Final head of the former 3.7 branch
  1. ecd9946 Python 3.7.17 by Ned Deily · 2 years, 2 months ago v3.7.17
  2. 417ac32 [3.7] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u. (GH-105308) by Ned Deily · 2 years, 2 months ago
  3. d28bafa [3.7] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-104896) by stratakis · 2 years, 2 months ago
  4. 1ce801b [3.7] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104333) by Miss Islington (bot) · 2 years, 3 months ago
  5. 4e2dd0c [3.7] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104122) by Miss Islington (bot) · 2 years, 3 months ago
  6. e168f83 [3.7] gh-101997: Update bundled pip version to 23.0.1 (GH-102273) by Pradyun Gedam · 2 years, 3 months ago
  7. 7522ff7 [3.7] GH-102306 Avoid GHA CI macOS test_posix failure by using the appropriate macOS SDK. (GH-102427) by Ned Deily · 2 years, 4 months ago
  8. cbd192b [3.7] gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727) (GH-101753) by Steve Dower · 2 years, 6 months ago
  9. c7fdc9c [3.7] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101713) by Steve Dower · 2 years, 6 months ago
  10. ecfed4f [3.7] gh-95778: add doc missing in some places (GH-100627) (GH-101631) by Éric · 2 years, 6 months ago
  11. ae3dea3 gh-100180: Update Windows installer to OpenSSL 1.1.1s (GH-100903) (GH-101259) by Steve Dower · 2 years, 7 months ago
  12. 3f82aa7 Python 3.7.16 by Ned Deily · 2 years, 9 months ago v3.7.16
  13. b5bdf6a [3.7] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (GH-100034) by Miss Islington (bot) · 2 years, 9 months ago
  14. b0b590b [3.7] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99232) by Miss Islington (bot) · 2 years, 9 months ago
  15. 64e95f2 [3.7] gh-98739: Update libexpat from 2.4.9 to 2.5.0 (GH-98742) (#98788) by Miss Islington (bot) · 2 years, 10 months ago
  16. 8088c90 [3.7] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (GH-98528) by Miss Islington (bot) · 2 years, 10 months ago
  17. 6e8e9e7 [3.7] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (GH-98191) by Miss Islington (bot) · 2 years, 10 months ago
  18. 9de83ce 3.7.15 by Ned Deily · 2 years, 10 months ago v3.7.15
  19. c7ec780 [3.7] gh-97612: Fix shell injection in get-remote-certificate.py (#97613) (#97634) by Victor Stinner · 2 years, 11 months ago
  20. fd82f16 [3.7] gh-97616: list_resize() checks for integer overflow (GH-97617) (#97629) by Miss Islington (bot) · 2 years, 11 months ago
  21. 98884f5 [3.7] gh-96848: Fix -X int_max_str_digits option parsing (#96988) (#97576) by Victor Stinner · 2 years, 11 months ago
  22. 46796ed [3.7] gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006) (#97014) by Miss Islington (bot) · 2 years, 11 months ago
  23. 7fcfa94 [3.7] gh-95778: Mention sys.set_int_max_str_digits() in error message (GH-96874) (GH-96877) (GH-97836) by Miss Islington (bot) · 2 years, 11 months ago
  24. 8fc2635 gh-96577: Fixes buffer overrun in _msi module (GH-96633) (GH-96659) by Miss Islington (bot) · 3 years ago
  25. 61e371a 3.7.14 by Ned Deily · 3 years ago
  26. 15ec1af [3.7] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (GH-96504) by Gregory P. Smith · 3 years ago
  27. bb8e49b bpo-41306: Allow scale value to not be rounded (GH-21715) (GH-96484) by Miss Islington (bot) · 3 years ago
  28. c199831 [3.7] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95314) by Łukasz Langa · 3 years, 1 month ago
  29. 8a34afd gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94095) by Miss Islington (bot) · 3 years, 2 months ago
  30. 9b13df4 gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94126) by Miss Islington (bot) · 3 years, 2 months ago
  31. 3a4ca49 [3.7] gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93149) by Łukasz Langa · 3 years, 3 months ago
  32. 2a353b2 [3.7] gh-80254: Disallow recursive usage of cursors in sqlite3 converters (GH-92334) by Erlend Egeberg Aasland · 3 years, 3 months ago
  33. aebbd75 gh-92448: Update the documentation builder to render the GitHub issue (GH-92600) by Ned Deily · 3 years, 3 months ago
  34. 73317e3 [3.7] gh-91888: add a `:gh:` role to the documentation (GH-91889) (GH-91937) by Ezio Melotti · 3 years, 3 months ago
  35. 387f93c1 bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) (GH-32251) by Miss Islington (bot) · 3 years, 5 months ago
  36. 25f00bf bpo-47138: Fix documentation build by pinning Jinja version to 3.0.3 (GH-32111) by m-aciek · 3 years, 5 months ago
  37. 000593c 3.7.13 by Ned Deily · 3 years, 5 months ago v3.7.13
  38. b620446 bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31911) by Ned Deily · 3 years, 5 months ago
  39. 5263afe Tidy changelog by removing redundant intermediate expat update items. (GH-31907) by Ned Deily · 3 years, 5 months ago
  40. 720bb45 bpo-45405: Prevent internal configure error when running configure with recent versions of clang. (GH-28845) (GH-31890) by Ned Deily · 3 years, 5 months ago
  41. 80cc10f Revert "bpo-46986: Upgrade bundled setuptools to 60.9.3 (GH-31820)" (GH-31882) by Ned Deily · 3 years, 5 months ago
  42. 0fbab8a bpo-46986: Upgrade bundled setuptools to 60.9.3 (GH-31820) (GH-31861) by Ned Deily · 3 years, 5 months ago
  43. 5a8e968 bpo-46985: Upgrade bundled pip to 22.0.4 (GH-31819) (GH-31852) by Ned Deily · 3 years, 5 months ago
  44. f656bc1 bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31741) by Miss Islington (bot) · 3 years, 5 months ago
  45. 4a3c610 bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31735) by Steve Dower · 3 years, 5 months ago
  46. 9747627 bpo-46948: Fix CVE-2022-26488 by ensuring the Windows Installer correctly uses the install path during repair (GH-31730) by Steve Dower · 3 years, 5 months ago
  47. 31fef7e bpo-46756: Fix authorization check in urllib.request (GH-31353) (GH-31573) by Miss Islington (bot) · 3 years, 6 months ago
  48. 15d7594 bpo-46794: Bump up the libexpat version into 2.4.6 (GH-31487) (GH-31521) by Miss Islington (bot) · 3 years, 6 months ago
  49. 61f3c30 bpo-46784: Add newly exported expat symbols to the namespace. (GH-31397) (GH-31418) by Miss Islington (bot) · 3 years, 6 months ago
  50. d4f5bb9 bpo-46811: Make test suite support Expat >=2.4.5 (GH-31453) (GH-31471) by Miss Islington (bot) · 3 years, 6 months ago
  51. 5fdacac bpo-46400: Update libexpat from 2.4.1 to 2.4.4 (GH-31022) (GH-31298) by Dong-hee Na · 3 years, 6 months ago
  52. 1f97973 3.7.12 by Ned Deily · 4 years ago v3.7.12
  53. 79101b8 [3.7] bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28042) by Łukasz Langa · 4 years ago
  54. d2cc04c [3.7] bpo-43124: Fix smtplib multiple CRLF injection (GH-25987) (GH-28037) by Miss Islington (bot) · 4 years ago
  55. e9b85af bpo-45001: Make email date parsing more robust against malformed input (GH-27946) (GH-27975) by Miss Islington (bot) · 4 years ago
  56. 041bfaf Fix Sphinx directive typo in 3.7.11 changelog. by Ned Deily · 4 years, 1 month ago
  57. 9da28d2 3.7.11 by Ned Deily · 4 years, 2 months ago v3.7.11
  58. 078b146 bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916) (GH-25934) by Miss Islington (bot) · 4 years, 3 months ago
  59. f4dac7e [3.7] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25923) by Miss Islington (bot) · 4 years, 3 months ago
  60. ada1499 bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391) (#25249) by Miss Islington (bot) · 4 years, 4 months ago
  61. 64be96a [3.7] bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915) (GH-24928) by Christian Heimes · 4 years, 4 months ago
  62. 2f01c56 [3.7] bpo-43660: Fix crash when displaying exceptions with custom values for sys.stderr (GH-25075). (GH-25085) by Pablo Galindo · 4 years, 5 months ago
  63. 7c2284f bpo-42988: Remove the pydoc getfile feature (GH-25015) (#25066) by Miss Islington (bot) · 4 years, 5 months ago
  64. 7937395 [3.7] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881) (GH-24883) by Miss Islington (bot) · 4 years, 5 months ago
  65. 9b2dd1f 3.7.10 by Ned Deily · 4 years, 6 months ago v3.7.10
  66. d0d4d30 [3.7] bpo-42967: only use '&' as a query string separator (GH-24297) (GH-24531) by Senthil Kumaran · 4 years, 6 months ago
  67. d9b8f13 [3.7] closes bpo-42938: Replace snprintf with Python unicode formatting in ctypes param reprs. (GH-24249) by Benjamin Peterson · 4 years, 7 months ago
  68. 8200ee6 bpo-42794: Update test_nntplib to use offical group name for testing (GH-24037) (GH-24041) by Miss Islington (bot) · 4 years, 8 months ago
  69. 00278d4 bpo-17140: Document multiprocessing's ThreadPool (GH-23812) (GH-23836) by Miss Islington (bot) · 4 years, 8 months ago
  70. db95802 bpo-40791: Make compare_digest more constant-time. (GH-23438) by Miss Islington (bot) · 4 years, 9 months ago
  71. 225e365 [3.7] bpo-42103: Improve validation of Plist files. (GH-22882) (#23117) by Serhiy Storchaka · 4 years, 9 months ago
  72. 43e5231 bpo-41944: No longer call eval() on content received via HTTP in the CJK codec tests (GH-22566) (GH-22578) by Miss Skeleton (bot) · 4 years, 10 months ago
  73. e512bc7 bpo-42051: Reject XML entity declarations in plist files (#22760) (GH-22801) by Ned Deily · 4 years, 10 months ago
  74. 9b5a023 [3.7] bpo-41976: Fix the fallback to gcc of ctypes.util.find_library when using gcc>9 (GH-22598). (GH-22601) by Pablo Galindo · 4 years, 10 months ago
  75. 13c9474 3.7.9 by Ned Deily · 5 years ago v3.7.9
  76. a0ad829 bpo-41100: additional fixes for testing on macOS 11 Big Sur Intel by Ned Deily · 5 years ago
  77. cf79cbf bpo-33786: Fix asynchronous generators to handle GeneratorExit in athrow() (GH-7467) (GH-21878) by Miss Islington (bot) · 5 years ago
  78. ca75fec bpo-39603: Prevent header injection in http methods (GH-18485) (GH-21538) by Miss Islington (bot) · 5 years ago
  79. eb0d255 bpo-41304: Update NEWS to include CVE-2020-15801 reference (GH-21521) (GH-21524) by Miss Islington (bot) · 5 years ago
  80. 4bfcffe bpo-41304: Ensure python3x._pth is loaded on Windows (GH-21495) (#21499) by Steve Dower · 5 years ago
  81. 79c6b60 bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) (GH-21484) by Miss Islington (bot) · 5 years ago
  82. 620e276 bpo-41288: Fix a crash in unpickling invalid NEWOBJ_EX. (GH-21458) (GH-21461) by Miss Islington (bot) · 5 years ago
  83. c8c818b closes bpo-41235: Fix the error handling in SSLContext.load_dh_params() (GH-21389) by Miss Islington (bot) · 5 years ago
  84. 110dd15 [3.7] bpo-29778: Ensure python3.dll is loaded from correct locations when Python is embedded (GH-21297) (#21298) by Steve Dower · 5 years ago
  85. b98e779 [3.7] bpo-41004: Resolve hash collisions for IPv4Interface and IPv6Interface (GH-21033) (GH-21231) by Tapas Kundu · 5 years ago
  86. 4b47a5b 3.7.8 by Ned Deily · 5 years ago v3.7.8
  87. cfbc759 BPO-41100: Support macOS 11 when building (GH-21113) (GH-21155) by Miss Islington (bot) · 5 years ago
  88. d3798ed [3.7] bpo-41009: fix requires_OS_version() class decorator (GH-20942) (GH-20949) by Christian Heimes · 5 years ago
  89. 5f3933d 3.7.8rc1 by Ned Deily · 5 years ago v3.7.8rc1
  90. 0d70a98 bpo-40204: Pin Sphinx version to 2.3.1 in Doc/Makefile by Ned Deily · 5 years ago
  91. 966036a bpo-39580: add check for CLI installation on macOS by Ned Deily · 5 years ago
  92. 9f4eec0 Update the macOS installer build scripts by Ned Deily · 5 years ago
  93. 678ffc4 bpo-38488: Upgrade bundled versions of pip & setuptools (GH-20491) (GH-20900) by Miss Islington (bot) · 5 years ago
  94. b46beb2 bpo-40448: ensurepip: Do not use cache (GH-19812) by Miss Islington (bot) · 5 years ago
  95. aa83935 [3.7] bpo-34226: fix cgi.parse_multipart without content_length (GH-8530) (GH-20892) by Miss Islington (bot) · 5 years ago
  96. 617af99 bpo-40164: Update Windows OpenSSL to 1.1.1g (GH-20834) by Steve Dower · 5 years ago
  97. 0abb70e bpo-40964: disable remote IMAP tests (GH-20836) by Christian Heimes · 5 years ago
  98. ebd4400 bpo-40025: Require _generate_next_value_ to be defined before members (GH-19762) by Miss Islington (bot) · 5 years ago
  99. f881c86 bpo-29620: iterate over a copy of sys.modules (GH-4800) (GH-20817) by Miss Islington (bot) · 5 years ago
  100. 4b378ac Add quotes to code to be a string by Miss Islington (bot) · 5 years ago