. Commits on Sep 7, 2019

    • [3.5] bpo-37461: Fix infinite loop in parsing of specially crafted email headers (GH-14794) (#15446)

      Show description for c28e4a5
      

      authored and

      larryhastings

      committed
      c28e4a5View commit details

      Copy full SHA for c28e4a5

      View code at this pointBrowse repository at this point

    • bpo-36742: Corrects fix to handle decomposition in usernames (GH-13812) (GH-13814) (#14772)

      Show description for 095373c
      

      authored and

      larryhastings

      committed
      095373cView commit details

      Copy full SHA for 095373c

      View code at this pointBrowse repository at this point

    • bpo-36576: Skip test_ssl and test_asyncio tests failing with OpenSSL 1.1.1 (#12694)

      Show description for 4d1c254
      

      vstinner

      authored and

      larryhastings

      committed
      4d1c254View commit details

      Copy full SHA for 4d1c254

      View code at this pointBrowse repository at this point

    • [3.5] bpo-34155: Dont parse domains containing @ (GH-13079) (#15317)

      Show description for 063eba2
      

      authored and

      larryhastings

      committed
      063eba2View commit details

      Copy full SHA for 063eba2

      View code at this pointBrowse repository at this point
12. Commits on Jul 14, 2019

    • bpo-30458: Disallow control chars in http URLs. (GH-12755) (#13207)

      Show description for afe3a49
      

      hroncok

      authored and

      larryhastings

      committed
      afe3a49View commit details

      Copy full SHA for afe3a49

      View code at this pointBrowse repository at this point

    • bpo-36742: Fixes handling of pre-normalization characters in urlsplit() (GH-13017) (#13042)

      

      zooba

      authored and

      larryhastings

      committed
      4655d57View commit details

      Copy full SHA for 4655d57

      View code at this pointBrowse repository at this point

    • bpo-35907, CVE-2019-9948: urllib rejects local_file:// scheme (GH-13474) (GH-13505) (#13510)

      Show description for 4fe82a8
      

      authored and

      larryhastings

      committed
      4fe82a8View commit details

      Copy full SHA for 4fe82a8

      View code at this pointBrowse repository at this point
13. Commits on Jul 13, 2019

    • [3.5] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (#13200)

      Show description for 221178a
      

      gpshead

      authored and

      larryhastings

      committed
      221178aView commit details

      Copy full SHA for 221178a

      View code at this pointBrowse repository at this point
14. Commits on Mar 17, 2019

    • [3.5] bpo-35121: prefix dot in domain for proper subdomain validation (GH-10258) (#12281)

      Show description for 4749f1b
      

      tirkarthi

      authored and

      larryhastings

      committed
      4749f1bView commit details

      Copy full SHA for 4749f1b

      View code at this pointBrowse repository at this point
15. Commits on Mar 16, 2019

    • bpo-35647: Fix path check in cookiejar (#11436) (#12277)

      Show description for 382981b
      

      tirkarthi

      authored and

      larryhastings

      committed
      382981bView commit details

      Copy full SHA for 382981b

      View code at this pointBrowse repository at this point
16. Commits on Mar 11, 2019

    • bpo-36216: Add check for characters in netloc that normalize to separators (GH-12201) (#12223)

      

      zooba

      authored and

      larryhastings

      committed
      c0d9511View commit details

      Copy full SHA for c0d9511

      View code at this pointBrowse repository at this point
17. Commits on Feb 26, 2019

    • bpo-35746: Fix segfault in ssl's cert parser (GH-11569) (#11867)

      Show description for efec763
      

      vstinner

      authored and

      larryhastings

      committed
      efec763View commit details

      Copy full SHA for efec763

      View code at this pointBrowse repository at this point
18. Commits on Feb 25, 2019

    • bpo-35411: Skip test_urllib2net FTP tests on Travis CI (GH-10907) (#11874)

      Show description for 8bcbc78
      

      vstinner

      authored and

      larryhastings

      committed
      8bcbc78View commit details

      Copy full SHA for 8bcbc78

      View code at this pointBrowse repository at this point
19. Commits on May 14, 2018

    • [3.5] bpo-33001: Prevent buffer overrun in os.symlink (GH-5989) (#5991)

      Show description for f381cfe
      

      zooba

      authored and

      larryhastings

      committed
      f381cfeView commit details

      Copy full SHA for f381cfe

      View code at this pointBrowse repository at this point
20. Commits on Mar 11, 2018

    • [3.5] bpo-32981: Fix catastrophic backtracking vulns (GH-5955) (#6034)

      Show description for 937ac1f
      

      authored and

      larryhastings

      committed
      937ac1fView commit details

      Copy full SHA for 937ac1f

      View code at this pointBrowse repository at this point
21. Commits on Jan 23, 2018

    • [3.5] bpo-32072: Fix issues with binary plists. (GH-4455) (#4656)

      Show description for 43f014d
      

      serhiy-storchaka

      authored and

      larryhastings

      committed
      43f014dView commit details

      Copy full SHA for 43f014d

      View code at this pointBrowse repository at this point

    • [3.5] bpo-32551: Consistently configure sys.path[0] (#5197)

      Show description for 891c91d
      

      ncoghlan

      authored and

      larryhastings

      committed
      891c91dView commit details

      Copy full SHA for 891c91d

      View code at this pointBrowse repository at this point

    • [3.5] bpo-32620: Remove failing pyenv call from CI config (#5274)

      Show description for 4a4c274
      

      ncoghlan

      authored and

      larryhastings

      committed
      4a4c274View commit details

      Copy full SHA for 4a4c274

      View code at this pointBrowse repository at this point
22. Commits on Jul 26, 2017

    • [3.5] [security] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2887)

      

      corona10

      authored and

      ned-deily

      committed
      19b2890View commit details

      Copy full SHA for 19b2890

      View code at this pointBrowse repository at this point
23. Commits on Jul 24, 2017

    • bpo-30908: Fix dangling thread in test_os.TestSendfile (#2680) (#2845)

      Show description for 157b6ad
      vstinner

      authored
      157b6adView commit details

      Copy full SHA for 157b6ad

      View code at this pointBrowse repository at this point
24. Commits on Jul 23, 2017

    • [3.5] Backport bpo-30876 (GH-2639), bpo-18018 and bpo-26367. (#2677)

      Show description for c824cc8
      serhiy-storchaka

      authored
      c824cc8View commit details

      Copy full SHA for c824cc8

      View code at this pointBrowse repository at this point
25. Commits on Jul 20, 2017

    • bpo-30822: regrtest: remove tzdata (#2782)

      Show description for bf3a1e9
      vstinner

      authored
      bf3a1e9View commit details

      Copy full SHA for bf3a1e9

      View code at this pointBrowse repository at this point