Python 3.8 end of life

1. 39b2f82 Python 3.8.20 by Łukasz Langa · 12 months ago 3.8 v3.8.20
2. 4d069d5 [3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123770) by Petr Viktorin · 12 months ago
3. a50a86d [3.8] gh-123678: Upgrade libexpat 2.6.3 (#123712) by Seth Michael Larson · 12 months ago
4. e742f99 [3.8] gh-112275: Fix HEAD_LOCK deadlock in child process after fork (GH-112336) (GH-123688) (#123713) by Miss Islington (bot) · 12 months ago
5. 2309739 [3.8] gh-119690: Fixes buffer type confusion in _winapi.CreateFile and _winapi.CreateNamedPipe audit events (GH-119735) (#123680) by Miss Islington (bot) · 12 months ago
6. 0a87812 [3.8] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119028) by Serhiy Storchaka · 12 months ago
7. 7d1f50c [3.8] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123642) by Seth Michael Larson · 12 months ago
8. 7bc367e [3.8] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123433) by Jason R. Coombs · 12 months ago
9. a77ab24 [3.8] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123108) by Miss Islington (bot) · 12 months ago
10. b158a76 [3.8] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122611) by Łukasz Langa · 12 months ago
11. 2621a8a [3.8] gh-122133: Authenticate socket connection for `socket.socketpair()` fallback (GH-122134) (GH-122429) by Miss Islington (bot) · 1 year, 1 month ago
12. 1fb69b3 [3.8] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122121) by Łukasz Langa · 1 year, 1 month ago
13. 5505b91 [3.8] gh-112769: test_zlib: test_zlib: Fix comparison of ZLIB_RUNTIME_VERSION with non-int suffix (GH-112771) (GH-119567) by Ned Deily · 1 year, 3 months ago
14. 91e3669 [3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118742) by Steve Dower · 1 year, 3 months ago
15. 29c9728 [3.8] gh-114572: Fix locking in cert_store_stats and get_ca_certs (#118442) by Seth Michael Larson · 1 year, 3 months ago
16. 895f7e2 [3.8] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118479) by Petr Viktorin · 1 year, 3 months ago
17. f791cda [3.8] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118188) by Seth Michael Larson · 1 year, 3 months ago
18. f5bd65e [3.8] gh-116773: Fix overlapped memory corruption crash (GH-116774) (GH-117083) by jkriegshauser · 1 year, 5 months ago
19. 928d735 [3.8] gh-117187: Fix XML tests for vanilla Expat <2.6.0 (GH-117203) (#117248) by Miss Islington (bot) · 1 year, 5 months ago
20. 469ede4d Python 3.8.19 by Łukasz Langa · 1 year, 5 months ago v3.8.19
21. 41be376 [3.8] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116069) by Miss Islington (bot) · 1 year, 5 months ago
22. 854f645 [3.8] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116275) by Sebastian Pipping · 1 year, 5 months ago
23. 4d58a1d [3.8] gh-107077: Raise SSLCertVerificationError even if the error is set via SSL_ERROR_SYSCALL (GH-107586) (GH-107591) by Miss Islington (bot) · 1 year, 6 months ago
24. 8c6f277 [3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115475) by Seth Michael Larson · 1 year, 6 months ago
25. 1e7f79a [3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) (GH-115764) by Miss Islington (bot) · 1 year, 6 months ago
26. 366f315 [3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164) (GH-115536) by Seth Michael Larson · 1 year, 6 months ago
27. da0691d [3.8] Add missing sections to blurbs (GH-114553) (GH-115340) by Miss Islington (bot) · 1 year, 6 months ago
28. 64c9fcc [3.8] gh-111239: Update Windows build to use zlib 1.3.1 (GH-114877) (#115086) by Łukasz Langa · 1 year, 6 months ago
29. d737623 [3.8] gh-109991: Update Windows build to use OpenSSL 1.1.1w (GH-111266) by Zachary Ware · 1 year, 7 months ago
30. 02a9259 [3.8] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112843) by Serhiy Storchaka · 1 year, 7 months ago
31. 2e1156c [3.8] bpo-37013: Fix the error handling in socket.if_indextoname() (GH-13503) (GH-113474) by Miss Islington (bot) · 1 year, 7 months ago
32. 0df2eb5 [3.8] gh-108310: Fix TestPreHandshakeClose tests in test_ssl (#110718) by Lumír 'Frenzy' Balhar · 1 year, 7 months ago
33. 01845a1 [3.8] gh-113659: Skip hidden .pth files (GH-113660) (GH-114147) by Serhiy Storchaka · 1 year, 7 months ago
34. d05bac0 [3.8] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113916) by Serhiy Storchaka · 1 year, 7 months ago
35. c1c6bed [3.8] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111781) by Łukasz Langa · 1 year, 10 months ago
36. a56dcae Python 3.8.18 by Łukasz Langa · 2 years ago v3.8.18
37. b4368b5 [3.8] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108279) by Petr Viktorin · 2 years ago
38. a5d1571 [3.8] gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2. (#108124) by Ned Deily · 2 years ago
39. b4bcc06 [3.8] gh-108310: Fix CVE-2023-40217: Check for & avoid the ssl pre-close flaw (#108321) by Łukasz Langa · 2 years ago
40. 9a2d531 Python 3.8.17 by Łukasz Langa · 2 years, 2 months ago v3.8.17
41. 43eff24 [3.8] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (GH-105205) (#105370) by Łukasz Langa · 2 years, 2 months ago
42. 9c2ff15 [3.8] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) (#104895) by stratakis · 2 years, 2 months ago
43. 9f89c47 [3.8] gh-103935: Use `io.open_code()` when executing code in trace and profile modules (GH-103947) (#103954) by Steve Dower · 2 years, 3 months ago
44. 2062fce [3.8] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104121) by Miss Islington (bot) · 2 years, 3 months ago
45. 47ec96a [3.8] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104332) by Miss Islington (bot) · 2 years, 3 months ago
46. 79e63e5 [3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104548) by Petr Viktorin · 2 years, 3 months ago
47. 3205d1f [3.8] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102244) by Pradyun Gedam · 2 years, 5 months ago
48. ddd495e [3.8] gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727) (GH-101752) by Steve Dower · 2 years, 5 months ago
49. 4812813 [3.8] GH-102306 Avoid GHA CI macOS test_posix failure by using the appropriate macOS SDK (GH-102307) by Ned Deily · 2 years, 6 months ago
50. 32a1a61 [3.8] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101710) by Miss Islington (bot) · 2 years, 6 months ago
51. 41d301a [3.8] gh-95778: add doc missing in some places (GH-100627) (#101630) by Éric · 2 years, 6 months ago
52. be3b5f7 [3.8] gh-100180: Update Windows installer to OpenSSL 1.1.1s (GH-100903) (#101258) by Steve Dower · 2 years, 7 months ago
53. 1e3d2d5 Python 3.8.16 by Łukasz Langa · 2 years, 9 months ago v3.8.16
54. e43393a [3.8] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100033) by Miss Islington (bot) · 2 years, 9 months ago
55. b50b6f9 [3.8] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99661) by Miss Islington (bot) · 2 years, 9 months ago
56. 82ca283 [3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (GH-99231) by Miss Islington (bot) · 2 years, 9 months ago
57. 948c679 [3.8] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98527) by Miss Islington (bot) · 2 years, 10 months ago
58. 0037d46 [3.8] gh-98739: Update libexpat from 2.4.9 to 2.5.0 (GH-98742) (#98787) by Miss Islington (bot) · 2 years, 10 months ago
59. 0a4f650 [3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98192) by Miss Islington (bot) · 2 years, 10 months ago
60. 44adf8a Python 3.8.15 by Łukasz Langa · 2 years, 10 months ago v3.8.15
61. dca2fd2 [3.8] gh-95778: Mention sys.set_int_max_str_digits() in error message (GH-96874) (GH-96877) (GH-97835) by Miss Islington (bot) · 2 years, 11 months ago
62. 18a0cdb [3.8] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97575) by Miss Islington (bot) · 2 years, 11 months ago
63. 12c72d6 [3.8] gh-96577: Fixes buffer overrun in _msi module (GH-96633) (GH-96658) by Miss Islington (bot) · 2 years, 11 months ago
64. 069b718 [3.8] gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006) (gh-97013) by Miss Islington (bot) · 2 years, 11 months ago
65. f9ce9d4 [3.8] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97628) by Miss Islington (bot) · 2 years, 11 months ago
66. 9062049 [3.8] gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613) (GH-97633) by Miss Islington (bot) · 2 years, 11 months ago
67. f43e767 Python 3.8.14 by Łukasz Langa · 3 years ago v3.8.14
68. b5e331f [3.8] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96503) by Gregory P. Smith · 3 years ago
69. 48b323e [3.8] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95313) by Łukasz Langa · 3 years, 1 month ago
70. f78733b [3.8] gh-90355: Add isolated flag if currently isolated (GH-92857) (GH-94571) by Łukasz Langa · 3 years, 1 month ago
71. 51f1ae5 gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94124) by Miss Islington (bot) · 3 years, 2 months ago
72. 4dc2cae gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94094) by Miss Islington (bot) · 3 years, 2 months ago
73. 067c372 bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170) (GH-92954) by Victor Stinner · 3 years, 2 months ago
74. 6d4927a [3.8] gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93066) (#93148) by Łukasz Langa · 3 years, 3 months ago
75. 69cf020 [3.8] gh-80254: Disallow recursive usage of cursors in sqlite3 converters (#92333) by Erlend Egeberg Aasland · 3 years, 3 months ago
76. 7ccdec3 bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) (GH-32250) by Miss Islington (bot) · 3 years, 3 months ago
77. a5ed894 [3.8] gh-92448: Update the documentation builder to render the GitHub… (GH-92605) by Dong-hee Na · 3 years, 3 months ago
78. 0638941 [3.8] gh-91888: add a `:gh:` role to the documentation (GH-91889) (#91936) by Ezio Melotti · 3 years, 3 months ago
79. d35af52 [3.8] bpo-47138: Fix documentation build by pinning Jinja version to 3.0.3 (GH-32109) by m-aciek · 3 years, 4 months ago
80. f1c3816 Python 3.8.13 by Łukasz Langa · 3 years, 5 months ago
81. e8b72fc [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912) by Ned Deily · 3 years, 5 months ago
82. 7a315d8 bpo-46985: Upgrade bundled pip to 22.0.4 (GH-31819) (GH-31851) by Ned Deily · 3 years, 5 months ago
83. dea270a bpo-45405: Prevent internal configure error when running configure with recent versions of clang. (GH-28845) (GH-31889) by Ned Deily · 3 years, 5 months ago
84. ccbc31e bpo-46784: Add newly exported expat symbols to the namespace. (GH-31397) (GH-31419) by Miss Islington (bot) · 3 years, 5 months ago
85. 6649519 bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31734) by Steve Dower · 3 years, 5 months ago
86. cff1b78 bpo-46948: Fix CVE-2022-26488 by ensuring the Windows Installer correctly uses the install path during repair (GH-31729) by Steve Dower · 3 years, 5 months ago
87. c3ec5bc bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31740) by Miss Islington (bot) · 3 years, 5 months ago
88. 1c9701a bpo-46756: Fix authorization check in urllib.request (GH-31353) (GH-31572) by Miss Islington (bot) · 3 years, 6 months ago
89. eb6c840 bpo-46794: Bump up the libexpat version into 2.4.6 (GH-31487) (GH-31520) by Miss Islington (bot) · 3 years, 6 months ago
90. fdfd7a9 bpo-46811: Make test suite support Expat >=2.4.5 (GH-31453) by Sebastian Pipping · 3 years, 6 months ago
91. c60414d bpo-46400: Update libexpat from 2.4.1 to 2.4.4 (GH-31022) (GH-31297) by Dong-hee Na · 3 years, 6 months ago
92. 4c48cac bpo-41028: Doc: Move switchers to docsbuild-scripts. (GH-20969) (GH-30344) by Miss Islington (bot) · 3 years, 6 months ago
93. b1bc04d bpo-44949: Fix test_readline auto history tests (GH-27813) (GH-31118) by Miss Islington (bot) · 3 years, 6 months ago
94. 8a84aef [3.8] bpo-46474: Avoid REDoS in EntryPoint.pattern (sync with importlib_metadata 4.10.1) (GH-30803). (#30829) by Jason R. Coombs · 3 years, 6 months ago
95. f19c1a1 bpo-44828: Avoid tkinter file dialog failure on macOS 12 Monterey (GH-29276) (GH-29279) by Miss Islington (bot) · 3 years, 10 months ago
96. 67e10be bpo-44849: Fix os.set_inheritable() on FreeBSD 14 with O_PATH (GH-27623) (GH-28978) by Miss Islington (bot) · 3 years, 10 months ago
97. 1d8cb01 bpo-45195: Fix test_readline.test_nonascii() (GH-28329) (GH-28984) by Miss Islington (bot) · 3 years, 10 months ago
98. 456d6d9 bpo-45220: Avoid automatically selecting the Windows 11 SDK preview when building (GH-28393) (GH-28622) by Miss Islington (bot) · 3 years, 11 months ago
99. 07119dd Python 3.8.12 by Łukasz Langa · 4 years ago v3.8.12
100. 1f89e51 bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) (GH-28059) by Miss Islington (bot) · 4 years ago