Petr Viktorin 2a9273a0e4 [3.10] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123768) ... Detect email address parsing errors and return empty tuple to indicate the parsing error (old API). Add an optional 'strict' parameter to getaddresses() and parseaddr() functions. Patch by Thomas Dwyer. (cherry picked from commit 4a153a1d3b) Co-authored-by: Victor Stinner <vstinner@python.org> Co-Authored-By: Thomas Dwyer <github@tomd.tel>		2024-09-06 13:14:22 +02:00
..
asyncio	[3.10] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122119)	2024-07-22 13:48:50 +02:00
collections
concurrent	gh-94440: Fix issue of ProcessPoolExecutor shutdown hanging (GH-94468)	2023-03-15 22:08:11 -07:00
ctypes	[3.10] [3.11] gh-99952: fix refcount issues in ctypes.Structure from_param() result (GH-101339) (#101340)	2023-02-04 12:09:29 -08:00
curses
dbm
distutils
email	[3.10] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123768)	2024-09-06 13:14:22 +02:00
encodings	[3.11] gh-98433: Fix quadratic time idna decoding. (GH-99092) (GH-99222)	2022-11-07 19:23:16 -08:00
ensurepip	[3.10] gh-101997: Update bundled pip version to 23.0.1 (GH-101998). (#102241)	2023-03-28 10:57:55 +02:00
html	gh-100210: Correct the comment link for unescaping HTML (GH-100212)	2023-02-19 02:41:53 -08:00
http	[3.10] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123106)	2024-09-04 17:50:36 +02:00
idlelib	[3.10] gh-97032: avoid test_squeezer crash on macOS buildbots (#115508)	2024-02-19 13:43:38 +00:00
importlib	[3.10] gh-99130: Apply bugfixes from importlib_metadata 4.11.4. (#99132)	2022-11-10 16:59:38 +01:00
json	gh-96959: Update HTTP links which are redirected to HTTPS (GH-96961)	2022-09-25 01:20:53 -07:00
lib2to3
logging	[3.10] gh-99811: Use correct variable to search for time in format string (GH-99812) (GH-99852)	2022-11-28 19:17:31 +00:00
msilib
multiprocessing	bpo-40882: Fix a memory leak in SharedMemory on Windows (GH-20684)	2022-12-02 10:13:33 +00:00
pydoc_data	Python 3.10.14	2024-03-19 22:46:16 +01:00
site-packages
sqlite3	gh-100553: Improve accuracy of sqlite3.Row iter test (GH-100555)	2022-12-27 17:16:53 -08:00
test	[3.10] [CVE-2023-27043] gh-102988: Reject malformed addresses in email.parseaddr() (GH-111116) (#123768)	2024-09-06 13:14:22 +02:00
tkinter	gh-57762: fix misleading tkinter.Tk docstring (GH-98837)	2022-12-22 15:03:38 -08:00
turtledemo	gh-91212: Fixed flickering when the tracer is turned off (GH-95129)	2022-09-29 00:09:16 -07:00
unittest	gh-100739: Respect mock spec when checking for unsafe prefixes (GH-100740)	2023-01-04 15:11:46 -08:00
urllib	[3.10] gh-67693: Fix urlunparse() and urlunsplit() for URIs with path starting with multiple slashes and no authority (GH-113563) (#119026)	2024-09-04 17:43:30 +02:00
venv	[3.10] gh-93858: Prevent error when activating venv in nested fish instances (GH-93931) (GH-98403)	2022-10-18 16:39:06 +01:00
wsgiref	gh-96959: Update HTTP links which are redirected to HTTPS (GH-96961)	2022-09-25 01:20:53 -07:00
xml	[3.10] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (GH-116270)	2024-03-07 00:02:55 +01:00
xmlrpc
zoneinfo	[3.10] Fix typos in documentation and comments (GH-102374) (#102377)	2023-03-02 16:45:01 +00:00
__future__.py
__phello__.foo.py
_aix_support.py
_bootsubprocess.py
_collections_abc.py	[3.10] gh-98852: Fix subscription of types.GenericAlias instances (GH-98920) (GH-98969)	2022-11-01 20:14:38 +02:00
_compat_pickle.py
_compression.py
_markupbase.py
_osx_support.py
_py_abc.py
_pydecimal.py
_pyio.py
_sitebuiltins.py
_strptime.py
_threading_local.py
_weakrefset.py
abc.py
aifc.py
antigravity.py
argparse.py	gh-101979: argparse: fix a bug where parentheses in metavar argument of add_argument() were dropped (GH-102318)	2023-03-05 07:16:14 -08:00
ast.py	gh-99341: Cover type ignore nodes when incrementing line numbers (GH-99422)	2022-11-22 03:06:26 -08:00
asynchat.py
asyncore.py
base64.py
bdb.py	gh-101517: make bdb avoid looking up in linecache with lineno=None (GH-101787)	2023-02-10 09:24:30 -08:00
binhex.py
bisect.py
bz2.py
calendar.py
cgi.py
cgitb.py
chunk.py
cmd.py
code.py
codecs.py	gh-51511: Note that codecs.open()'s encoding parameter affects automatic conversion to binary mode (GH-94370)	2022-10-21 16:28:25 -07:00
codeop.py	gh-96052: codeop: fix handling compiler warnings in incomplete input (GH-96132)	2022-09-25 01:21:21 -07:00
colorsys.py
compileall.py	bpo-40447: accept all path-like objects in compileall.compile_file (GH-19883)	2022-12-23 12:39:55 -08:00
configparser.py	[3.10] gh-100520: Fix rst markup in configparser docstrings (GH-100524) (#100534)	2022-12-26 21:12:56 +05:30
contextlib.py
contextvars.py
copy.py	gh-90494: Reject 6th element of the __reduce__() tuple (GH-93609) (GH-93632)	2022-06-10 15:59:39 +02:00
copyreg.py
cProfile.py	gh-103935: Use io.open_code() when executing code in trace and profile modules (GH-103947)	2023-04-27 22:44:07 +01:00
crypt.py	gh-95231: Disable md5 & crypt modules if FIPS is enabled (GH-94742)	2022-08-30 00:59:56 -07:00
csv.py
dataclasses.py	[3.10] gh-102947: Improve traceback when calling fields() on a non-dataclass (#102948) (#102954)	2023-03-23 15:13:05 +00:00
datetime.py	Check result of utc_to_seconds and skip fold probe in pure Python (GH-91582)	2022-05-14 08:01:53 -07:00
decimal.py
difflib.py	Correct method name typo (GH-91970)	2022-04-27 15:19:43 -07:00
dis.py
doctest.py	[3.10] bpo-28249: fix lineno location for empty DocTest instances (GH-30498) (#92981)	2022-05-19 21:16:57 +02:00
enum.py
filecmp.py
fileinput.py	[3.10] gh-101961 fileinput.hookcompressed should not set the encoding value for the binary mode (gh-102068) (#102099)	2023-02-21 12:39:30 +09:00
fnmatch.py	gh-89973: Fix re.error in the fnmatch module. (GH-93072)	2022-06-05 02:39:03 -07:00
fractions.py
ftplib.py
functools.py
genericpath.py
getopt.py
getpass.py
gettext.py
glob.py
graphlib.py
gzip.py
hashlib.py
heapq.py
hmac.py
imaplib.py
imghdr.py
imp.py
inspect.py	[3.10] gh-85267: Improvements to inspect.signature __text_signature__ handling (GH-98796) (#100393)	2022-12-20 21:25:18 -08:00
io.py
ipaddress.py	[3.10] gh-113171: gh-65056: Fix "private" (non-global) IP address ranges (GH-113179) (GH-113186) (GH-118177) (GH-118229)	2024-05-07 11:56:13 +02:00
keyword.py
linecache.py	gh-92336: linecache.getline should not raise exceptions on decoding errors (GH-94410)	2022-06-30 02:46:27 -07:00
locale.py
lzma.py
mailbox.py
mailcap.py	[3.10] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (GH-93543)	2022-09-20 13:12:35 +02:00
mimetypes.py
modulefinder.py
netrc.py
nntplib.py
ntpath.py	[3.10] bpo-44817: Ignore additional errors in ntpath.realpath (GH-27574) (GH-100023)	2022-12-08 01:02:28 -08:00
nturl2path.py
numbers.py	gh-68163: Correct conversion of Rational instances to float (GH-25619) (GH-96557)	2022-09-04 13:40:24 +01:00
opcode.py
operator.py
optparse.py
os.py	gh-57179: Add note on symlinks for os.walk (GH-94799)	2022-10-07 20:15:08 -07:00
pathlib.py	gh-93156 - fix negative indexing into absolute pathlib.PurePath().parents (GH-93273)	2022-06-03 14:53:00 -07:00
pdb.py	[3.10] GH-101673: Fix pdb bug where local variable changes are lost after longlist (#101674) (#102633)	2023-03-13 14:24:01 +00:00
pickle.py	gh-90494: Reject 6th element of the __reduce__() tuple (GH-93609) (GH-93632)	2022-06-10 15:59:39 +02:00
pickletools.py
pipes.py
pkgutil.py
platform.py	gh-97966: Restore prior expectation that uname_result._fields and ._asdict would include the processor. (gh-98343)	2022-11-26 05:52:12 -08:00
plistlib.py	gh-101992: update pstlib module documentation (GH-102133)	2023-03-04 22:36:07 -08:00
poplib.py
posixpath.py	[3.10] gh-96192: fix os.ismount() to use a path that is str or bytes (GH-96194) (#99456)	2023-01-22 05:19:10 -08:00
pprint.py
profile.py	gh-103935: Use io.open_code() when executing code in trace and profile modules (GH-103947)	2023-04-27 22:44:07 +01:00
pstats.py	[3.10] Fix type annotation of pstats.FunctionProfile.ncalls (GH-96741) (#96836)	2022-10-05 14:57:26 -07:00
pty.py
py_compile.py
pyclbr.py
pydoc.py
queue.py
quopri.py
random.py
re.py
reprlib.py
rlcompleter.py
runpy.py	bpo-26792: Improve docstrings of runpy module run_functions (GH-30729)	2022-04-29 11:45:43 -07:00
sched.py
secrets.py
selectors.py
shelve.py
shlex.py
shutil.py	[3.10] gh-102950: Implement PEP 706 – Filter for tarfile.extractall (GH-102953) (GH-104128)	2023-05-10 13:43:00 +02:00
signal.py
site.py	[3.10] gh-113659: Skip hidden .pth files (GH-113660) (GH-114145)	2024-01-18 14:39:30 +01:00
smtpd.py
smtplib.py
sndhdr.py
socket.py	[3.10] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122507)	2024-08-02 15:10:39 +02:00
socketserver.py
sre_compile.py	[3.10] gh-91575: Update case-insensitive matching in re to the latest Unicode version (GH-91580). (GH-91661)	2022-04-22 21:44:05 +03:00
sre_constants.py	[3.10] gh-92049: Forbid pickling constants re._constants.SUCCESS etc (GH-92070) (GH-92073)	2022-04-30 15:33:39 +03:00
sre_parse.py	[3.10] gh-91700: Validate the group number in conditional expression in RE (GH-91702) (GH-91831)	2022-04-22 21:09:30 +03:00
ssl.py	[3.10] gh-108342: Break ref cycle in SSLSocket._create() exc (GH-108344) (#108350)	2023-08-23 12:10:14 +02:00
stat.py
statistics.py	[3.10] [ GH-99155: Fix NormalDist pickle with 0 and 1 protocols (GH-99156). (GH-99188) (GH-99190)	2022-11-07 04:16:54 -06:00
string.py
stringprep.py
struct.py
subprocess.py	Apply suggestions from code review	2023-02-08 15:45:17 -08:00
sunau.py
symtable.py	Change list to view object (GH-93661)	2022-06-11 04:13:38 -07:00
sysconfig.py
tabnanny.py	gh-97639: Remove tokenize.NL check from tabnanny (GH-97640)	2022-10-03 19:07:10 -07:00
tarfile.py	[3.10] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123640)	2024-09-03 15:07:53 +00:00
telnetlib.py
tempfile.py	[3.10] gh-91133: tempfile.TemporaryDirectory: fix symlink bug in cleanup (GH-99930) (GH-112840)	2024-01-17 14:49:56 +01:00
textwrap.py
this.py
threading.py	fix threading.Event.isSet() docstring (GH-96297)	2022-08-26 22:30:41 -07:00
timeit.py
token.py
tokenize.py
trace.py	gh-103935: Use io.open_code() when executing code in trace and profile modules (GH-103947)	2023-04-27 22:44:07 +01:00
traceback.py	[3.10] gh-89412: Add missing attributes (added in 3.10) to traceback module docs (GH-105046) (#105329)	2023-06-05 19:02:31 +02:00
tracemalloc.py
tty.py
turtle.py	gh-101100: Fix Sphinx warnings in turtle module (GH-102340)	2023-03-13 04:11:34 -07:00
types.py
typing.py	Correct typo in typing.py (GH-100423)	2022-12-22 03:43:55 -08:00
uu.py	[3.10] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104330)	2023-05-09 09:46:47 -07:00
uuid.py	gh-98415: Fix uuid.getnode() ifconfig implementation (GH-98423)	2022-11-02 12:22:19 -07:00
warnings.py
wave.py
weakref.py
webbrowser.py
xdrlib.py
zipapp.py
zipfile.py	[3.10] gh-123693: Use platform-agnostic semantics when processing zipfile.Path.name. (#123694)	2024-09-05 11:15:03 +02:00
zipimport.py	[3.10] GH-87235: Make sure "python /dev/fd/9 9</path/to/script.py" works on macOS (GH-99768) (#99817)	2023-03-28 14:13:37 +02:00