Commits

History for

Commits on Apr 13, 2026

[3.11] gh-148395: Fix a possible UAF in `{LZMA,BZ2}Decompressor` (GH-148396) (#148504)
StanFromIreland
authored

Commits on Apr 8, 2026

[3.11] gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#146000)

StanFromIreland
and
picnixz
authored
[3.11] gh-146083: Upgrade bundled Expat to 2.7.5 (GH-146085) (#146607)
StanFromIreland
authored

Commits on Mar 2, 2026

[3.11] gh-144363: Update bundled libexpat to 2.7.4 (GH-144365) (#144514)
StanFromIreland
authored

Commits on Feb 26, 2026

[3.11] gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843) (#144861)

miss-islington
and
raminfp
authored

Commits on Nov 25, 2025

[3.11] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139529)

hartwork
and
picnixz
authored

Commits on Oct 6, 2025

[3.11] gh-139400: Make sure that parent parsers outlive their subparsers in `pyexpat` (GH-139403) (#139612)
hartwork
authored

Commits on Sep 28, 2025

[3.11] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139378)
StanFromIreland
authored

Commits on Sep 26, 2025

[3.11] gh-138998: Upgrade vendored expat to 2.7.2 (#138999) (#139056)
StanFromIreland
authored

Commits on Apr 8, 2025

[3.11] gh-131809: Upgrade vendored expat to 2.7.1 (GH-132192) (#132240)

sethmlarson
and
gpshead
authored

Commits on Apr 3, 2025

Commits on Dec 3, 2024

[3.11] gh-126623: Update libexpat to 2.6.4, make future updates easier (GH-126792) (GH-126798)
sethmlarson
authored

Commits on Nov 8, 2024

[3.11] gh-111942: Remove an extra incref in textiowrapper_change_encoding (#126542)
encukou
authored

Commits on Sep 5, 2024

[3.11] gh-123678: Upgrade libexpat 2.6.3 (#123709)
sethmlarson
authored

Commits on Sep 4, 2024

Commits on Aug 9, 2024

[3.11] gh-119506: fix _io.TextIOWrapper.write() write during flush (#119507) (#120314)

methane
and
hugovk
authored

Commits on Jul 22, 2024

[3.11] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122118)
ambv
authored

Commits on May 24, 2024

[3.11] gh-118486: Support mkdir(mode=0o700) on Windows (GH-118488) (GH-118739)
zooba
authored

Commits on Apr 23, 2024

[3.11] gh-116741: Upgrade libexpat to 2.6.2 (GH-117296) (#118185)
sethmlarson
authored

Commits on Mar 28, 2024

[3.11] gh-117310: Remove extra DECREF on "no ciphers" error path in `_ssl._SSLContext` constructor (GH-117309) (GH-117318)

miss-islington
and
gpshead
authored

Commits on Mar 25, 2024

[3.11] gh-91227: Ignore ERROR_PORT_UNREACHABLE in proactor recvfrom() (GH-32011) (GH-117210)

serhiy-storchaka
and
esoma
authored

Commits on Mar 21, 2024

[3.11] gh-117021: Fix integer overflow in PyLong_AsPid() on non-Windows 64-bit platforms (GH-117064) (GH-117070) (GH-117075)
serhiy-storchaka
authored

Commits on Mar 20, 2024

[3.11] gh-116773: Fix overlapped memory corruption crash (GH-116774) (#117077)
jkriegshauser
authored

Commits on Mar 13, 2024

[3.11] gh-106687: _ssl: use uint64_t for SSL options (#106700) (#116665)
vstinner
authored

Commits on Mar 12, 2024

[3.11] gh-116541: Handle errors correctly in `_pystatvfs_fromstructstatvfs` (GH-116542) (#116644)

miss-islington
and
sobolevn
authored

Commits on Mar 11, 2024

[3.11] gh-116545: Fix error handling in `mkpwent` in `pwdmodule` (GH-116548) (#116594)

miss-islington
and
sobolevn
authored

Commits on Mar 9, 2024

[3.11] gh-116520: Fix error handling in `os_get_terminal_size_impl` in `posixmodule` (GH-116521) (#116540)

miss-islington
and
sobolevn
authored

Commits on Mar 8, 2024

[3.11] gh-116447: Fix possible UB in `arraymodule` and `getargs` (GH-116459) (#116497)

miss-islington
and
sobolevn
authored

Commits on Mar 7, 2024

[3.11] gh-116448: Handle errors correctly in `os_waitid_impl` in `posixmodule` (GH-116449) (#116453)

miss-islington
and
sobolevn
authored

Commits on Mar 6, 2024

Commits on Feb 25, 2024

[3.11] gh-115886: Handle embedded null characters in shared memory name (GH-115887) (GH-115907)
serhiy-storchaka
authored

Commits on Feb 23, 2024

[3.11] gh-67044: Always quote or escape \r and \n in csv.writer() (GH-115741) (GH-115867)

miss-islington
and
serhiy-storchaka
authored