Commits

Commits on Nov 25, 2025

[3.10] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139532)

hartwork
and
picnixz
authored

Commits on Oct 31, 2025

[3.10] gh-90953: Don't use deprecated AST nodes in clinic.py (GH-104322) (GH-140855)

miss-islington
and
AlexWaygood
authored
[3.10] gh-137836: Support more RAWTEXT and PLAINTEXT elements in HTMLParser (GH-137837) (GH-140842) (GH-140853)
serhiy-storchaka
authored
[3.10] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH-140851)

ambv
and
serhiy-storchaka
authored
[3.10] gh-120384: gh-120298: Fix array-out-of-bounds & use after free `list` (GH-121345) (GH-140833)

authored
[3.10] gh-139436: Remove ``dist-pdf`` from the docs archives rebuild target (GH-139437) (GH-140412)
AA-Turner
authored

Commits on Oct 9, 2025

Commits on Oct 7, 2025

Commits on Oct 6, 2025

[3.10] gh-139400: Make sure that parent parsers outlive their subparsers in `pyexpat` (GH-139403) (#139613)
hartwork
authored

Commits on Sep 29, 2025

Commits on Sep 28, 2025

[3.10] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139379)
StanFromIreland
authored

Commits on Sep 26, 2025

[3.10] gh-138998: Upgrade vendored expat to 2.7.2 (#138999) (#139053)
StanFromIreland
authored

Commits on Sep 13, 2025

Commits on Sep 2, 2025

[3.10] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137644)

authored

Commits on Jul 22, 2025

[3.10] gh-135661: Fix parsing attributes with whitespaces around the "=" separator in HTMLParser (GH-136908) (GH-136921)

miss-islington
and
serhiy-storchaka
authored

Commits on Jul 12, 2025

Commits on Jul 3, 2025

[3.10] gh-135462: Fix quadratic complexity in processing special input in HTMLParser (GH-135464) (GH-135485)
serhiy-storchaka
authored

Commits on Jun 11, 2025

[3.10] gh-135374: Update the bundled copy of setuptools to 79.0.1 (#135398)
ambv
authored

Commits on Jun 3, 2025

Commits on Jun 2, 2025