Final head of the former 3.3 branch

1. 17bf6b4 Bump to 3.3.7 by Ned Deily · 8 years ago v3.3.7
2. 69003fe Update NEWS.d and suspicious doc filter by Ned Deily · 8 years ago
3. 297516e [3.3] bpo-30947, bpo-31170: Update expat from 2.2.1 to 2.2.4 (#3352) by Victor Stinner · 8 years ago
4. a4e774f [3.3] bpo-30119: fix ftplib.FTP.putline() to throw an error for a illegal command (#1214) (#2885) by Dong-hee Na · 8 years ago
5. 7b92f9f bpo-26657: Fix Windows directory traversal vulnerability with http.server (#782) (#2860) by Victor Stinner · 8 years ago
6. 8e88f6b [3.3] bpo-22928: Disabled HTTP header injections in http.client. (#2817) by Serhiy Storchaka · 8 years ago
7. 8fbdab5 [3.3] [3.5] bpo-27945: Fixed various segfaults with dict. (GH-1657) (GH-1678) (#2396) by Serhiy Storchaka · 8 years ago
8. 052f9d6 [3.3] bpo-30500: urllib: Simplify splithost by calling into urlparse. (#1849) (#2292) by Victor Stinner · 8 years ago
9. e46f1c1 [security][3.3] bpo-30730: Prevent environment variables injection in subprocess on Windows. (GH-2325) (#2363) by Serhiy Storchaka · 8 years ago
10. 3625f7f [3.3] bpo-30585: [security] raise an error when STARTTLS fails (#225) by Victor Stinner · 8 years ago
11. ab90986 [3.3] bpo-29591, bpo-30694: Upgrade Modules/expat to libexpat 2.2.1 (#2164) (#2204) by Victor Stinner · 8 years ago
12. 87700f1 Add "Misc/NEWS.d" directory tree for "blurb". GH-2332 by larryhastings · 8 years ago
13. b626643 Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X by Serhiy Storchaka · 9 years ago
14. 07bcf05 Issue #28563: Fixed possible DoS and arbitrary code execution when handle by Serhiy Storchaka · 9 years ago
15. d751040 Issue #26171: Prevent buffer overflow in get_data by Berker Peksag · 9 years ago
16. 1f0e7c9 rearrange methodcaller_new so that the main error case does not cause uninitialized memory usage (closes #27783) by Benjamin Peterson · 9 years ago
17. 3a27b08 do not decref value borrowed from list (closes #27774) by Benjamin Peterson · 9 years ago
18. 4f97651 fix possible integer overflow in binascii.b2a_qp (closes #27760) by Benjamin Peterson · 9 years ago
19. 6e01d90 check for overflow in join_append_data (closes #27758) by Benjamin Peterson · 9 years ago
20. 4cbb23f Prevent HTTPoxy attack (CVE-2016-1000110) by Senthil Kumaran · 9 years ago
21. d27a7c1 Issue #27369: Merge test_pyexpat from 3.2 into 3.3 by Martin Panter · 9 years ago
22. 076ca6c Issue #27369: Don’t test error message detail that changed in Expat 2.2.0 by Martin Panter · 9 years ago 3.2
23. 2cdcaf1 Issue #22758: Move NEWS entry to Library section by Martin Panter · 9 years ago
24. 5f21f43 #22758: fix regression in handling of secure cookies. by R David Murray · 9 years ago
25. 3d81d93 Issue #25940: Use self-signed.pythontest.net in SSL tests by Martin Panter · 10 years ago
26. 31b9410 Issue #25709: Fixed problem with in-place string concatenation and utf-8 cache. by Serhiy Storchaka · 10 years ago
27. 73f5507 Issue #25940: Merge self-signed.pythontest.net testing from 3.2 into 3.3 by Martin Panter · 10 years ago
28. 14b2c82 fix reordering by Benjamin Peterson · 10 years ago
29. 2deaea3 merge 3.2 by Benjamin Peterson · 10 years ago
30. 5e62117 add CVE and issue number by Benjamin Peterson · 10 years ago
31. a82f77f protect against mutation of the dict during insertion (closes #24407) by Benjamin Peterson · 10 years ago
32. dac3ab8 add issue number by Benjamin Peterson · 10 years ago
33. 59b08c1 use safe allocation and reallocation macros by Benjamin Peterson · 10 years ago
34. d504f20 merge 3.2 (#22931) by Benjamin Peterson · 10 years ago
35. 9bd476e allow square brackets in cookie values (closes #22931) by Benjamin Peterson · 10 years ago
36. deff2b7 be more robust against the filters list changing under us (closes #24096) by Benjamin Peterson · 10 years ago
37. 501182a just sort the items tuple directly (closes #24094) by Benjamin Peterson · 10 years ago
38. 51454a6 merge 3.2 (#24044) by Benjamin Peterson · 10 years ago
39. 0823ffb properly handle malloc failure (closes #24044) by Benjamin Peterson · 10 years ago
40. 418fd74 Issue #23998: PyImport_ReInitLock() now checks for lock allocation error by Christian Heimes · 10 years ago
41. b779bfb fix possible overflow bugs in unicodedata (closes #23367) by Benjamin Peterson · 10 years ago
42. 03f8612 merge 3.2 by Benjamin Peterson · 11 years ago
43. 893cce9 remove RPM, since it's unused and unmaintained by Benjamin Peterson · 11 years ago
44. 8ce6806 add overflow checking (closes #23361) by Benjamin Peterson · 11 years ago
45. 0eaabf1 check for overflows in permutations() and product() (closes #23363, closes #23364) by Benjamin Peterson · 11 years ago
46. 6f08229 check for overflow in combinations_with_replacement (closes #23365) by Benjamin Peterson · 11 years ago
47. 4b40eeb detect overflow in combinations (closes #23366) by Benjamin Peterson · 11 years ago
48. e3bfe19 fix possible overflow in encode_basestring_ascii (closes #23369) by Benjamin Peterson · 11 years ago
49. 4dbc305 Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV. Analysis by Serhiy Storchaka · 11 years ago
50. 3f95292 Issue #23055: Fixed a buffer overflow in PyUnicode_FromFormatV. Analysis by Serhiy Storchaka · 11 years ago
51. 72c2a0f merge 3.2 (closes #23165) by Benjamin Peterson · 11 years ago
52. f18bf6f add some overflow checks before multiplying (closes #23165) by Benjamin Peterson · 11 years ago
53. 81b7374 merge 3.2 (#16043) by Benjamin Peterson · 11 years ago
54. 4e9cefa add a default limit for the amount of data xmlrpclib.gzip_decode will return (closes #16043) by Benjamin Peterson · 11 years ago
55. e1bd38c fix integer overflow in unicode case operations (closes #22643) by Benjamin Peterson · 11 years ago
56. 18e8972 Bump to 3.3.6 by Georg Brandl · 11 years ago v3.3.6
57. 439d885 Bump to 3.2.6 by Georg Brandl · 11 years ago v3.2.6
58. b3ac843 #16040: fix unlimited read from connection in nntplib. by Georg Brandl · 11 years ago
59. e800a0e Bump to 3.2.6rc1 by Georg Brandl · 11 years ago
60. 4b16818 Issue #22518: Fixed integer overflow issues in "backslashreplace", by Serhiy Storchaka · 11 years ago v3.3.6rc1
61. 76e73f8 Bump to 3.3.6rc1 by Georg Brandl · 11 years ago
62. ff3e5e3 Fix unicode_aswidechar() for 4b unicode and 2b wchar_t (AIX). by Georg Brandl · 11 years ago
63. 51c1162 Issue #19855: uuid.getnode() on Unix now looks on the PATH for the by Georg Brandl · 11 years ago
64. 736b801 prevent overflow in unicode_repr (closes #22520) by Benjamin Peterson · 11 years ago
65. bbd0a32 clear BufferedRWPair weakrefs on deallocation (closes #22517) by Benjamin Peterson · 11 years ago
66. 42ff105 fix overflow checking in PyBytes_Repr (closes #22519) by Benjamin Peterson · 11 years ago
67. 3bbb2e4 NEWS issue for #22518 by Benjamin Peterson · 11 years ago
68. e025b52 Issue #22419: Limit the length of incoming HTTP request in wsgiref server to 65536 bytes. by Senthil Kumaran · 11 years ago
69. 7d0b8f9 Lax cookie parsing in http.cookies could be a security issue when combined by Antoine Pitrou · 11 years ago
70. 217f4cd Issue #21323: Fix http.server to again handle scripts in CGI subdirectories, by Ned Deily · 11 years ago
71. 915a30f Issue #21323: Fix http.server to again handle scripts in CGI subdirectories, by Ned Deily · 11 years ago
72. 6cd1954 merge 3.2 (#21766) by Benjamin Peterson · 11 years ago
73. 73b8b1c url unquote the path before checking if it refers to a CGI script (closes #21766) by Benjamin Peterson · 11 years ago
74. 8577e5a - Issue #17752: Fix distutils tests when run from the installed location. by doko@ubuntu.com · 11 years ago
75. 156285c merge 3.2 by Benjamin Peterson · 11 years ago
76. 99b5afa in scan_once, prevent the reading of arbitrary memory when passed a negative index by Benjamin Peterson · 11 years ago
77. 4717e21 merge 3.2 (#21082) by Benjamin Peterson · 11 years ago
78. ee5f1c1 remove directory mode check from makedirs (closes #21082) by Benjamin Peterson · 11 years ago
79. aa2d085 merge 3.2 by Benjamin Peterson · 11 years ago
80. 8aef28a add Ian Beer by Benjamin Peterson · 11 years ago
81. e558181 Issue #20939: Use www.example.com instead of www.python.org to avoid test by Ned Deily · 11 years ago
82. fd9262c Issue #16039: CVE-2013-1752: Change use of readline in imaplib module to limit by Georg Brandl · 11 years ago
83. 0840b41 Issue #22421 - Secure pydoc server run. Bind it to localhost instead of all interfaces. by Georg Brandl · 11 years ago
84. dad182c Lax cookie parsing in http.cookies could be a security issue when combined by Antoine Pitrou · 11 years ago
85. 860c367 Issue #22419: Limit the length of incoming HTTP request in wsgiref server to by Georg Brandl · 11 years ago
86. 21bf3f9 Issue #22517: When a io.BufferedRWPair object is deallocated, clear its by Georg Brandl · 11 years ago
87. eaca861 Issue #16041: CVE-2013-1752: poplib: Limit maximum line lengths to 2048 to by Georg Brandl · 11 years ago
88. 210ee47 Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by by Georg Brandl · 11 years ago
89. 3e952d5 Issue #20633: Replace relative import by absolute import. by Richard Oudkerk · 11 years ago
90. fda3355 fix ctypes test alignment assumptions (closes #20946) by Benjamin Peterson · 11 years ago
91. b454742 Issue #20939: Fix test_geturl failure in test_urllibnet due to by Ned Deily · 11 years ago
92. 45fc871 Make distutils error messages more helpful (#11599). by Éric Araujo · 11 years ago
93. f993399 add Sean Rodman by Benjamin Peterson · 11 years ago
94. fc773a2 Avoid “error: None” messages from distutils (#4931). by Éric Araujo · 11 years ago
95. 6120739 Issue #20875: Prevent possible gzip "'read' is not defined" NameError. by Ned Deily · 11 years ago
96. 5e572fd merge with 3.3.5 release repo by Georg Brandl · 11 years ago
97. 92d2d34 Post-release update. by Georg Brandl · 11 years ago
98. fbd7518 Bump to 3.3.5 final. by Georg Brandl · 11 years ago v3.3.5
99. ccdf352 Issue #20283: RE pattern methods now accept the string keyword parameters by Serhiy Storchaka · 11 years ago
100. c186b23 Bump to 3.3.5rc2. by Georg Brandl · 11 years ago v3.3.5rc2