Python 3.8.19

1. 469ede4d Python 3.8.19 by Łukasz Langa · 1 year, 5 months ago v3.8.19
2. 41be376 [3.8] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116069) by Miss Islington (bot) · 1 year, 5 months ago
3. 854f645 [3.8] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116275) by Sebastian Pipping · 1 year, 6 months ago
4. 4d58a1d [3.8] gh-107077: Raise SSLCertVerificationError even if the error is set via SSL_ERROR_SYSCALL (GH-107586) (GH-107591) by Miss Islington (bot) · 1 year, 6 months ago
5. 8c6f277 [3.8] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115475) by Seth Michael Larson · 1 year, 6 months ago
6. 1e7f79a [3.8] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) (GH-115764) by Miss Islington (bot) · 1 year, 6 months ago
7. 366f315 [3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164) (GH-115536) by Seth Michael Larson · 1 year, 6 months ago
8. da0691d [3.8] Add missing sections to blurbs (GH-114553) (GH-115340) by Miss Islington (bot) · 1 year, 6 months ago
9. 64c9fcc [3.8] gh-111239: Update Windows build to use zlib 1.3.1 (GH-114877) (#115086) by Łukasz Langa · 1 year, 6 months ago
10. d737623 [3.8] gh-109991: Update Windows build to use OpenSSL 1.1.1w (GH-111266) by Zachary Ware · 1 year, 7 months ago
11. 02a9259 [3.8] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112843) by Serhiy Storchaka · 1 year, 7 months ago
12. 2e1156c [3.8] bpo-37013: Fix the error handling in socket.if_indextoname() (GH-13503) (GH-113474) by Miss Islington (bot) · 1 year, 7 months ago
13. 0df2eb5 [3.8] gh-108310: Fix TestPreHandshakeClose tests in test_ssl (#110718) by Lumír 'Frenzy' Balhar · 1 year, 7 months ago
14. 01845a1 [3.8] gh-113659: Skip hidden .pth files (GH-113660) (GH-114147) by Serhiy Storchaka · 1 year, 7 months ago
15. d05bac0 [3.8] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113916) by Serhiy Storchaka · 1 year, 7 months ago
16. c1c6bed [3.8] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111781) by Łukasz Langa · 1 year, 10 months ago
17. a56dcae Python 3.8.18 by Łukasz Langa · 2 years ago v3.8.18
18. b4368b5 [3.8] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108279) by Petr Viktorin · 2 years ago
19. a5d1571 [3.8] gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2. (#108124) by Ned Deily · 2 years ago
20. b4bcc06 [3.8] gh-108310: Fix CVE-2023-40217: Check for & avoid the ssl pre-close flaw (#108321) by Łukasz Langa · 2 years ago
21. 9a2d531 Python 3.8.17 by Łukasz Langa · 2 years, 2 months ago v3.8.17
22. 43eff24 [3.8] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (GH-105205) (#105370) by Łukasz Langa · 2 years, 2 months ago
23. 9c2ff15 [3.8] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) (#104895) by stratakis · 2 years, 3 months ago
24. 9f89c47 [3.8] gh-103935: Use `io.open_code()` when executing code in trace and profile modules (GH-103947) (#103954) by Steve Dower · 2 years, 3 months ago
25. 2062fce [3.8] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104121) by Miss Islington (bot) · 2 years, 3 months ago
26. 47ec96a [3.8] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104332) by Miss Islington (bot) · 2 years, 3 months ago
27. 79e63e5 [3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104548) by Petr Viktorin · 2 years, 3 months ago
28. 3205d1f [3.8] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102244) by Pradyun Gedam · 2 years, 5 months ago
29. ddd495e [3.8] gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727) (GH-101752) by Steve Dower · 2 years, 6 months ago
30. 4812813 [3.8] GH-102306 Avoid GHA CI macOS test_posix failure by using the appropriate macOS SDK (GH-102307) by Ned Deily · 2 years, 6 months ago
31. 32a1a61 [3.8] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101710) by Miss Islington (bot) · 2 years, 6 months ago
32. 41d301a [3.8] gh-95778: add doc missing in some places (GH-100627) (#101630) by Éric · 2 years, 6 months ago
33. be3b5f7 [3.8] gh-100180: Update Windows installer to OpenSSL 1.1.1s (GH-100903) (#101258) by Steve Dower · 2 years, 7 months ago
34. 1e3d2d5 Python 3.8.16 by Łukasz Langa · 2 years, 9 months ago v3.8.16
35. e43393a [3.8] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100033) by Miss Islington (bot) · 2 years, 9 months ago
36. b50b6f9 [3.8] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99661) by Miss Islington (bot) · 2 years, 9 months ago
37. 82ca283 [3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (GH-99231) by Miss Islington (bot) · 2 years, 9 months ago
38. 948c679 [3.8] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98527) by Miss Islington (bot) · 2 years, 10 months ago
39. 0037d46 [3.8] gh-98739: Update libexpat from 2.4.9 to 2.5.0 (GH-98742) (#98787) by Miss Islington (bot) · 2 years, 10 months ago
40. 0a4f650 [3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98192) by Miss Islington (bot) · 2 years, 10 months ago
41. 44adf8a Python 3.8.15 by Łukasz Langa · 2 years, 10 months ago v3.8.15
42. dca2fd2 [3.8] gh-95778: Mention sys.set_int_max_str_digits() in error message (GH-96874) (GH-96877) (GH-97835) by Miss Islington (bot) · 2 years, 11 months ago
43. 18a0cdb [3.8] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97575) by Miss Islington (bot) · 2 years, 11 months ago
44. 12c72d6 [3.8] gh-96577: Fixes buffer overrun in _msi module (GH-96633) (GH-96658) by Miss Islington (bot) · 2 years, 11 months ago
45. 069b718 [3.8] gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006) (gh-97013) by Miss Islington (bot) · 2 years, 11 months ago
46. f9ce9d4 [3.8] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97628) by Miss Islington (bot) · 2 years, 11 months ago
47. 9062049 [3.8] gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613) (GH-97633) by Miss Islington (bot) · 2 years, 11 months ago
48. f43e767 Python 3.8.14 by Łukasz Langa · 3 years ago v3.8.14
49. b5e331f [3.8] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96503) by Gregory P. Smith · 3 years ago
50. 48b323e [3.8] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95313) by Łukasz Langa · 3 years, 1 month ago
51. f78733b [3.8] gh-90355: Add isolated flag if currently isolated (GH-92857) (GH-94571) by Łukasz Langa · 3 years, 2 months ago
52. 51f1ae5 gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94124) by Miss Islington (bot) · 3 years, 2 months ago
53. 4dc2cae gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94094) by Miss Islington (bot) · 3 years, 2 months ago
54. 067c372 bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170) (GH-92954) by Victor Stinner · 3 years, 2 months ago
55. 6d4927a [3.8] gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93066) (#93148) by Łukasz Langa · 3 years, 3 months ago
56. 69cf020 [3.8] gh-80254: Disallow recursive usage of cursors in sqlite3 converters (#92333) by Erlend Egeberg Aasland · 3 years, 3 months ago
57. 7ccdec3 bpo-47194: Update zlib to v1.2.12 on Windows to resolve CVE-2018-25032 (GH-32241) (GH-32250) by Miss Islington (bot) · 3 years, 3 months ago
58. a5ed894 [3.8] gh-92448: Update the documentation builder to render the GitHub… (GH-92605) by Dong-hee Na · 3 years, 3 months ago
59. 0638941 [3.8] gh-91888: add a `:gh:` role to the documentation (GH-91889) (#91936) by Ezio Melotti · 3 years, 3 months ago
60. d35af52 [3.8] bpo-47138: Fix documentation build by pinning Jinja version to 3.0.3 (GH-32109) by m-aciek · 3 years, 4 months ago
61. f1c3816 Python 3.8.13 by Łukasz Langa · 3 years, 5 months ago
62. e8b72fc [3.8] bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n. (GH-31912) by Ned Deily · 3 years, 5 months ago
63. 7a315d8 bpo-46985: Upgrade bundled pip to 22.0.4 (GH-31819) (GH-31851) by Ned Deily · 3 years, 5 months ago
64. dea270a bpo-45405: Prevent internal configure error when running configure with recent versions of clang. (GH-28845) (GH-31889) by Ned Deily · 3 years, 5 months ago
65. ccbc31e bpo-46784: Add newly exported expat symbols to the namespace. (GH-31397) (GH-31419) by Miss Islington (bot) · 3 years, 5 months ago
66. 6649519 bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900 (GH-31732) (GH-31734) by Steve Dower · 3 years, 5 months ago
67. cff1b78 bpo-46948: Fix CVE-2022-26488 by ensuring the Windows Installer correctly uses the install path during repair (GH-31729) by Steve Dower · 3 years, 5 months ago
68. c3ec5bc bpo-46932: Update bundled libexpat to 2.4.7 (GH-31736) (GH-31740) by Miss Islington (bot) · 3 years, 5 months ago
69. 1c9701a bpo-46756: Fix authorization check in urllib.request (GH-31353) (GH-31572) by Miss Islington (bot) · 3 years, 6 months ago
70. eb6c840 bpo-46794: Bump up the libexpat version into 2.4.6 (GH-31487) (GH-31520) by Miss Islington (bot) · 3 years, 6 months ago
71. fdfd7a9 bpo-46811: Make test suite support Expat >=2.4.5 (GH-31453) by Sebastian Pipping · 3 years, 6 months ago
72. c60414d bpo-46400: Update libexpat from 2.4.1 to 2.4.4 (GH-31022) (GH-31297) by Dong-hee Na · 3 years, 6 months ago
73. 4c48cac bpo-41028: Doc: Move switchers to docsbuild-scripts. (GH-20969) (GH-30344) by Miss Islington (bot) · 3 years, 6 months ago
74. b1bc04d bpo-44949: Fix test_readline auto history tests (GH-27813) (GH-31118) by Miss Islington (bot) · 3 years, 6 months ago
75. 8a84aef [3.8] bpo-46474: Avoid REDoS in EntryPoint.pattern (sync with importlib_metadata 4.10.1) (GH-30803). (#30829) by Jason R. Coombs · 3 years, 6 months ago
76. f19c1a1 bpo-44828: Avoid tkinter file dialog failure on macOS 12 Monterey (GH-29276) (GH-29279) by Miss Islington (bot) · 3 years, 10 months ago
77. 67e10be bpo-44849: Fix os.set_inheritable() on FreeBSD 14 with O_PATH (GH-27623) (GH-28978) by Miss Islington (bot) · 3 years, 10 months ago
78. 1d8cb01 bpo-45195: Fix test_readline.test_nonascii() (GH-28329) (GH-28984) by Miss Islington (bot) · 3 years, 10 months ago
79. 456d6d9 bpo-45220: Avoid automatically selecting the Windows 11 SDK preview when building (GH-28393) (GH-28622) by Miss Islington (bot) · 3 years, 11 months ago
80. 07119dd Python 3.8.12 by Łukasz Langa · 4 years ago v3.8.12
81. 1f89e51 bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l (GH-28051) (GH-28059) by Miss Islington (bot) · 4 years ago
82. 7234e67 bpo-44689: ctypes.util.find_library() now finds macOS 11+ system libraries when built on older macOS systems (GH-27251) (GH-28054) by Miss Islington (bot) · 4 years ago
83. 803c607 [3.8] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28041) by Łukasz Langa · 4 years ago
84. b93aea4 [3.8] bpo-43124: Fix smtplib multiple CRLF injection (GH-25987) (GH-28036) by Miss Islington (bot) · 4 years ago
85. c9c2a0b bpo-44394: Update libexpat copy to 2.4.1 (GH-26945) (GH-28033) by Miss Islington (bot) · 4 years ago
86. 193443b bpo-42278: Use tempfile.TemporaryDirectory rather than tempfile.mktemp in pydoc (GH-23200) (GH-28026) by Miss Islington (bot) · 4 years ago
87. 81148c6 bpo-45001: Make email date parsing more robust against malformed input (GH-27946) (GH-27974) by Miss Islington (bot) · 4 years ago
88. 6ebfe8d [3.8] bpo-36384: [doc] Correct typos in CVE-2021-29921 fix description (GH-27825) by Łukasz Langa · 4 years ago
89. 03dd89d [3.8] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) (GH-27801) by achraf-mer · 4 years ago
90. 09d814b [3.8] bpo-33930: Fix segfault with deep recursion when cleaning method objects (GH-27678) (GH-27721) by Łukasz Langa · 4 years ago
91. b019ffe bpo-44872: use new trashcan macros in framobject.c (GH-27683) (GH-27692) by Irit Katriel · 4 years ago
92. 0a42309 bpo-44856: Possible reference leak in error paths of update_bases() and __build_class__ (GH-27647) (GH-27652) by Miss Islington (bot) · 4 years ago
93. 54d3871 bpo-30511: Add note on thread safety to shutil.make_archive() (GH-26933) (#27276) by Miss Islington (bot) · 4 years, 1 month ago
94. c3ffbbd Python 3.8.11 by Łukasz Langa · 4 years, 2 months ago v3.8.11
95. 4844abd [3.8] bpo-44061: Fix pkgutil.iter_modules regression when passed a pathlib.Path object (GH-25964). (GH-26056) by Łukasz Langa · 4 years, 3 months ago
96. 378211f bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules (GH-26025) (#26028) by Steve Dower · 4 years, 3 months ago
97. f396864 bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916) (#25933) by Miss Islington (bot) · 4 years, 4 months ago
98. 515a7bc [3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595) (#25726) by Miss Islington (bot) · 4 years, 4 months ago
99. 705c615 Merge tag 'v3.8.10' into 3.8 by Łukasz Langa · 4 years, 4 months ago
100. 8ab272f bpo-42800: Add audit events for f_code and tb_frame (GH-24182) by Miss Islington (bot) · 4 years, 4 months ago