Python 3.8.20

1. 4d069d5 [3.8] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123770) by Petr Viktorin · 12 months ago
2. 0a87812 [3.8] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119028) by Serhiy Storchaka · 12 months ago
3. 7d1f50c [3.8] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123642) by Seth Michael Larson · 12 months ago
4. 7bc367e [3.8] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123433) by Jason R. Coombs · 12 months ago
5. a77ab24 [3.8] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123108) by Miss Islington (bot) · 12 months ago
6. b158a76 [3.8] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122611) by Łukasz Langa · 12 months ago
7. e319f77 [3.8] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122509) by Miss Islington (bot) · 1 year, 1 month ago
8. 2621a8a [3.8] gh-122133: Authenticate socket connection for `socket.socketpair()` fallback (GH-122134) (GH-122429) by Miss Islington (bot) · 1 year, 1 month ago
9. 1fb69b3 [3.8] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122121) by Łukasz Langa · 1 year, 1 month ago
10. 5505b91 [3.8] gh-112769: test_zlib: test_zlib: Fix comparison of ZLIB_RUNTIME_VERSION with non-int suffix (GH-112771) (GH-119567) by Ned Deily · 1 year, 3 months ago
11. 91e3669 [3.8] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118742) by Steve Dower · 1 year, 3 months ago
12. 895f7e2 [3.8] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118479) by Petr Viktorin · 1 year, 3 months ago
13. f5bd65e [3.8] gh-116773: Fix overlapped memory corruption crash (GH-116774) (GH-117083) by jkriegshauser · 1 year, 5 months ago
14. 928d735 [3.8] gh-117187: Fix XML tests for vanilla Expat <2.6.0 (GH-117203) (#117248) by Miss Islington (bot) · 1 year, 5 months ago
15. 41be376 [3.8] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116069) by Miss Islington (bot) · 1 year, 5 months ago
16. 854f645 [3.8] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116275) by Sebastian Pipping · 1 year, 5 months ago
17. ab64d7d [3.8] gh-97032: avoid test_squeezer crash on macOS buildbots (GH-115508) (GH-115656) by Miss Islington (bot) · 1 year, 6 months ago
18. 366f315 [3.8] gh-115133: Fix tests for XMLPullParser with Expat 2.6.0 (GH-115164) (GH-115536) by Seth Michael Larson · 1 year, 6 months ago
19. 648c44d [3.8] gh-107888: Fix test_mmap.test_access_parameter() on macOS 14 (GH-109928) (GH-114183) by Miss Islington (bot) · 1 year, 7 months ago
20. 02a9259 [3.8] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112843) by Serhiy Storchaka · 1 year, 7 months ago
21. 2e1156c [3.8] bpo-37013: Fix the error handling in socket.if_indextoname() (GH-13503) (GH-113474) by Miss Islington (bot) · 1 year, 7 months ago
22. 0df2eb5 [3.8] gh-108310: Fix TestPreHandshakeClose tests in test_ssl (#110718) by Lumír 'Frenzy' Balhar · 1 year, 7 months ago
23. 01845a1 [3.8] gh-113659: Skip hidden .pth files (GH-113660) (GH-114147) by Serhiy Storchaka · 1 year, 7 months ago
24. d05bac0 [3.8] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113916) by Serhiy Storchaka · 1 year, 7 months ago
25. c1c6bed [3.8] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111781) by Łukasz Langa · 1 year, 10 months ago
26. 97e87f7 [3.8] gh-101997: Remove stale pip-22.0.4-py3-none-any.whl from the 3.8 branch (#108998) by Łukasz Langa · 2 years ago
27. 0a728e7 Fix invalid string escape by Łukasz Langa · 2 years ago
28. efb46e5 [3.8] gh-108342: Make ssl TestPreHandshakeClose more reliable (GH-108370) (#108408) by Łukasz Langa · 2 years ago
29. 6f2b64f [3.8] gh-108342: Break ref cycle in SSLSocket._create() exc (GH-108344) (#108352) by Miss Islington (bot) · 2 years ago
30. b4368b5 [3.8] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108279) by Petr Viktorin · 2 years ago
31. b4bcc06 [3.8] gh-108310: Fix CVE-2023-40217: Check for & avoid the ssl pre-close flaw (#108321) by Łukasz Langa · 2 years ago
32. 9c2ff15 [3.8] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) (#104895) by stratakis · 2 years, 3 months ago
33. 9f89c47 [3.8] gh-103935: Use `io.open_code()` when executing code in trace and profile modules (GH-103947) (#103954) by Steve Dower · 2 years, 3 months ago
34. 2062fce [3.8] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104121) by Miss Islington (bot) · 2 years, 3 months ago
35. 47ec96a [3.8] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104332) by Miss Islington (bot) · 2 years, 3 months ago
36. 79e63e5 [3.8] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104548) by Petr Viktorin · 2 years, 3 months ago
37. 3205d1f [3.8] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102244) by Pradyun Gedam · 2 years, 5 months ago
38. 32a1a61 [3.8] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101710) by Miss Islington (bot) · 2 years, 6 months ago
39. e43393a [3.8] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100033) by Miss Islington (bot) · 2 years, 9 months ago
40. b50b6f9 [3.8] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99661) by Miss Islington (bot) · 2 years, 9 months ago
41. 82ca283 [3.8] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (GH-99231) by Miss Islington (bot) · 2 years, 9 months ago
42. 948c679 [3.8] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98527) by Miss Islington (bot) · 2 years, 10 months ago
43. 0a4f650 [3.8] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98192) by Miss Islington (bot) · 2 years, 10 months ago
44. a44cc0a [3.8] gh-96710: Make the test timing more lenient for the int/str DoS regression test. (GH-96717) (#98197) by Miss Islington (bot) · 2 years, 10 months ago
45. 44adf8a Python 3.8.15 by Łukasz Langa · 2 years, 10 months ago v3.8.15
46. 18a0cdb [3.8] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97575) by Miss Islington (bot) · 2 years, 11 months ago
47. f9ce9d4 [3.8] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97628) by Miss Islington (bot) · 2 years, 11 months ago
48. f43e767 Python 3.8.14 by Łukasz Langa · 3 years ago v3.8.14
49. b5e331f [3.8] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96503) by Gregory P. Smith · 3 years ago
50. 48b323e [3.8] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95313) by Łukasz Langa · 3 years, 1 month ago
51. f78733b [3.8] gh-90355: Add isolated flag if currently isolated (GH-92857) (GH-94571) by Łukasz Langa · 3 years, 2 months ago
52. 4dc2cae gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94094) by Miss Islington (bot) · 3 years, 2 months ago
53. 067c372 bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170) (GH-92954) by Victor Stinner · 3 years, 2 months ago
54. 6d4927a [3.8] gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93066) (#93148) by Łukasz Langa · 3 years, 3 months ago
55. 69cf020 [3.8] gh-80254: Disallow recursive usage of cursors in sqlite3 converters (#92333) by Erlend Egeberg Aasland · 3 years, 3 months ago
56. f1c3816 Python 3.8.13 by Łukasz Langa · 3 years, 5 months ago
57. 7a315d8 bpo-46985: Upgrade bundled pip to 22.0.4 (GH-31819) (GH-31851) by Ned Deily · 3 years, 5 months ago
58. 1c9701a bpo-46756: Fix authorization check in urllib.request (GH-31353) (GH-31572) by Miss Islington (bot) · 3 years, 6 months ago
59. fdfd7a9 bpo-46811: Make test suite support Expat >=2.4.5 (GH-31453) by Sebastian Pipping · 3 years, 6 months ago
60. b1bc04d bpo-44949: Fix test_readline auto history tests (GH-27813) (GH-31118) by Miss Islington (bot) · 3 years, 6 months ago
61. 8a84aef [3.8] bpo-46474: Avoid REDoS in EntryPoint.pattern (sync with importlib_metadata 4.10.1) (GH-30803). (#30829) by Jason R. Coombs · 3 years, 6 months ago
62. f87e616 bpo-46648: Skip test_urllib2.test_issue16464() (GH-31161) (GH-31173) by Miss Islington (bot) · 3 years, 6 months ago
63. 7c5b01b bpo-45859: Mark test_field_descriptor in test_collections as CPython-only (GH-29691) (GH-29710) by Miss Islington (bot) · 3 years, 8 months ago
64. 2ce3816 bpo-45436: Fix tkinter tests with Tcl/Tk 8.6.11+ (GH-29077) (GH-29093) by Miss Islington (bot) · 3 years, 10 months ago
65. 7f70ba3 bpo-45310: Fix parrallel shared memory tests (GH-28661) (GH-28979) by Victor Stinner · 3 years, 10 months ago
66. 1d8cb01 bpo-45195: Fix test_readline.test_nonascii() (GH-28329) (GH-28984) by Miss Islington (bot) · 3 years, 10 months ago
67. 07119dd Python 3.8.12 by Łukasz Langa · 4 years ago v3.8.12
68. b93aea4 [3.8] bpo-43124: Fix smtplib multiple CRLF injection (GH-25987) (GH-28036) by Miss Islington (bot) · 4 years ago
69. 193443b bpo-42278: Use tempfile.TemporaryDirectory rather than tempfile.mktemp in pydoc (GH-23200) (GH-28026) by Miss Islington (bot) · 4 years ago
70. 81148c6 bpo-45001: Make email date parsing more robust against malformed input (GH-27946) (GH-27974) by Miss Islington (bot) · 4 years ago
71. 03dd89d [3.8] bpo-36384: Leading zeros in IPv4 addresses are no longer tolerated (GH-25099) (GH-27801) by achraf-mer · 4 years ago
72. d7f5796 bpo-33930: Fix typo in the test name. (GH-27735) by Miss Islington (bot) · 4 years ago
73. 09d814b [3.8] bpo-33930: Fix segfault with deep recursion when cleaning method objects (GH-27678) (GH-27721) by Łukasz Langa · 4 years ago
74. 0389426 bpo-44022: Improve the regression test. (GH-26503) (#26506) by Miss Islington (bot) · 4 years, 1 month ago
75. c3ffbbd Python 3.8.11 by Łukasz Langa · 4 years, 2 months ago v3.8.11
76. 71ba16b bpo-44229: Ignore spurious EPROTOTYPE on macOS in test_ssl (GH-26893) (GH-26895) by Miss Islington (bot) · 4 years, 2 months ago
77. af5fb67 bpo-38323: Skip SubprocessMultiLoopWatcherTest as they can hang the test suite (GH-26542) (GH-26670) by Miss Islington (bot) · 4 years, 2 months ago
78. 4844abd [3.8] bpo-44061: Fix pkgutil.iter_modules regression when passed a pathlib.Path object (GH-25964). (GH-26056) by Łukasz Langa · 4 years, 3 months ago
79. 378211f bpo-44070: No longer eagerly makes import filenames absolute, except for extension modules (GH-26025) (#26028) by Steve Dower · 4 years, 3 months ago
80. 8a12f46 bpo-40297: Fix test_socket.CANTest.testSendFrame (GH-19548) (#25957) by Miss Islington (bot) · 4 years, 3 months ago
81. f396864 bpo-44022: Fix http client infinite line reading (DoS) after a HTTP 100 Continue (GH-25916) (#25933) by Miss Islington (bot) · 4 years, 4 months ago
82. 515a7bc [3.8] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline and tabs. (GH-25595) (#25726) by Miss Islington (bot) · 4 years, 4 months ago
83. 3d8993a Python 3.8.10 by Łukasz Langa · 4 years, 4 months ago v3.8.10
84. db3ce79 bpo-32745: Fix a regression in the handling of ctypes' c_wchar_p type (GH-8721) (#25811) by Miss Islington (bot) · 4 years, 4 months ago
85. b29d0a5 [3.8] bpo-41100: Support macOS 11 Big Sur and Apple Silicon Macs (#25806) by Ned Deily · 4 years, 4 months ago
86. 6034c4a [3.8] bpo-43993: Update vendored pip to 21.1.1 (GH-25761). (GH-25783) by Stéphane Bidoul · 4 years, 4 months ago
87. e377ecf bpo-43935: Fix typo in Turtle.back() docstring (GH-25581) by Miss Islington (bot) · 4 years, 4 months ago
88. b52cc7c bpo-43960: test_pdb resets breakpoints to make tests deterministic (GH-25691) (GH-25692) by Miss Islington (bot) · 4 years, 4 months ago
89. 10ad7eb [3.8] bpo-28577: Special case added to IP v4 and v6 hosts for /32 and /128 networks (GH-18757) (#25536) by Pete Wicken · 4 years, 4 months ago
90. 727bed6 [3.8] bpo-34463: Make python tracebacks identical to C tracebacks for (#23899) by Irit Katriel · 4 years, 4 months ago
91. e1203e8 bpo-42924: Fix incorrect copy in bytearray_repeat (GH-24208) (#24212) by Miss Islington (bot) · 4 years, 4 months ago
92. 6d4556f Quick pydoc update to smtplib.py (GH-22292) (GH-25616) by Miss Islington (bot) · 4 years, 4 months ago
93. 9ca20fd bpo-43534: Fix the turtle module working with multiple root windows GH-25594 by Miss Islington (bot) · 4 years, 4 months ago
94. 6077efa [3.9] bpo-43655: Tkinter and IDLE dialog windows are now recognized as dialogs by window managers on macOS and X Window (GH-25187). (GH-25588) (GH-25592) by Miss Islington (bot) · 4 years, 4 months ago
95. c70f268 bpo-43534: Make dialogs in turtle.textinput() and turtle.numinput() transitient again (GH-24923) by Miss Islington (bot) · 4 years, 4 months ago
96. fc82f3f [3.8] bpo-43930: Update bundled pip to 21.1 and setuptools to 56.0.0 (GH-25576) (GH-25579) by Stéphane Bidoul · 4 years, 4 months ago
97. e92d110 bpo-43607: Fix urllib handling of Windows paths with \\?\ prefix (GH-25539) by Miss Islington (bot) · 4 years, 4 months ago
98. 82b6c09 [3.8] bpo-43920: Make load_verify_locations(cadata) error message consistent (GH-25554) (GH-25556) by Christian Heimes · 4 years, 4 months ago
99. c6b50ab Reformat idlelib colorizer (GH-25479) by Miss Islington (bot) · 4 years, 4 months ago
100. 1575ea0 bpo-35306: Avoid raising OSError from pathlib.Path.exists when passed an invalid filename (GH-25529) by Miss Islington (bot) · 4 years, 4 months ago