summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* 3.6.13v3.6.13Ned Deily2021-02-159-18/+0
* [3.6] bpo-42967: only use '&' as a query string separator (GH-24297) (GH-24532)Senthil Kumaran2021-02-151-0/+1
* [3.6] closes bpo-42938: Replace snprintf with Python unicode formatting in ct...Benjamin Peterson2021-01-181-0/+2
* bpo-42794: Update test_nntplib to use offical group name for testing (GH-2403...Miss Islington (bot)2021-01-011-0/+2
* bpo-40791: Make compare_digest more constant-time. (GH-23438) (GH-23767)Miss Islington (bot)2020-12-141-0/+1
* bpo-35560: Remove assertion from format(float, "n") (GH-11288) (GH-23231)Miss Islington (bot)2020-11-101-0/+3
* [3.6] bpo-42103: Improve validation of Plist files. (GH-22882) (GH-23118)Serhiy Storchaka2020-11-102-0/+5
* bpo-41944: No longer call eval() on content received via HTTP in the CJK code...Miss Skeleton (bot)2020-10-201-0/+1
* bpo-42051: Reject XML entity declarations in plist files (GH-22760) (GH-22801...Miss Skeleton (bot)2020-10-201-0/+3
* 3.6.12v3.6.12Ned Deily2020-08-155-8/+0
* bpo-39603: Prevent header injection in http methods (GH-18485) (GH-21539)Miss Islington (bot)2020-07-191-0/+2
* bpo-39017: Avoid infinite loop in the tarfile module (GH-21454) (#21485)Miss Islington (bot)2020-07-151-0/+1
* bpo-41288: Fix a crash in unpickling invalid NEWOBJ_EX. (GH-21458) (GH-21462)Miss Islington (bot)2020-07-131-0/+2
* [3.6] bpo-29778: Ensure python3.dll is loaded from correct locations when Pyt...Steve Dower2020-07-061-0/+2
* [3.6] bpo-41004: Resolve hash collisions for IPv4Interface and IPv6Interface ...Tapas Kundu2020-06-301-0/+1
* 3.6.11rc1v3.6.11rc1Ned Deily2020-06-177-14/+0
* bpo-39073: validate Address parts to disallow CRLF (GH-19007) (#19224)Miss Islington (bot)2020-05-271-0/+1
* bpo-39503: CVE-2020-8492: Fix AbstractBasicAuthHandler (GH-18284) (GH-19304)Victor Stinner2020-04-022-0/+8
* bpo-38576: Disallow control characters in hostnames in http.client (GH-18995)...Miss Islington (bot)2020-03-141-0/+1
* closes bpo-39510: Fix use-after-free in BufferedReader.readinto() (GH-18350)Miss Islington (bot)2020-02-041-0/+1
* [3.6] bpo-39401: Avoid unsafe DLL load on Windows 7 and earlier (GH-18231) (G...Steve Dower2020-01-301-0/+1
* bpo-39421: Fix posible crash in heapq with custom comparison operators (GH-18...Miss Islington (bot)2020-01-231-0/+2
* 3.6.10v3.6.10Ned Deily2019-12-181-1/+0
* bpo-38295: prevent test_relative_path of test_py_compile failure on macOS Cat...Miss Islington (bot)2019-12-171-0/+1
* 3.6.10rc1v3.6.10rc1Ned Deily2019-12-119-23/+0
* [3.6] bpo-37228: Fix loop.create_datagram_endpoint()'s usage of SO_REUSEADDR ...Kyle Stanley2019-12-111-0/+6
* bpo-38945: UU Encoding: Don't let newline in filename corrupt the output form...Miss Islington (bot)2019-12-021-0/+1
* bpo-38804: Fix REDoS in http.cookiejar (GH-17157) (#17343)Miss Islington (bot)2019-11-221-0/+1
* [3.6] bpo-38216, bpo-36274: Allow subclasses to separately override validatio...Jason R. Coombs2019-09-281-0/+4
* bpo-38243, xmlrpc.server: Escape the server_title (GH-16373) (GH-16441)Victor Stinner2019-09-281-0/+3
* [3.6] closes bpo-38174: Update vendored expat library to 2.2.8. (GH-16410)Benjamin Peterson2019-09-251-0/+2
* [3.6] bpo-37461: Fix typo (inifite -> infinite) (#15432)GeeTransit2019-08-241-1/+1
* bpo-34155: Dont parse domains containing @ (GH-13079) (GH-14826)Miss Islington (bot)2019-08-091-0/+1
* bpo-37461: Fix infinite loop in parsing of specially crafted email headers (G...Miss Islington (bot)2019-08-011-0/+2
* Fix infinite loop in email folding logic (GH-12732) (GH-14799)Miss Islington (bot)2019-07-211-0/+3
* 3.6.9v3.6.9Ned Deily2019-07-022-5/+0
* bpo-34602: Avoid failures setting macOS stack resource limit (GH-14546) (GH-1...Miss Islington (bot)2019-07-021-0/+4
* closes bpo-37437: Update vendorized expat to 2.2.7. (GH-14436)Miss Islington (bot)2019-06-271-0/+1
* 3.6.9rc1v3.6.9rc1Ned Deily2019-06-1816-32/+0
* bpo-33529, email: Fix infinite loop in email header encoding (GH-12020) (GH-1...Victor Stinner2019-06-171-0/+2
* bpo-35907, CVE-2019-9948: urllib rejects local_file:// scheme (GH-13513)Victor Stinner2019-05-281-0/+3
* [3.6] bpo-35925: Skip SSL tests that fail due to weak external certs or old T...Gregory P. Smith2019-05-281-0/+1
* bpo-32947: test_ssl fixes for TLS 1.3 and OpenSSL 1.1.1 (GH-11612)Victor Stinner2019-05-281-0/+1
* [3.6] bpo-36816: Update the self-signed.pythontest.net cert (GH-13192) (GH-13...Gregory P. Smith2019-05-081-0/+1
* bpo-30458: Disallow control chars in http URLs. (GH-12755) (GH-13155)Miro Hrončok2019-05-081-0/+1
* bpo-36742: Fixes handling of pre-normalization characters in urlsplit() (GH-1...Miss Islington (bot)2019-05-021-0/+1
* bpo-34602: Avoid failures setting macOS stack resource limit (GH-13011) (GH-1...Miss Islington (bot)2019-04-291-0/+3
* [3.6] bpo-35564: add master_doc='contents' to conf.py (GH-11290). (GH-12461)Julien Palard2019-03-201-0/+1
* [3.6] bpo-36216: Add check for characters in netloc that normalize to separat...Steve Dower2019-03-121-0/+3
* bpo-35647: Fix path check in cookiejar (GH-11436) (GH-12268)Miss Islington (bot)2019-03-121-0/+3