Python 3.9.20

1. 8c3f794 Python 3.9.20 by Łukasz Langa · 12 months ago v3.9.20
2. ee953f2 [3.9] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123769) by Petr Viktorin · 12 months ago
3. c57c4a9 [3.9] gh-123678: Upgrade libexpat 2.6.3 (#123711) by Seth Michael Larson · 12 months ago
4. a5798d0 [3.9] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119027) by Serhiy Storchaka · 12 months ago
5. 0152431 [3.9] gh-112275: Fix HEAD_LOCK deadlock in child process after fork (GH-112336) (#123688) by Łukasz Langa · 12 months ago
6. 9290419 [3.9] gh-119690: Fixes buffer type confusion in _winapi.CreateFile and _winapi.CreateNamedPipe audit events (GH-119735) (#123679) by Miss Islington (bot) · 12 months ago
7. d662e2d [3.9] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123107) by Miss Islington (bot) · 12 months ago
8. 9620552 [3.9] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123432) by Jason R. Coombs · 12 months ago
9. b4225ca [3.9] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123641) by Seth Michael Larson · 12 months ago
10. f7be505 [3.9] gh-121650: Encode newlines in headers, and verify headers are sound (GH-122233) (#122610) by Łukasz Langa · 12 months ago
11. 06fa244 [3.9] gh-122133: Authenticate socket connection for `socket.socketpair()` fallback (GH-122134) (#122428) by Miss Islington (bot) · 1 year, 1 month ago
12. 9e9c71d [3.9] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122120) by Łukasz Langa · 1 year, 1 month ago
13. 54b5e9e [3.9] gh-112769: test_zlib: test_zlib: Fix comparison of ZLIB_RUNTIME_VERSION with non-int suffix (GH-112771) (GH-119566) by Ned Deily · 1 year, 3 months ago
14. 5130731 [3.9] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118741) by Steve Dower · 1 year, 3 months ago
15. b228655 [3.9] gh-114572: Fix locking in cert_store_stats and get_ca_certs (#118109) by Seth Michael Larson · 1 year, 3 months ago
16. 22adf29 [3.9] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118472) by Petr Viktorin · 1 year, 3 months ago
17. 7db40cd [3.9] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (GH-118187) by Seth Michael Larson · 1 year, 3 months ago
18. 40d77b9 [3.9] gh-116773: Fix overlapped memory corruption crash (GH-116774) (GH-117080) by jkriegshauser · 1 year, 5 months ago
19. f7c7e72 [3.9] gh-117187: Fix XML tests for vanilla Expat <2.6.0 (GH-117203) (GH-117247) by Miss Islington (bot) · 1 year, 5 months ago
20. 882f62b Python 3.9.19 by Łukasz Langa · 1 year, 5 months ago v3.9.19
21. fc2c98f [3.9] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) (GH-116068) by Miss Islington (bot) · 1 year, 5 months ago
22. 2007624 [3.9] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116272) by Sebastian Pipping · 1 year, 6 months ago
23. 468ba95 [3.9] gh-107077: Raise SSLCertVerificationError even if the error is set via SSL_ERROR_SYSCALL (GH-107586) (#107590) by Miss Islington (bot) · 1 year, 6 months ago
24. 4b68e5d [3.9] Upgrade bundled libexpat to 2.6.0 (GH-115399) (GH-115474) by Seth Michael Larson · 1 year, 6 months ago
25. 0397866 [3.9] gh-115399: Document CVE-2023-52425 under "XML vulnerabilities" (GH-115400) (GH-115763) by Miss Islington (bot) · 1 year, 6 months ago
26. dafb4f0 [3.9] Fix tests for XMLPullParser with Expat 2.6.0 (GH-115133) (GH-115535) by Seth Michael Larson · 1 year, 6 months ago
27. fa1f564 [3.9] Add missing sections to blurbs (GH-114553) (GH-115339) by Miss Islington (bot) · 1 year, 6 months ago
28. 24c6514 [3.9] gh-111239: Update Windows build to use zlib 1.3.1 (GH-114877) (GH-115087) by Łukasz Langa · 1 year, 6 months ago
29. 8fc8c45 [3.9] gh-113659: Skip hidden .pth files (GH-113660) (GH-114146) by Serhiy Storchaka · 1 year, 7 months ago
30. a2c5999 [3.9] gh-109858: Protect zipfile from "quoted-overlap" zipbomb (GH-110016) (GH-113915) by Miss Islington (bot) · 1 year, 7 months ago
31. d54e22a [3.9] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112842) by Serhiy Storchaka · 1 year, 7 months ago
32. a6f73f6 [3.9] bpo-37013: Fix the error handling in socket.if_indextoname() (GH-13503) (GH-112600) by Miss Islington (bot) · 1 year, 7 months ago
33. 75da506 [3.9] gh-109991: Update Windows build to use OpenSSL 1.1.1w (GH-111265) by Zachary Ware · 1 year, 7 months ago
34. f4118e9 [3.9] gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to use 1.1.1w and 3.0.11. (GH-110008) by Ned Deily · 1 year, 7 months ago
35. 08b640e [3.9] gh-101180: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds (gh-111695) (gh-111780) by Łukasz Langa · 1 year, 10 months ago
36. 376d66e Python 3.9.18 by Łukasz Langa · 2 years ago v3.9.18
37. d31ae21 [3.9] gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2. (#108123) by Ned Deily · 2 years ago
38. 42deeab [3.9] gh-107845: Fix symlink handling for tarfile.data_filter (GH-107846) (#108274) by Petr Viktorin · 2 years ago
39. 4a79328 [3.9] gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data (GH-99613) (GH-107224) (#107231) by Serhiy Storchaka · 2 years ago
40. 264b1da [3.9] gh-108310: Fix CVE-2023-40217: Check for & avoid the ssl pre-close flaw (#108320) by Łukasz Langa · 2 years ago
41. 0d3cd4e Python 3.9.17 by Łukasz Langa · 2 years, 2 months ago v3.9.17
42. e15de14 [3.9] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (#105205) by Gregory P. Smith · 2 years, 3 months ago
43. d7f8a5f [3.9] gh-102153: Start stripping C0 control and space chars in `urlsplit` (GH-102508) (GH-104575) (GH-104592) (#104593) by Miss Islington (bot) · 2 years, 3 months ago
44. 3d5dd1e [3.9] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104331) by Miss Islington (bot) · 2 years, 3 months ago
45. b53d0ff [3.9] gh-104049: do not expose on-disk location from SimpleHTTPRequestHandler (GH-104067) (#104120) by Miss Islington (bot) · 2 years, 3 months ago
46. d1645ce [3.9] gh-103935: Use `io.open_code()` when executing code in trace and profile modules (GH-103947) (#103953) by Steve Dower · 2 years, 3 months ago
47. 98016f7 [3.9] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (#104382) by Petr Viktorin · 2 years, 3 months ago
48. 7cb3a44 [3.9] GH-102126: fix deadlock at shutdown when clearing thread states (GH-102222) (#102236) by Kumar Aditya · 2 years, 5 months ago
49. b5a9430 [3.9] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102243) by Pradyun Gedam · 2 years, 5 months ago
50. bf99e19 [3.9] gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727) (GH-101751) by Steve Dower · 2 years, 6 months ago
51. 04cc427 [3.9] gh-101283: Improved fallback logic for subprocess with shell=True on Windows (GH-101286) (#101709) by Miss Islington (bot) · 2 years, 6 months ago
52. fcfa505 [3.9] gh-100180: Update Windows installer to OpenSSL 1.1.1s (GH-100903) (#100904) by Steve Dower · 2 years, 7 months ago
53. 6954203 [3.9] GH-100892: Fix race in clearing `threading.local` (GH-100922) (#100939) by Kumar Aditya · 2 years, 7 months ago
54. 6be2e0e [3.9] gh-95778: add doc missing in some places (GH-100627). (#101066) by Éric · 2 years, 7 months ago
55. 595f9cc Python 3.9.16 by Łukasz Langa · 2 years, 9 months ago v3.9.16
56. 3b81c13 [3.9] gh-100001: Omit control characters in http.server stderr logs. (GH-100002) (#100032) by Miss Islington (bot) · 2 years, 9 months ago
57. 7b98207 [3.9] gh-87604: Avoid publishing list of active per-interpreter audit hooks via the gc module (GH-99373) (GH-99493) by Steve Dower · 2 years, 9 months ago
58. c09dba5 [3.9] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222) (#99230) by Miss Islington (bot) · 2 years, 9 months ago
59. b43496c [3.9] gh-97514: Don't use Linux abstract sockets for multiprocessing (GH-98501) (#98504) by Miss Islington (bot) · 2 years, 10 months ago
60. 857efee [3.9] gh-98517: Fix buffer overflows in _sha3 module (GH-98519) (#98526) by Miss Islington (bot) · 2 years, 10 months ago
61. 71a075a [3.9] gh-98739: Update libexpat from 2.4.9 to 2.5.0 (GH-98742) (#98786) by Miss Islington (bot) · 2 years, 10 months ago
62. c59a16e [3.9] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (#98190) by Miss Islington (bot) · 2 years, 10 months ago
63. 7e28154 Python 3.9.15 by Łukasz Langa · 2 years, 10 months ago v3.9.15
64. 77796d0 [3.9] gh-97897: Prevent os.mkfifo and os.mknod segfaults with macOS 13 SDK (GH-97944) (#97968) by Miss Islington (bot) · 2 years, 11 months ago
65. 358b7a4 [3.9] gh-96848: Fix -X int_max_str_digits option parsing (GH-96988) (GH-97574) by Miss Islington (bot) · 2 years, 11 months ago
66. 938223e [3.9] gh-96577: Fixes buffer overrun in _msi module (GH-96633) (GH-96657) by Miss Islington (bot) · 2 years, 11 months ago
67. 4118813 [3.9] gh-95778: Mention sys.set_int_max_str_digits() in error message (#96874) (#96877) by Victor Stinner · 2 years, 11 months ago
68. 9b409e4 [3.9] gh-97005: Update libexpat from 2.4.7 to 2.4.9 (gh-97006) (gh-97012) by Miss Islington (bot) · 2 years, 11 months ago
69. f65f3a9d [3.9] gh-97616: list_resize() checks for integer overflow (GH-97617) (GH-97627) by Miss Islington (bot) · 2 years, 11 months ago
70. d6ef680 [3.9] gh-97612: Fix shell injection in get-remote-certificate.py (GH-97613) (GH-97632) by Miss Islington (bot) · 2 years, 11 months ago
71. 816066f Python 3.9.14 by Łukasz Langa · 3 years ago v3.9.14
72. cec1e9d [3.9] gh-95778: CVE-2020-10735: Prevent DoS by very large int() (#96502) by Gregory P. Smith · 3 years ago
73. 03dc951 gh-95280: Fix test_get_ciphers on systems without RSA key exchange (GH-95282) (GH-95323) by Miss Islington (bot) · 3 years, 1 month ago
74. 017080f [3.9] gh-94208: Add more TLS version/protocol checks for FreeBSD (GH-94347) (GH-95312) by Łukasz Langa · 3 years, 1 month ago
75. cd0a59f gh-94821: Fix autobind of empty unix domain address (GH-94826) (GH-94875) by Miss Islington (bot) · 3 years, 1 month ago
76. eff4aa5 [3.9] gh-90355: Add isolated flag if currently isolated (GH-92857) (GH-94570) by Łukasz Langa · 3 years, 2 months ago
77. 66f4593 gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94123) by Miss Islington (bot) · 3 years, 2 months ago
78. defaa2b gh-87389: Fix an open redirection vulnerability in http.server. (GH-93879) (GH-94093) by Miss Islington (bot) · 3 years, 2 months ago
79. 893adbf gh-91810: Fix regression with writing an XML declaration with encoding='unicode' (GH-93426) (GH-93791) by Miss Islington (bot) · 3 years, 2 months ago
80. 95c9c2b gh-93065: Fix HAMT to iterate correctly over 7-level deep trees (GH-93066) (#93147) by Miss Islington (bot) · 3 years, 3 months ago
81. 9f7cdb2 bpo-45393: help() on operator precedence has misleading entries (GH-31246) (GH-92967) by Miss Islington (bot) · 3 years, 3 months ago
82. 6de2ca5 Python 3.9.13 by Łukasz Langa · 3 years, 3 months ago v3.9.13
83. f82b324 [3.9] gh-92112: Fix crash triggered by an evil custom `mro()` (GH-92113) (GH-92372) by Jelle Zijlstra · 3 years, 3 months ago
84. 518b238 [3.9] bpo-34480: fix bug where match variable is used prior to being defined (GH-17643) (GH-32256) by Marek Suscak · 3 years, 3 months ago
85. 1699a5e Check result of utc_to_seconds and skip fold probe in pure Python (GH-91582) (GH-92748) by Miss Islington (bot) · 3 years, 3 months ago
86. 14d0594 gh-92530: Fix an issue that occurred after interrupting threading.Condition.notify (GH-92534) (GH-92831) by Miss Islington (bot) · 3 years, 3 months ago
87. 801f771 [3.9] gh-92311: Let frame_setlineno jump over listcomps (#92740) by Dennis Sweeney · 3 years, 3 months ago
88. 65d2dfd bpo-42627: Fix incorrect parsing of Windows registry proxy settings (GH-26307) by Miss Islington (bot) · 3 years, 3 months ago
89. bfc88d3 [3.9] gh-91810: ElementTree: Use text file's encoding by default in XML declaration (GH-91903) (GH-92665) by Miss Islington (bot) · 3 years, 3 months ago
90. b7a8786 bpo-13553: Document tkinter.Tk args (GH-4786) by Miss Islington (bot) · 3 years, 3 months ago
91. 1fb25a9 bpo-46785: Fix race condition between os.stat() and unlink on Windows (GH-31858) by Itai Steinherz · 3 years, 3 months ago
92. 03aa752 bpo-38056: overhaul Error Handlers section in codecs documentation (GH-15732) by Miss Islington (bot) · 3 years, 3 months ago
93. 8e523c1 [3.10] gh-90622: Do not spawn ProcessPool workers on demand via fork method. (GH-91598) (GH-92497) (#92499) by Miss Islington (bot) · 3 years, 3 months ago
94. 08907ad Fix use of the default role in a news entry. (GH-92500) by Miss Islington (bot) · 3 years, 3 months ago
95. 4802344 [3.9] gh-92448: Update the documentation builder to render the GitHub issue. (GH-92449). (GH-92458) by Dong-hee Na · 3 years, 3 months ago
96. df48bd9 NEWS: Reorder items by section (GH-92373) by Miss Islington (bot) · 3 years, 4 months ago
97. 7d17a7b [3.9] gh-80254: Disallow recursive usage of cursors in `sqlite3` converters (#92278) by Erlend Egeberg Aasland · 3 years, 4 months ago
98. f84c51e gh-92036: Fix gc_fini_untrack() (GH-92037) by Miss Islington (bot) · 3 years, 4 months ago
99. 524d275 bpo-47029: Fix BrokenPipeError in multiprocessing.Queue at garbage collection and explicit close (GH-31913) by Miss Islington (bot) · 3 years, 4 months ago
100. 4ede781 bpo-29890: Test IPv*Interface construction with tuple argument (GH-30862) by Miss Islington (bot) · 3 years, 4 months ago