GitHub / fedora-python/cpython issues and pull requests

#130 - 00467: tarfile CVE-2025-8194

Pull Request - State: closed - Opened by frenzymadness 8 months ago - 1 comment

#129 - 00465: tarfile cves

Pull Request - State: closed - Opened by frenzymadness 9 months ago - 1 comment

#127 - [3.13] 00464: Enable PAC and BTI protections for aarch64

Pull Request - State: closed - Opened by stratakis 10 months ago

#124 - [3.10] 00462: Fix PySSL_SetError handling SSL_ERROR_SYSCALL

Pull Request - State: closed - Opened by stratakis 11 months ago

#123 - [3.11] 00462: Fix PySSL_SetError handling SSL_ERROR_SYSCALL

Pull Request - State: closed - Opened by stratakis 11 months ago

#122 - [3.12] 00462: Fix PySSL_SetError handling SSL_ERROR_SYSCALL

Pull Request - State: closed - Opened by stratakis 11 months ago

#121 - Deal with setuptools and wheeel whls in portable manner

Pull Request - State: open - Opened by hroncok 11 months ago

#120 - [3.12] 00459: Apply Intel Control-flow Technology for x86-64

Pull Request - State: open - Opened by stratakis 12 months ago

#119 - [3.13] 00459: Apply Intel Control-flow Technology for x86-64

Pull Request - State: closed - Opened by stratakis 12 months ago

#118 - [3.14] 00459: Apply Intel Control-flow Technology for x86-64

Pull Request - State: closed - Opened by stratakis 12 months ago

#117 - 00458: test_ssl: Don't stop ThreadedEchoServer on OSError in ConnectionHandler

Pull Request - State: closed - Opened by stratakis 12 months ago

#116 - 00458: test_ssl: Don't stop ThreadedEchoServer on OSError in ConnectionHandler

Pull Request - State: closed - Opened by stratakis 12 months ago

#115 - 00457: ssl: Raise OSError for ERR_LIB_SYS

Pull Request - State: closed - Opened by stratakis 12 months ago

#114 - [3.6] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago

#113 - [3.8] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago

#112 - [3.9] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: open - Opened by stratakis about 1 year ago

#111 - [3.10] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago

#110 - [3.11] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago

#109 - [3.12] 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago

#108 - 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#107 - 00452: Properly apply exported CFLAGS for dtrace/systemtap builds

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#106 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#105 - [3.8] CVE 2024 11168 and CVE 2025 0938 fixes

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#104 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#103 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#102 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#101 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#100 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago - 1 comment

#99 - 00450: CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs

Pull Request - State: closed - Opened by stratakis about 1 year ago

#98 - 00446: Resolve sinpi name clash with libm

Pull Request - State: open - Opened by vstinner over 1 year ago

#97 - 00445: CVE-2024-12254: Ensure _SelectorSocketTransport.writelines pauses the protocol if needed

Pull Request - State: closed - Opened by stratakis over 1 year ago

#96 - 00445: CVE-2024-12254: Ensure _SelectorSocketTransport.writelines pauses the protocol if needed

Pull Request - State: closed - Opened by stratakis over 1 year ago

#95 - Optimize 251 a tiny bit

Pull Request - State: closed - Opened by hroncok over 1 year ago

#94 - build(deps-dev): bump types-setuptools from 74.0.0.20240831 to 75.6.0.20241126 in /Tools

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments

#93 - build(deps-dev): bump types-psutil from 6.0.0.20240901 to 6.1.0.20241102 in /Tools

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments

#92 - 3.12 rebase 251

Pull Request - State: open - Opened by stratakis over 1 year ago

#91 - Rebase+251patch

Pull Request - State: closed - Opened by stratakis over 1 year ago

#90 - 00444: gh-103848: Adds checks to ensure that bracketed hosts found by…

Pull Request - State: open - Opened by frenzymadness over 1 year ago

#89 - 00443: gh-124651: Quote template strings in `venv` activation scripts

Pull Request - State: closed - Opened by frenzymadness over 1 year ago - 1 comment

#88 - 00440: gh-124160: Pass main_tstate to update_global_state_for_extensi…

Pull Request - State: closed - Opened by luk1337 over 1 year ago - 9 comments

#87 - 00437: [3.8] gh-121285: Remove backtracking when parsing tarfile head…

Pull Request - State: closed - Opened by frenzymadness over 1 year ago - 5 comments

#86 - 00436: [CVE-2024-8088] gh-122905: Sanitize names in zipfile.Path.

Pull Request - State: closed - Opened by stratakis over 1 year ago

#85 - 00436: [CVE-2024-8088] gh-122905: Sanitize names in zipfile.Path.

Pull Request - State: closed - Opened by stratakis over 1 year ago

#84 - 00436: [CVE-2024-8088] gh-122905: Sanitize names in zipfile.Path.

Pull Request - State: closed - Opened by stratakis over 1 year ago

#83 - 00436: [CVE-2024-8088] gh-122905: Sanitize names in zipfile.Path. (GH-122906) (#122923)

Pull Request - State: closed - Opened by stratakis over 1 year ago

#82 - email CVE-2024-6923 for 3.6

Pull Request - State: closed - Opened by hrnciar over 1 year ago

#81 - email CVE and IP CVE for 3.11

Pull Request - State: closed - Opened by stratakis over 1 year ago

#80 - Security fix for CVE-2024-4032 and CVE-2024-6923

Pull Request - State: closed - Opened by frenzymadness over 1 year ago

#79 - 00431: CVE-2024-4032

Pull Request - State: closed - Opened by frenzymadness almost 2 years ago - 3 comments

#78 - Security fix for CVE-2023-6597 and CVE-2024-0450

Pull Request - State: closed - Opened by frenzymadness almost 2 years ago - 3 comments

#77 - Bump actions/add-to-project from 0.1.0 to 1.0.0

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 2 comments

#76 - [DO NOT MERGE]Fedora 3.6 openssl3 compat single commit

Pull Request - State: closed - Opened by stratakis about 2 years ago - 1 comment

#75 - [DO NOT MERGE] Fedora 3.6 openssl3 compatibility

Pull Request - State: closed - Opened by stratakis about 2 years ago - 1 comment

#74 - Tarfile CVE 3.6

Pull Request - State: closed - Opened by stratakis about 2 years ago - 1 comment

#73 - 00418: Don't generate sbom in make regen-all

Pull Request - State: closed - Opened by befeleme about 2 years ago

#72 - Bump mypy from 1.7.1 to 1.8.0 in /Tools

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 2 comments

#71 - CVE 2023 27043 fedora 2.7

Pull Request - State: closed - Opened by frenzymadness over 2 years ago - 2 comments

#55 - 00397: PEP 706, CVE-2007-4559: Filter API for tarfile.extractall

Pull Request - State: closed - Opened by encukou almost 3 years ago - 1 comment