aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* [3.9] bpo-43882 - urllib.parse should sanitize urls containing ASCII newline ...gentoo-2.7-vanillaMiss Islington (bot)13 days4-0/+55
* bpo-43075: Fix ReDoS in urllib AbstractBasicAuthHandler (GH-24391)Miss Islington (bot)13 days1-1/+1
* [3.6] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881...Miss Islington (bot)2021-04-033-3/+43
* py2-ize the CJK codec testMichał Górny2021-03-051-2/+3
* [3.6] bpo-42967: only use '&' as a query string separator (GH-24297) (GH-24532)Senthil Kumaran2021-02-167-40/+100
* [3.6] closes bpo-42938: Replace snprintf with Python unicode formatting in ct...Benjamin Peterson2021-01-193-25/+69
* bpo-40791: Make compare_digest more constant-time. (GH-23438)Miss Islington (bot)2020-12-142-1/+2
* bpo-41944: No longer call eval() on content received via HTTP in the CJK code...Miss Skeleton (bot)2020-12-142-15/+9
* bpo-42051: Reject XML entity declarations in plist files (GH-22760) (GH-22801...Miss Skeleton (bot)2020-12-143-0/+28
* bpo-39603: Prevent header injection in http methods (GH-18485) (GH-21539)Michał Górny2020-09-132-0/+37
* bpo-39503: CVE-2020-8492: Fix AbstractBasicAuthHandler (GH-18284) (GH-19304)Michał Górny2020-09-132-40/+101
* bpo-39017: Avoid infinite loop in the tarfile module (GH-21454)Rishi2020-09-132-0/+3
* Add empty 2.7.18 NEWS file.v2.7.182.7Benjamin Peterson2020-04-191-0/+8
* Bump version to 2.7.18.Benjamin Peterson2020-04-191-3/+3
* Remove incorrect comma. (GH-19604)Benjamin Peterson2020-04-191-1/+1
* [2.7] Doc: Add an optional obsolete header. (GH-19229)Leonard Richardson2020-04-183-0/+21
* Bump version to 2.7.18rc1.v2.7.18rc1Benjamin Peterson2020-04-042-5/+5
* Make 2.7.18rc1 release notes.Benjamin Peterson2020-04-0410-16/+89
* Update macOS installer build for 2.7.18 end-of-life. (GH-19352)Ned Deily2020-04-034-27/+27
* [2.7] closes bpo-40125: Update multissltests.py to use OpenSSL 1.1.1f. (GH-19...Benjamin Peterson2020-03-311-3/+3
* [2.7] closes bpo-38576: Disallow control characters in hostnames in http.clie...Matěj Cepl2020-03-184-8/+53
* Doc: Change Python 2 status to EOL. (GH-17885)Miss Islington (bot)2020-01-061-1/+1
* bpo-27973 - Use test.support.temp_dir instead of NamedTemporaryFile for the (...Senthil Kumaran2020-01-031-4/+4
* Update copyright year in macOS installer license copy (GH-17806)Miss Islington (bot)2020-01-021-3/+3
* [2.7] Bring Python into the next decade. (GH-17805)Benjamin Peterson2020-01-027-7/+7
* [2.7] bpo-27973 - Fix for urllib.urlretrieve() failing on second ftp transfer...Senthil Kumaran2019-12-303-1/+46
* [2.7] Minor C API documentation improvements. (GH-17699)Benjamin Peterson2019-12-241-1/+1
* bpo-38295: prevent test_relative_path of test_py_compile failure on macOS Cat...Miss Islington (bot)2019-12-172-1/+2
* bpo-38730: Replace strncpy in import.c with memcpy. (GH-17633)Benjamin Peterson2019-12-161-3/+3
* bpo-39035: travis: Don't use beta group (GH-17605)Inada Naoki2019-12-141-1/+0
* [2.7] bpo-38945: UU Encoding: Don't let newline in filename corrupt the outpu...Matthew Rollings2019-12-034-0/+22
* document threading.Lock.locked() (GH-17427)Miss Islington (bot)2019-12-011-0/+4
* bpo-38804: Fix REDoS in http.cookiejar (GH-17157) (GH-17345)Victor Stinner2019-11-244-8/+29
* bpo-38730: Remove usage of stpncpy as it's not supported on MSVC 2008. (GH-17...Benjamin Peterson2019-11-071-1/+6
* [2.7] bpo-38730: Fix -Wstringop-truncation warnings. (GH-17075)Benjamin Peterson2019-11-078-18/+19
* bpo-37731: Squish another _POSIX_C_SOURCE redefinition problem in expat. (GH-...Benjamin Peterson2019-11-061-6/+6
* bpo-37731: Reorder includes in xmltok.c to avoid redefinition of _POSIX_C_SOU...Miss Islington (bot)2019-11-061-8/+8
* bpo-38557: Improve documentation for list and tuple C API. (GH-16925)Miss Skeleton (bot)2019-10-263-12/+19
* [2.7] bpo-38535: Fix positions for AST nodes for calls without arguments in d...Serhiy Storchaka2019-10-263-2/+14
* Update URL in macOS installer copy of license (GH-16905)Miss Skeleton (bot)2019-10-231-1/+1
* bpo-37025: AddRefActCtx() shouldn't be checked for failure (GH-16897)Zackery Spytz2019-10-232-5/+12
* Fix Zope URL (GH-16880)Miss Skeleton (bot)2019-10-221-1/+1
* [2.7] bpo-38540: Fix possible leak in PyArg_Parse for "es#" and "et#". (GH-16...Serhiy Storchaka2019-10-212-1/+16
* Work around Path.glob() issue when creating nuget package (GH-16855)Steve Dower2019-10-191-1/+1
* 2.2.17+Benjamin Peterson2019-10-191-1/+1
* Empty blurb file for 2.7.17.v2.7.17Benjamin Peterson2019-10-191-0/+8
* Bump version to 2.7.17 final.Benjamin Peterson2019-10-191-3/+3
* Update doc switcher list for 3.8.0 (GH-16809)Miss Islington (bot)2019-10-191-1/+1
* Update build docs for macOS (GH-16844)Ned Deily2019-10-193-90/+85
* bpo-32758: Warn that ast.parse() and ast.literal_eval() can segfault the inte...Ashley Whetter2019-10-181-0/+10