Python 3.9.20

1. ee953f2 [3.9] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123769) by Petr Viktorin · 12 months ago
2. a5798d0 [3.9] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119027) by Serhiy Storchaka · 12 months ago
3. d662e2d [3.9] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123107) by Miss Islington (bot) · 12 months ago
4. 9620552 [3.9] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123432) by Jason R. Coombs · 12 months ago
5. b4225ca [3.9] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123641) by Seth Michael Larson · 12 months ago
6. f7be505 [3.9] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122610) by Łukasz Langa · 12 months ago
7. 3f5d9d1 [3.9] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122508) by Miss Islington (bot) · 1 year, 1 month ago
8. 06fa244 [3.9] gh-122133: Authenticate socket connection for `socket.socketpair()` fallback (GH-122134) (#122428) by Miss Islington (bot) · 1 year, 1 month ago
9. 9e9c71d [3.9] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122120) by Łukasz Langa · 1 year, 1 month ago
10. 54b5e9e [3.9] gh-112769: test_zlib: test_zlib: Fix comparison of ZLIB_RUNTIME_VERSION with non-int suffix (GH-112771) (GH-119566) by Ned Deily · 1 year, 3 months ago
11. 5130731 [3.9] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118741) by Steve Dower · 1 year, 3 months ago
12. 22adf29 [3.9] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118472) by Petr Viktorin · 1 year, 3 months ago
13. 40d77b9 [3.9] gh-116773: Fix overlapped memory corruption crash (GH-116774) (GH-117080) by jkriegshauser · 1 year, 5 months ago
14. f7c7e72 [3.9] gh-117187: Fix XML tests for vanilla Expat <2.6.0 (GH-117203) (GH-117247) by Miss Islington (bot) · 1 year, 5 months ago
15. fc2c98f [3.9] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116068) by Miss Islington (bot) · 1 year, 5 months ago
16. 2007624 [3.9] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116272) by Sebastian Pipping · 1 year, 5 months ago
17. dafb4f0 [3.9] Fix tests for XMLPullParser with Expat 2.6.0 (GH-115133) (GH-115535) by Seth Michael Larson · 1 year, 6 months ago
18. c23f749 [3.9] gh-97032: avoid test_squeezer crash on macOS buildbots (GH-115508) (#115655) by Miss Islington (bot) · 1 year, 6 months ago
19. 8fc8c45 [3.9] gh-113659: Skip hidden .pth files (GH-113660) (GH-114146) by Serhiy Storchaka · 1 year, 7 months ago
20. dd068ea [3.9] gh-107888: Fix test_mmap.test_access_parameter() on macOS 14 (GH-109928) (GH-114184) by Miss Islington (bot) · 1 year, 7 months ago
21. a2c5999 [3.9] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113915) by Miss Islington (bot) · 1 year, 7 months ago
22. d54e22a [3.9] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112842) by Serhiy Storchaka · 1 year, 7 months ago
23. a6f73f6 [3.9] bpo-37013: Fix the error handling in socket.if_indextoname() (GH-13503) (GH-112600) by Miss Islington (bot) · 1 year, 7 months ago
24. 08b640e [3.9] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111780) by Łukasz Langa · 1 year, 10 months ago
25. 92f9ce7 Fix invalid string escape by Łukasz Langa · 2 years ago
26. d2cd0a3 [3.9] gh-108342: Make ssl TestPreHandshakeClose more reliable (GH-108370) (#108407) by Łukasz Langa · 2 years ago
27. b8058b3 [3.9] gh-108342: Break ref cycle in SSLSocket._create() exc (GH-108344) (#108351) by Miss Islington (bot) · 2 years ago
28. 42deeab [3.9] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108274) by Petr Viktorin · 2 years ago
29. 4a79328 [3.9] gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data (GH-99613) (GH-107224) (#107231) by Serhiy Storchaka · 2 years ago
30. 264b1da [3.9] gh-108310: Fix CVE-2023-40217: Check for & avoid the ssl pre-close flaw (#108320) by Łukasz Langa · 2 years ago
31. d7f8a5f [3.9] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) by Miss Islington (bot) · 2 years, 3 months ago
32. 3d5dd1e [3.9] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104331) by Miss Islington (bot) · 2 years, 3 months ago
33. b53d0ff [3.9] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104120) by Miss Islington (bot) · 2 years, 3 months ago
34. d1645ce [3.9] gh-103935: Use `io.open_code()` when executing code in trace and profile modules (GH-103947) (#103953) by Steve Dower · 2 years, 3 months ago
35. 98016f7 [3.9] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104382) by Petr Viktorin · 2 years, 3 months ago
36. b5a9430 [3.9] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102243) by Pradyun Gedam · 2 years, 5 months ago
37. 04cc427 [3.9] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101709) by Miss Islington (bot) · 2 years, 6 months ago
38. 6954203 [3.9] GH-100892: Fix race in clearing `threading.local` (GH-100922) (#100939) by Kumar Aditya · 2 years, 7 months ago
39. 3b81c13 [3.9] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100032) by Miss Islington (bot) · 2 years, 9 months ago
40. 7b98207 [3.9] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99493) by Steve Dower · 2 years, 9 months ago
41. c09dba5 [3.9] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (#99230) by Miss Islington (bot) · 2 years, 9 months ago
42. b43496c [3.9] gh-97514: Don't use Linux abstract sockets for multiprocessing (GH-98501) (#98504) by Miss Islington (bot) · 2 years, 10 months ago
43. 857efee [3.9] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98526) by Miss Islington (bot) · 2 years, 10 months ago
44. 157a8b8 [3.9] gh-96710: Make the test timing more lenient for the int/str DoS regression test. (GH-96717) (#98196) by Miss Islington (bot) · 2 years, 10 months ago
45. c59a16e [3.9] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98190) by Miss Islington (bot) · 2 years, 10 months ago
46. 7e28154 Python 3.9.15 by Łukasz Langa · 2 years, 10 months ago v3.9.15
47. da1fe38 [3.9] gh-94208: Add even more TLS version/protocol checks for FreeBSD (#98037) by Łukasz Langa · 2 years, 11 months ago
48. 77796d0 [3.9] gh-97897: Prevent os.mkfifo and os.mknod segfaults with macOS 13 SDK (GH-97944) (#97968) by Miss Islington (bot) · 2 years, 11 months ago
49. 358b7a4 [3.9] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97574) by Miss Islington (bot) · 2 years, 11 months ago
50. f65f3a9d [3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627) by Miss Islington (bot) · 2 years, 11 months ago
51. 816066f Python 3.9.14 by Łukasz Langa · 3 years ago v3.9.14
52. cec1e9d [3.9] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96502) by Gregory P. Smith · 3 years ago
53. 03dc951 gh-95280: Fix test_get_ciphers on systems without RSA key exchange (GH-95282) (GH-95323) by Miss Islington (bot) · 3 years, 1 month ago
54. 017080f [3.9] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95312) by Łukasz Langa · 3 years, 1 month ago
55. cd0a59f gh-94821: Fix autobind of empty unix domain address (GH-94826) (GH-94875) by Miss Islington (bot) · 3 years, 1 month ago
56. eff4aa5 [3.9] gh-90355: Add isolated flag if currently isolated (GH-92857) (GH-94570) by Łukasz Langa · 3 years, 1 month ago
57. defaa2b gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94093) by Miss Islington (bot) · 3 years, 2 months ago
58. 893adbf gh-91810: Fix regression with writing an XML declaration with encoding='unicode' (GH-93426) (GH-93791) by Miss Islington (bot) · 3 years, 2 months ago
59. 95c9c2b gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93066) (#93147) by Miss Islington (bot) · 3 years, 3 months ago
60. 6de2ca5 Python 3.9.13 by Łukasz Langa · 3 years, 3 months ago v3.9.13
61. f82b324 [3.9] gh-92112: Fix crash triggered by an evil custom `mro()` (GH-92113) (GH-92372) by Jelle Zijlstra · 3 years, 3 months ago
62. 518b238 [3.9] bpo-34480: fix bug where match variable is used prior to being defined (GH-17643) (GH-32256) by Marek Suscak · 3 years, 3 months ago
63. 1699a5e Check result of utc_to_seconds and skip fold probe in pure Python (GH-91582) (GH-92748) by Miss Islington (bot) · 3 years, 3 months ago
64. 14d0594 gh-92530: Fix an issue that occurred after interrupting threading.Condition.notify (GH-92534) (GH-92831) by Miss Islington (bot) · 3 years, 3 months ago
65. 801f771 [3.9] gh-92311: Let frame_setlineno jump over listcomps (#92740) by Dennis Sweeney · 3 years, 3 months ago
66. 65d2dfd bpo-42627: Fix incorrect parsing of Windows registry proxy settings (GH-26307) by Miss Islington (bot) · 3 years, 3 months ago
67. bfc88d3 [3.9] gh-91810: ElementTree: Use text file's encoding by default in XML declaration (GH-91903) (GH-92665) by Miss Islington (bot) · 3 years, 3 months ago
68. b7a8786 bpo-13553: Document tkinter.Tk args (GH-4786) by Miss Islington (bot) · 3 years, 3 months ago
69. 1fb25a9 bpo-46785: Fix race condition between os.stat() and unlink on Windows (GH-31858) by Itai Steinherz · 3 years, 3 months ago
70. 8e523c1 [3.10] gh-90622: Do not spawn ProcessPool workers on demand via fork method. (GH-91598) (GH-92497) (#92499) by Miss Islington (bot) · 3 years, 3 months ago
71. bab6954 [3.9] gh-77630: Change Charset to charset (GH-92439) (GH-92477) by Miss Islington (bot) · 3 years, 3 months ago
72. 25352d7 Add source for character mappings (GH-92014) (#92388) by Miss Islington (bot) · 3 years, 3 months ago
73. 7d17a7b [3.9] gh-80254: Disallow recursive usage of cursors in `sqlite3` converters (#92278) by Erlend Egeberg Aasland · 3 years, 4 months ago
74. 524d275 bpo-47029: Fix BrokenPipeError in multiprocessing.Queue at garbage collection and explicit close (GH-31913) by Miss Islington (bot) · 3 years, 4 months ago
75. 4ede781 bpo-29890: Test IPv*Interface construction with tuple argument (GH-30862) by Miss Islington (bot) · 3 years, 4 months ago
76. a23e472 bpo-46604: fix function name in ssl module docstring (GH-31064) by Miss Islington (bot) · 3 years, 4 months ago
77. 020f5c4 bpo-46415: Use f-string for ValueError in ipaddress.ip_{address,network,interface} helper functions (GH-30642) by Miss Islington (bot) · 3 years, 4 months ago
78. 7e55730 gh-92106: Add test that subscription works on arbitrary TypedDicts (GH-92176) by Miss Islington (bot) · 3 years, 4 months ago
79. 51b885a bpo-46787: Fix `ProcessPoolExecutor exception` memory leak (GH-31408) (GH-31408) by Miss Islington (bot) · 3 years, 4 months ago
80. e48da72 [3.9] Remove effbot urls (GH-26308). (#92162) by Thaddeus1499 · 3 years, 4 months ago
81. 1a7867f concurrent.futures: Fix typo in docstring (GH-92121) by Miss Islington (bot) · 3 years, 4 months ago
82. 206f416 bpo-36819: Fix crashes in built-in encoders with weird error handlers (GH-28593) by Miss Islington (bot) · 3 years, 4 months ago
83. 54f06ae [3.9] gh-92049: Forbid pickling constants re._constants.SUCCESS etc (GH-92070) (GH-92073) (GH-92102) by Serhiy Storchaka · 3 years, 4 months ago
84. 3d0a5f7 bpo-43323: Fix UnicodeEncodeError in the email module (GH-32137) by Miss Islington (bot) · 3 years, 4 months ago
85. 36de20d bpo-26792: Improve docstrings of runpy module run_functions (GH-30729) by Miss Islington (bot) · 3 years, 4 months ago
86. fa87c36 gh-91832: Add 'required' attr to argparse.Action repr (GH-91841) by Miss Islington (bot) · 3 years, 4 months ago
87. 993bb16 [3.9] gh-91810: Expand ElementTree.write() tests to use non-ASCII data (GH-91989). (GH-91994) by Serhiy Storchaka · 3 years, 4 months ago
88. 081e951 Fix missing `f` prefix on f-strings (GH-91910) by Miss Islington (bot) · 3 years, 4 months ago
89. f4252df gh-91914: Fix test_curses on non-UTF-8 locale (GH-91919) by Miss Islington (bot) · 3 years, 4 months ago
90. 653a666 gh-91916: Fix test_runpy on non-UTF-8 locale (GH-91920) by Miss Islington (bot) · 3 years, 4 months ago
91. 4165702 RE: Add more tests for inline flag "x" and re.VERBOSE (GH-91854) by Miss Islington (bot) · 3 years, 4 months ago
92. 537dabc [3.9] gh-91575: Update case-insensitive matching in re to the latest Unicode version (GH-91580). (GH-91661) (GH-91837) by Miss Islington (bot) · 3 years, 4 months ago
93. 76ff686 [3.9] gh-91700: Validate the group number in conditional expression in RE (GH-91702) (GH-91831) (GH-91836) by Miss Islington (bot) · 3 years, 4 months ago
94. 97d14e1 [3.9] gh-90568: Fix exception type for \N with a named sequence in RE (GH-91665) (GH-91830) (GH-91834) by Miss Islington (bot) · 3 years, 4 months ago
95. cb3c85d [3.10] gh-91676 gh-91260 unittest.IsolatedAsyncioTestCase no longer leaks its executor (GH-91680) by Miss Islington (bot) · 3 years, 4 months ago
96. 3b6072e gh-91231: multiprocessing BaseManager waits 1.0 second (GH-91701) by Miss Islington (bot) · 3 years, 4 months ago
97. 63af7b3 Add more tests for group names and refs in RE (GH-91695) by Miss Islington (bot) · 3 years, 4 months ago
98. 2a43afd [3.9] [3.10] gh-91607: Fix several test_concurrent_futures tests to actually test what they claim (GH-91600) (GH-91612) (#91617) by Gregory P. Smith · 3 years, 4 months ago
99. f3f5d4b gh-90879: Fix missing parameter for put_nowait() (GH-91514) by Miss Islington (bot) · 3 years, 4 months ago
100. 0ab5e83 gh-87497: Document that urllib.request sends headers in camel case (GH-24661) by Miss Islington (bot) · 3 years, 4 months ago