Commits

Commits on Nov 25, 2025

[3.11] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139529)

hartwork
and
picnixz
authored

Commits on Oct 31, 2025

[3.11] gh-136063: fix quadratic-complexity parsing in `email.message._parseparam` (GH-136072) (GH-140830)

authored
[3.11] gh-136065: Fix quadratic complexity in os.path.expandvars() (GH-134952) (GH-140848)

ambv
and
serhiy-storchaka
authored
[3.11] gh-137836: Support more RAWTEXT and PLAINTEXT elements in HTMLParser (GH-137837) (GH-140842) (GH-140852)

serhiy-storchaka
and
ambv
authored
[3.11] gh-90953: Don't use deprecated AST nodes in clinic.py (GH-104322) (GH-140856)

miss-islington
and
AlexWaygood
authored
[3.11] gh-120384: gh-120298: Fix array-out-of-bounds & use after free `list` (GH-121345)

authored

Commits on Oct 9, 2025

Commits on Oct 8, 2025

Commits on Oct 7, 2025

[3.11] gh-135661: Fix CDATA section parsing in HTMLParser (GH-135665) (GH-137774) (GH-139659)

miss-islington
and
serhiy-storchaka
authored

Commits on Oct 6, 2025

[3.11] gh-139400: Make sure that parent parsers outlive their subparsers in `pyexpat` (GH-139403) (#139612)
hartwork
authored

Commits on Sep 29, 2025

[3.11] Remove link to the PDF downloads (GH-139142) (#139430)
AA-Turner
authored

Commits on Sep 28, 2025

[3.11] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139378)
StanFromIreland
authored

Commits on Sep 26, 2025

[3.11] gh-138998: Upgrade vendored expat to 2.7.2 (#138999) (#139056)
StanFromIreland
authored

Commits on Sep 24, 2025

[3.11] gh-135374: Adjust test for setuptools' replacement of distutils (GH-138796)

authored

Commits on Sep 13, 2025

Commits on Aug 19, 2025

[3.11] gh-130577: tarfile now validates archives to ensure member offsets are non-negative (GH-137027) (#137172)

authored

Commits on Jul 22, 2025

[3.11] gh-135661: Fix parsing attributes with whitespaces around the "=" separator in HTMLParser (GH-136908) (GH-136920)

miss-islington
and
serhiy-storchaka
authored

Commits on Jul 12, 2025

Commits on Jul 3, 2025

[3.11] gh-135462: Fix quadratic complexity in processing special input in HTMLParser (GH-135464) (GH-135484)
serhiy-storchaka
authored

Commits on Jun 16, 2025

[3.11] gh-127563: use `dk_log2_index_bytes=3` in empty dicts (GH-127568) (GH-127813) (#135463)

miss-islington
and
picnixz
authored

Commits on Jun 11, 2025

[3.11] gh-135374: Update the bundled copy of setuptools to 79.0.1 (#135396)
ambv
authored

Commits on Jun 3, 2025

Commits on Jun 2, 2025

[3.11] gh-134062: Fix hash collisions in IPv4Network and IPv6Network (GH-134063) (GH-134479)

miss-islington
and
mssalvatore
authored