Miss Islington (bot) 3abcace681 [3.11] gh-119511: Fix a potential denial of service in imaplib (GH-119514) (#129357) ... The IMAP4 client could consume an arbitrary amount of memory when trying to connect to a malicious server, because it read a "literal" data with a single read(size) call, and BufferedReader.read() allocates the bytes object of the specified size before reading. Now the IMAP4 client reads data by chunks, therefore the amount of used memory is limited by the amount of the data actually been sent by the server. (cherry picked from commit 735f25c5e3) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>		2025-02-19 14:16:30 +01:00
..
__phello__
asyncio	[3.11] gh-121957: Emit audit events for python -i and python -m asyncio (GH-122118)	2024-07-22 13:44:55 +02:00
collections	[3.11] gh-116485: Fixed the typo (GH-116486) (#116490)	2024-03-08 08:27:33 +00:00
concurrent	[3.11] gh-109370: Fix unexpected traceback output in test_concurrent_futures (GH-109780) (GH-109882)	2023-09-26 11:21:09 +03:00
ctypes	[3.11] gh-72463: Fix ctypes/test_loading.py so that test_find reports skipped (GH-18312) (GH-116137)	2024-02-29 19:48:38 +00:00
curses
dbm
distutils	[3.11] gh-115198: Fix support of Docutils >= 0.19 in distutils (GH-115220)	2024-02-12 13:45:22 +02:00
email	[3.11] gh-80222: Fix email address header folding with long quoted-string (GH-122753) (#129009)	2025-02-19 14:12:34 +01:00
encodings	[3.11] gh-98433: Fix quadratic time idna decoding. (GH-99092) (#99222)	2022-11-07 18:57:10 -08:00
ensurepip	[3.11] gh-114965: Updated bundled pip to 24.0 (gh-114966) (gh-114973)	2024-02-03 19:38:23 +00:00
html	[3.11] gh-100210: Correct the comment link for unescaping HTML (GH-100212) (#102044)	2023-02-21 07:52:02 +08:00
http	[3.11] gh-123067: Fix quadratic complexity in parsing "-quoted cookie values with backslashes (GH-123075) (#123105)	2024-09-04 17:50:00 +02:00
idlelib	[3.11] gh-88516: show file proxy icon in IDLE editor windows on macOS (GH-112894) (#115841)	2024-02-23 02:38:49 +00:00
importlib	[3.11] gh-117178: Recover lazy loading of self-referential modules (GH-117179) (#117320)	2024-03-28 11:17:10 +00:00
json	[3.11] doc: Use super() in subclassed JSONEncoder examples (GH-115565) (GH-116046)	2024-02-28 14:08:40 +00:00
lib2to3	gh-90473: Misc test fixes for WASI (GH-93218)	2022-05-25 07:24:32 -07:00
logging	[3.11] [docs] Fix typo in docstring and add example to logging cookbook. (GH-117157) (GH-117158)	2024-03-23 10:19:14 +00:00
msilib	gh-91217: deprecate msilib (GH-91515)	2022-04-14 12:50:11 -07:00
multiprocessing	[3.11] bpo-43952: Fix multiprocessing Listener authkey bug (GH-25845) (GH-115994)	2024-02-27 16:14:01 +00:00
pydoc_data	Python 3.11.11	2024-12-03 12:20:40 -05:00
re	[3.11] gh-109747: Improve errors for unsupported look-behind patterns (GH-109859) (GH-110860)	2023-10-14 06:51:24 +00:00
site-packages
sqlite3	[3.11] gh-108590: Revert gh-108657 (commit 400a1cebc) (#108686) (#108694)	2023-08-30 20:12:10 +00:00
test	[3.11] gh-119511: Fix a potential denial of service in imaplib (GH-119514) (#129357)	2025-02-19 14:16:30 +01:00
tkinter	[3.11] gh-107262: Update Tkinter tests for Tcl/Tk 8.6.14 (GH-119322) (#130276)	2025-02-19 10:51:35 +02:00
tomllib	bpo-40059: Add tomllib (PEP-680) (GH-31498)	2022-03-08 09:26:13 +01:00
turtledemo	[3.11] gh-111092: Make turtledemo run without default root enabled (GH-111093) (#111096)	2023-10-20 04:25:17 +00:00
unittest	[3.11] gh-75988: Fix issues with autospec ignoring wrapped object (GH-115223) (#117124)	2024-03-22 09:48:41 +00:00
urllib	[3.11] gh-105704: Disallow square brackets ([ and ]) in domain names for parsed URLs (GH-129418) (#129528)	2025-02-19 14:13:52 +01:00
venv	[3.11] gh-124651: Quote template strings in venv activation scripts (GH-124712) (GH-126185) (#126269)	2024-11-01 13:11:47 +00:00
wsgiref	gh-96959: Update HTTP links which are redirected to HTTPS (GH-96961)	2022-09-25 01:20:45 -07:00
xml	[3.11] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) (GH-115623) (#116268)	2024-03-06 14:17:02 -08:00
xmlrpc	bpo-47126: Update to canonical PEP URLs specified by PEP 676 (GH-32124)	2022-03-30 12:00:27 +01:00
zoneinfo	[3.11] [3.12] bpo-42663: Fix parsing TZ strings in zoneinfo module (GH-23825) (GH-110882) (GH-110889)	2023-10-15 08:32:26 +00:00
__future__.py	gh-93626: Set the release for __future__.annotations to None (GH-93628) (GH-94553)	2022-07-05 11:16:32 +02:00
__hello__.py	bpo-47084: Clear Unicode cached representations on finalization (GH-32032)	2022-03-22 13:53:51 +01:00
_aix_support.py
_bootsubprocess.py
_collections_abc.py	Minor code nit: Move an unrelated statement out of a try clause in Sequence.index (GH-32330)	2022-04-06 13:03:36 -05:00
_compat_pickle.py	bpo-46565: del loop vars that are leaking into module namespaces (GH-30993)	2022-02-03 11:20:08 +02:00
_compression.py
_markupbase.py
_osx_support.py	[3.11] gh-102362: Fix macOS version number in result of sysconfig.get_platform() (GH-112942) (#113265)	2023-12-19 19:57:08 +01:00
_py_abc.py
_pydecimal.py	gh-91291: Accept attributes as keyword arguments in decimal.localcontext (#32242)	2022-04-21 21:27:15 -07:00
_pyio.py	[3.11] gh-95782: Fix io.BufferedReader.tell() etc. being able to return offsets < 0 (GH-99709) (GH-115600)	2024-02-17 14:55:43 +02:00
_sitebuiltins.py
_strptime.py	[3.11] bpo-36959: Fix error messages for invalid ISO format string in _strptime() (GH-13408) (GH-113499)	2023-12-26 20:09:41 +00:00
_threading_local.py
_weakrefset.py	bpo-26579: Add object.__getstate__(). (GH-2821)	2022-04-06 20:00:14 +03:00
abc.py	gh-87864: Use correct function definition syntax in the docs (GH-103312)	2023-04-11 07:19:33 -07:00
aifc.py	gh-47061: Deprecate chunk (GH-91419)	2022-04-11 15:02:41 -07:00
antigravity.py
argparse.py	[3.11] bpo-44865: Fix yet one missing translations in argparse (GH-27668) (GH-115975)	2024-02-26 23:14:32 +00:00
ast.py	[3.11] gh-108843: fix ast.unparse for f-string with many quotes (#108980)	2023-09-18 15:11:56 +01:00
asynchat.py	bpo-47061: use warnings._deprecated() with asynchat, asyncore, and smtpd (GH-32350)	2022-04-06 11:22:39 -07:00
asyncore.py	bpo-47061: use warnings._deprecated() with asynchat, asyncore, and smtpd (GH-32350)	2022-04-06 11:22:39 -07:00
base64.py
bdb.py	[3.11] gh-101517: fix line number propagation in code generated for except* (#103550) (#103816)	2023-04-25 18:08:54 +01:00
bisect.py
bz2.py
calendar.py	[3.11] Remove limit in calendar CLI help message for year arg (GH-114719) (GH-114723)	2024-01-29 16:41:45 +00:00
cgi.py	bpo-47061: deprecate cgi and cgitb (GH-32410)	2022-04-08 17:15:35 -07:00
cgitb.py	bpo-47061: deprecate cgi and cgitb (GH-32410)	2022-04-08 17:15:35 -07:00
chunk.py	gh-47061: Deprecate chunk (GH-91419)	2022-04-11 15:02:41 -07:00
cmd.py	gh-67248: cmd: Sort miscellaneous help topics (#92254)	2022-05-03 21:36:52 -06:00
code.py
codecs.py	[3.11] gh-50644: Forbid pickling of codecs streams (GH-109180) (GH-109232)	2023-09-10 17:41:19 +00:00
codeop.py	[3.11] gh-111366: Correctly show custom syntax error messages in the codeop module functions (GH-111384). (#111516)	2023-10-31 14:41:20 +00:00
colorsys.py	[3.11] gh-106498: Revert incorrect colorsys.rgb_to_hls change (GH-106627) (#106633)	2023-07-11 15:48:00 +00:00
compileall.py	bpo-40447: accept all path-like objects in compileall.compile_file (GH-19883)	2022-12-23 12:43:13 -08:00
configparser.py	[3.11] gh-116957: configparser: Do post-process values after DuplicateOptionError (GH-116958) (GH-117012)	2024-03-19 18:19:04 +01:00
contextlib.py	[3.11] gh-110378: Close invalid generators in contextmanager and asynccontextmanager (GH-110499) (#110589)	2023-10-10 11:12:52 +02:00
contextvars.py
copy.py	gh-90494: Reject 6th element of the __reduce__() tuple (GH-93609) (GH-93631)	2022-06-10 16:00:19 +02:00
copyreg.py	bpo-26579: Add object.__getstate__(). (GH-2821)	2022-04-06 20:00:14 +03:00
cProfile.py	gh-103935: Use io.open_code() when executing code in trace and profile modules (GH-103947)	2023-04-27 21:23:46 +00:00
crypt.py	gh-95231: Disable md5 & crypt modules if FIPS is enabled (GH-94742)	2022-08-15 08:37:51 -07:00
csv.py
dataclasses.py	[3.11] gh-105866: fix dataclass with slots=True, weakref_slot=True (GH-105870) (GH-116979)	2024-03-19 11:57:45 +01:00
datetime.py	[3.11] Fix date.__repr__() docstring (#109422) (#109449)	2023-09-15 13:29:57 +00:00
decimal.py
difflib.py	Correct method name typo (#91970)	2022-04-27 15:28:56 -06:00
dis.py	[3.11] gh-108826: Document dis module CLI and rename _test function to main (#108827) (#110689)	2023-10-11 14:48:03 -06:00
doctest.py	[3.11] gh-115341: Fix loading unit tests with doctests in -OO mode (GH-115342) (GH-115672)	2024-02-19 17:54:59 +00:00
enum.py	[3.11] gh-116600: [Enum] fix global Flag repr (GH-116615) (#116630)	2024-03-11 17:36:15 -07:00
filecmp.py
fileinput.py	[3.11] gh-101961 fileinput.hookcompressed should not set the encoding value for the binary mode (gh-102068) (#102098)	2023-02-21 12:39:16 +09:00
fnmatch.py	gh-89973: Fix re.error in the fnmatch module. (GH-93072)	2022-06-05 02:39:11 -07:00
fractions.py	[3.11] gh-114014: Update fractions.Fraction()'s rational parsing regex (GH-114015) (#114025)	2024-01-13 13:22:31 -05:00
ftplib.py	[3.11] gh-114241: Fix and improve the ftplib CLI (GH-114242) (GH-114405)	2024-01-21 22:31:12 +02:00
functools.py	gh-89828: Do not relay the __class__ attribute in GenericAlias (GH-93754)	2022-06-18 07:41:25 -07:00
genericpath.py
getopt.py
getpass.py
gettext.py	[3.11] gh-110519: Improve deprecation warning in the gettext module (GH-110520) (GH-110564)	2023-10-09 16:10:34 +02:00
glob.py	[3.11] gh-79382: Fix recursive glob() with trailing "**" (GH-115134) (GH-115291)	2024-02-11 11:04:02 +00:00
graphlib.py
gzip.py	gh-90839: Forward gzip.compress() compresslevel to zlib (gh-31215)	2022-04-12 22:46:40 +09:00
hashlib.py	bpo-45150: Add hashlib.file_digest() for efficient file hashing (GH-31930)	2022-03-22 02:37:00 -07:00
heapq.py	Update: usage doc for heappushpop (GH-91451)	2022-04-17 23:12:33 -05:00
hmac.py	[3.11] gh-112999: Replace the outdated "deprecated" directives with "versionchanged" (GH-113000) (GH-113020)	2023-12-12 17:17:35 +00:00
imaplib.py	[3.11] gh-119511: Fix a potential denial of service in imaplib (GH-119514) (#129357)	2025-02-19 14:16:30 +01:00
imghdr.py	gh-91217: deprecate imghdr (#91461)	2022-04-13 10:47:41 -07:00
imp.py
inspect.py	[3.11] gh-101293: Fix support of custom callables and types in inspect.Signature.from_callable() (GH-115530) (GH-116197)	2024-03-01 12:55:14 +00:00
io.py	gh-111356: io: Add missing documented objects to io.__all__ (GH-111370)	2023-11-10 07:32:41 +00:00
ipaddress.py	[3.11] gh-122792: Make IPv4-mapped IPv6 address properties consistent with IPv4 (GH-122793) (GH-123818)	2024-12-03 17:57:10 +01:00
keyword.py
linecache.py	[3.11] gh-86291: linecache: get module name from __spec__ if available (GH-22908) (GH-115732)	2024-02-20 18:18:16 +00:00
locale.py	[3.11] gh-111187: Postpone removal version for locale.getdefaultlocale() to 3.15 (GH-111188) (#111326)	2023-10-27 16:08:53 +03:00
lzma.py
mailbox.py	[3.11] GH-gh-75705: Set unixfrom envelope in mailbox._mboxMMDF (GH-107117) (GH-115099)	2024-02-06 19:16:54 +00:00
mailcap.py	[3.11] gh-68966: Make mailcap refuse to match unsafe filenames/types/params (GH-91993) (GH-93458)	2022-06-03 08:25:58 -07:00
mimetypes.py	[3.11] gh-66543: Fix mimetype.guess_type() (GH-117217) (GH-117257)	2024-03-26 11:46:28 +00:00
modulefinder.py
netrc.py
nntplib.py	gh-91217: deprecate nntplib (GH-91543)	2022-04-15 12:32:56 -07:00
ntpath.py	[3.11] gh-106242: Make ntpath.realpath errors consistent with abspath when there are embedded nulls (GH-108248)	2023-08-22 15:35:16 +01:00
nturl2path.py
numbers.py	[3.11] gh-68163: Correct conversion of Rational instances to float (GH-25619) (#96556)	2022-09-08 12:03:53 +01:00
opcode.py	[3.11] GH-93516: Backport GH-93769 (GH-94231)	2022-06-28 16:30:22 +01:00
operator.py
optparse.py
os.py	[3.11] gh-116401: Fix blocking os.fwalk() and shutil.rmtree() on opening a named pipe (GH-116421) (GH-116717)	2024-03-13 10:03:17 +00:00
pathlib.py	[3.11] GH-87695: Fix OSError from pathlib.Path.glob() (GH-104292) (GH-104362)	2023-05-10 23:19:49 +00:00
pdb.py	[3.11] gh-90095: Ignore empty lines and comments in .pdbrc (GH-116834) (#116855)	2024-03-15 09:55:44 +00:00
pickle.py	[3.11] gh-85567: Fix resouce warnings in pickle and pickletools CLIs (GH-113618) (GH-113759)	2024-01-05 22:29:31 +00:00
pickletools.py	[3.11] gh-115146: Fix typo in pickletools.py documentation (GH-115148) (GH-115156)	2024-02-08 08:32:46 +00:00
pipes.py	gh-91217: deprecate-pipes (GH-91779)	2022-04-21 19:28:34 -07:00
pkgutil.py	[3.11] gh-68654: Clarify subdirectories used by pkgutil.extend_path (GH-103701)	2023-04-23 02:57:10 -06:00
platform.py	gh-100750: pass encoding kwarg in lib/platform.py (GH-100751)	2023-01-20 21:07:56 -08:00
plistlib.py	gh-101992: update pstlib module documentation (GH-102133)	2023-03-04 22:36:00 -08:00
poplib.py
posixpath.py	gh-96192: fix os.ismount() to use a path that is str or bytes (GH-96194)	2022-11-30 15:31:49 -08:00
pprint.py	[3.11] [pprint]: Add docstring about PrettyPrinter.underscore_numbers parameter (GH-112963) (#113052)	2023-12-13 12:38:19 +00:00
profile.py	gh-103935: Use io.open_code() when executing code in trace and profile modules (GH-103947)	2023-04-27 21:23:46 +00:00
pstats.py	[3.11] Fix type annotation of pstats.FunctionProfile.ncalls (GH-96741) (#96835)	2022-10-05 14:57:11 -07:00
pty.py	[3.11] gh-96522: Fix deadlock in pty.spawn (GH-96639) (#104655)	2023-05-19 16:54:50 +02:00
py_compile.py
pyclbr.py
pydoc.py	[3.11] gh-116143: Fix race condition in pydoc _start_server (GH-116144) (#116416)	2024-03-06 15:07:08 +00:00
queue.py	gh-90879: Fix missing parameter for put_nowait() (GH-91514)	2022-04-14 17:23:57 +09:00
quopri.py
random.py	[3.11] GH-101097: Switch from standard interval notation to greater or less than signs for random.random()'s documentation (GH-101119) (GH-101246)	2023-01-22 13:45:55 -08:00
reprlib.py
rlcompleter.py	gh-92345: Import rlcompleter before sys.path is extended (#92346)	2022-05-05 21:24:16 +02:00
runpy.py	bpo-26792: Improve docstrings of runpy module run_functions (#30729)	2022-04-29 12:22:46 -06:00
sched.py
secrets.py	bpo-47126: Update to canonical PEP URLs specified by PEP 676 (GH-32124)	2022-03-30 12:00:27 +01:00
selectors.py	[3.11] gh-110038: KqueueSelector must count all read/write events (GH-110039) (#110044)	2023-09-28 20:58:24 +02:00
shelve.py
shlex.py
shutil.py	[3.11] gh-116401: Fix blocking os.fwalk() and shutil.rmtree() on opening a named pipe (GH-116421) (GH-116717)	2024-03-13 10:03:17 +00:00
signal.py	[3.11] gh-112559: Avoid unnecessary conversion attempts to enum_klass in signal.py (GH-113040) (#113444)	2023-12-23 18:09:46 -08:00
site.py	[3.11] gh-113659: Skip hidden .pth files (GH-113660) (GH-114144)	2024-01-16 18:56:31 +00:00
smtpd.py	bpo-47061: use warnings._deprecated() with asynchat, asyncore, and smtpd (GH-32350)	2022-04-06 11:22:39 -07:00
smtplib.py
sndhdr.py	gh-85525: Indicate supported sound header formats (GH-21575)	2022-10-15 08:09:20 -07:00
socket.py	[3.11] gh-122133: Rework pure Python socketpair tests to avoid use of importlib.reload. (GH-122493) (GH-122506)	2024-08-02 15:09:45 +02:00
socketserver.py	bpo-40280: Disable AF_UNIX, AF_PACKET, SO_REUSE* on Emscripten (#31829)	2022-03-11 23:25:14 +01:00
sre_compile.py	bpo-47152: Convert the re module into a package (GH-32177)	2022-04-02 11:35:13 +03:00
sre_constants.py	bpo-47152: Convert the re module into a package (GH-32177)	2022-04-02 11:35:13 +03:00
sre_parse.py	bpo-47152: Convert the re module into a package (GH-32177)	2022-04-02 11:35:13 +03:00
ssl.py	[3.11] gh-113280: Always close socket if SSLSocket creation failed (GH-114659) (GH-114996)	2024-02-04 16:16:57 +00:00
stat.py
statistics.py	[3.11] GH-99155: Fix NormalDist pickle with 0 and 1 protocols (GH-99156). (GH-99188)	2022-11-07 01:41:08 -08:00
string.py
stringprep.py
struct.py
subprocess.py	[3.11] gh-90872: Fix subprocess.Popen.wait() for negative timeout (#116989) (#117003)	2024-03-19 14:21:42 +00:00
sunau.py	gh-91217: deprecate sunau (GH-91866)	2022-04-25 16:26:43 -07:00
symtable.py	Change list to view object (GH-93661)	2022-06-11 04:20:52 -07:00
sysconfig.py	[3.11] gh-92897: Ensure venv --copies respects source build property of the creating interpreter (GH-92899) (GH-94567)	2022-07-05 16:40:17 +01:00
tabnanny.py	gh-97639: Remove tokenize.NL check from tabnanny (GH-97640)	2022-10-03 19:10:00 -07:00
tarfile.py	[3.11] gh-121285: Remove backtracking when parsing tarfile headers (GH-121286) (#123639)	2024-09-03 15:07:13 +00:00
telnetlib.py	gh-91217: deprecate telnetlib (GH-91958)	2022-04-26 10:45:08 -07:00
tempfile.py	[3.11] gh-79325: Fix recursion error in TemporaryDirectory cleanup on Windows (GH-112762) (GH-112848)	2023-12-07 17:46:30 +00:00
textwrap.py
this.py
threading.py	[3.11] gh-102512: Turn _DummyThread into _MainThread after os.fork() called from a foreign thread (GH-113261) (GH-114431)	2024-01-22 15:00:33 +00:00
timeit.py	[3.11] gh-105052:update timeit function's description (GH-105060) (#108535)	2023-08-27 03:57:32 -04:00
token.py
tokenize.py	bpo-46565: del loop vars that are leaking into module namespaces (GH-30993)	2022-02-03 11:20:08 +02:00
trace.py	[3.11] gh-38807: Fix race condition in Lib/trace.py (GH-110143) (GH-114207)	2024-01-17 20:26:09 +00:00
traceback.py	[3.11] gh-113358: Fix rendering tracebacks with exceptions with a broken __getattr__ (GH-113359) (#114118)	2024-01-19 20:35:57 +00:00
tracemalloc.py
tty.py
turtle.py	gh-101100: Fix Sphinx warnings in turtle module (GH-102340)	2023-03-13 04:33:38 -07:00
types.py	gh-89828: Do not relay the __class__ attribute in GenericAlias (GH-93754)	2022-06-18 07:41:25 -07:00
typing.py	[3.11] gh-117110: Fix subclasses of typing.Any with custom constructors (GH-117111) (#117358)	2024-03-29 00:38:13 +00:00
uu.py	[3.11] gh-99889: Fix directory traversal security flaw in uu.decode() (GH-104096) (#104329)	2023-05-09 09:46:25 -07:00
uuid.py	gh-98415: Fix uuid.getnode() ifconfig implementation (GH-98423)	2022-11-02 12:12:31 -07:00
warnings.py	[3.11] gh-113781: Silence AttributeError in warning module during Python finalization (GH-113813) (GH-113874)	2024-01-09 22:41:02 +02:00
wave.py	[3.11] gh-105096: Reformat wave documentation (#105136) (#105138) (#105155)	2023-05-31 16:40:25 +00:00
weakref.py	Remove unnecessary registration of weakref.WeakSet to _collections_abc.Set (GH-32211)	2022-03-31 09:11:35 -05:00
webbrowser.py	[3.11] gh-113543: Make sure that MacOSXOSAScript sends webbrowser.open audit event (GH-113544) (#113550)	2023-12-29 09:57:21 +01:00
xdrlib.py	gh-91217: deprecate xdrlib (GH-92066)	2022-04-29 18:22:10 -07:00
zipapp.py
zipfile.py	[3.11] gh-123270: Replaced SanitizedNames with a more surgical fix. (GH-123354) (#123425)	2024-09-04 17:52:54 +02:00
zipimport.py	GH-87235: Make sure "python /dev/fd/9 9</path/to/script.py" works on macOS (GH-99768)	2022-11-27 03:19:02 -08:00