Repository navigation

3.10.22.1: eMudhra ssl distrust + 3.11.18 security fixes, ensurepip pip 26.2.2 - #87

Merged

icanhasmath merged 17 commits into

3.10.22.xfrom

3.10.22.1-security

Oct 28, 2026

Merged

3.10.22.1: eMudhra ssl distrust + 3.11.18 security fixes, ensurepip pip 26.2.2#87
icanhasmath merged 17 commits into
3.10.22.xfrom
3.10.22.1-security

Commits on Oct 27, 2026
- [3.11] gh-87720 Fix additional header refolding-quoting edge case (GH-134271) (#159065)
  
  authored and
  icanhasmath
  committed
  50e5a0e
- [3.11] gh-159428: Don't read mimetypes.knownfiles by default on Windows (GH-159445) (#159573)
  
  cjames23
  authored and
  icanhasmath
  committed
  f3c1882
- [3.11] gh-158876: Update bundled Expat to 2.9.0 (GH-158881) (#160261)
  
  StanFromIreland
  authored and
  icanhasmath
  committed
  95dadd7
- [3.11] gh-160300: Reject cookies with a negative version in http.cookiejar (GH-160301) (#160649)
  
  authored and
  icanhasmath
  committed
  cd2a617
- [3.11] gh-160097: Reject links replacing the destination in `tarfile.tar_filter` (GH-160098) (#160343)
  
  authored and
  icanhasmath
  committed
  f2435de
- [3.11] Add Sphinx markup for CVEs in Changelog entries (GH-159415) (#159938)
  
  StanFromIreland
  authored and
  icanhasmath
  committed
  efd5bb6
- [3.11] gh-160040: Distrust compromised eMudhra intermediate CA keys (CVE-2026-115557) (GH-160042) (GH-160572)
  
  gpshead
  authored and
  icanhasmath
  committed
  2691076
- [3.11] gh-160040: Add ssl eMudhra distrust entry to whatsnew (3.10.22.1) (#160591)
  
  tiran
  authored and
  icanhasmath
  committed
  0be665c
- gh-159894: Upgrade bundled pip to 26.2.2 (3.10.22.x)
  icanhasmath
  committed
  b563ed8
- Update version to 3.10.22.1 and add release notes
  icanhasmath
  committed
  bad5432
- [3.11] Fix Windows build regen with Python 3.15 as the host Python (#160621)
  
  ambv
  authored and
  icanhasmath
  committed
  4fa495e
Commits on Oct 28, 2026
- [3.13] gh-143921: Reject NUL, CR and LF in IMAP commands (GH-143922, GH-153067) (GH-153137) (GH-153287)
  
  serhiy-storchaka
  authored and
  icanhasmath
  committed
  c1d1d62
- gh-143923: Reject control characters in POP3 commands
  
  sethmlarson
  authored and
  icanhasmath
  committed
  acaf81f
- gh-150751: validate http.client Content-Length and chunk-size (GH-150752)
  
  metsw24-max
  authored and
  icanhasmath
  committed
  833a27a
- gh-150751: Ignore optional whitespace around Content-Length in http.client (GH-159156)
  
  danilablagorodniy37
  authored and
  icanhasmath
  committed
  dbefda3
- Release notes: imaplib, poplib and http.client fixes in 3.10.22.1
  
  icanhasmath
  and
  claude
  committed
  0db2c2d
- Upgrade bundled setuptools to 84.2.1 (3.10.22.x)
  
  icanhasmath
  and
  claude
  committed
  580267d

Commits

Commits on Oct 27, 2026

Commits on Oct 28, 2026