Issues

• [3.11] gh-161705: Prevent shadowing stdlib in gzip/tarfile/zipfile CLI

  awaiting core reviewrelease-blocker
  Unread
  python/cpython#161728·vstinner opened Nov 10, 2026 · Updated Nov 11, 2026
  1

• [3.12] gh-161705: Prevent shadowing stdlib in gzip/tarfile/zipfile CLI

  awaiting core reviewrelease-blockertype-security
  Unread
  python/cpython#161727·vstinner opened Nov 10, 2026 · Updated Nov 11, 2026
  1

• [3.13] gh-161705: Prevent shadowing stdlib in gzip/tarfile/zipfile CLI (#161706) (#161719)

  awaiting core reviewrelease-blockertype-security
  Unread
  python/cpython#161726·vstinner opened Nov 10, 2026 · Updated Nov 11, 2026
  4

• [3.11] gh-161569: Check cookie policy before deleting expired cookies in http.cookiejar (GH-161570)

  awaiting mergerelease-blockertype-security
  Unread
  python/cpython#161583·miss-islington opened Nov 7, 2026 · Updated Nov 9, 2026
  1

  

• [3.12] gh-161569: Check cookie policy before deleting expired cookies in http.cookiejar (GH-161570)

  awaiting mergerelease-blockertype-security
  Unread
  python/cpython#161582·miss-islington opened Nov 7, 2026 · Updated Nov 9, 2026
  1

  

• [3.13] gh-161569: Check cookie policy before deleting expired cookies in http.cookiejar (GH-161570)

  awaiting mergerelease-blockertype-security
  Unread
  python/cpython#161581·miss-islington opened Nov 7, 2026 · Updated Nov 9, 2026
  1

  

• [3.11] gh-161323: Refuse drive-relative paths in tarfile extraction filters (GH-161334)

  awaiting reviewrelease-blocker
  Unread
  python/cpython#161359·miss-islington opened Nov 4, 2026 · Updated Nov 9, 2026
  1

  

• [3.12] gh-161323: Refuse drive-relative paths in tarfile extraction filters (GH-161334)

  awaiting reviewrelease-blocker
  Unread
  python/cpython#161358·miss-islington opened Nov 4, 2026 · Updated Nov 6, 2026
  1

  

• [3.13] gh-161323: Refuse drive-relative paths in tarfile extraction filters (GH-161334)

  awaiting reviewrelease-blocker
  Unread
  python/cpython#161357·miss-islington opened Nov 4, 2026 · Updated Nov 6, 2026
  1

  

• tarfile: Windows same-drive drive-relative symlink not caught by data filter

  3.113.123.13OS-windowsrelease-blockerstdlibtype-security
  python/cpython#161323 · Filter by author gpshead opened on Nov 4, 2026
  

• [3.11] gh-161192: Update bundled Expat to 2.10.0 (GH-161202)

  awaiting core reviewrelease-blockertype-security
  Unread
  python/cpython#161266·StanFromIreland opened Nov 3, 2026 · Updated Nov 11, 2026
  

• [3.12] gh-161192: Update bundled Expat to 2.10.0 (GH-161202)

  awaiting reviewrelease-blockertype-security
  Unread
  python/cpython#161218·miss-islington opened Nov 2, 2026 · Updated Nov 11, 2026
  

• [3.13] gh-161192: Update bundled Expat to 2.10.0 (GH-161202)

  awaiting reviewrelease-blockertype-security
  Unread
  python/cpython#161217·miss-islington opened Nov 2, 2026 · Updated Nov 11, 2026
  

• [3.11] gh-160506: Fix ntpath.realpath() for broken links via directory links (GH-160507)

  awaiting reviewrelease-blockersprinttype-security
  Unread
  python/cpython#161030·miss-islington opened Oct 31, 2026 · Updated Nov 9, 2026
  

• [3.12] gh-160506: Fix ntpath.realpath() for broken links via directory links (GH-160507)

  awaiting reviewrelease-blockersprinttype-security
  Unread
  python/cpython#161029·miss-islington opened Oct 31, 2026 · Updated Nov 9, 2026
  

• [3.13] gh-160506: Fix ntpath.realpath() for broken links via directory links (GH-160507)

  awaiting reviewrelease-blockersprinttype-security
  Unread
  python/cpython#161028·miss-islington opened Oct 31, 2026 · Updated Nov 9, 2026
  

• [3.11] gh-160898: Reject null bytes in socket.getaddrinfo() host and port (GH-160899)

  awaiting core reviewrelease-blockertopic-sockettype-security
  Unread
  python/cpython#160977·sethmlarson opened Oct 30, 2026 · Updated Oct 30, 2026
  1

• [3.12] gh-160898: Reject null bytes in socket.getaddrinfo() host and port (GH-160899)

  awaiting core reviewrelease-blockertopic-sockettype-security
  Unread
  python/cpython#160975·sethmlarson opened Oct 30, 2026 · Updated Oct 30, 2026
  1

• [3.13] gh-160898: Reject null bytes in socket.getaddrinfo() host and port (GH-160899)

  awaiting core reviewrelease-blockertopic-sockettype-security
  Unread
  python/cpython#160974·sethmlarson opened Oct 30, 2026 · Updated Oct 30, 2026
  1

• [3.11] gh-160499: Pause asyncio TLS reads when SSL replies pile up (GH-160500)

  awaiting mergerelease-blockersprinttype-security
  Unread
  python/cpython#160897·miss-islington opened Oct 29, 2026 · Updated Oct 31, 2026

• [3.12] gh-160499: Pause asyncio TLS reads when SSL replies pile up (GH-160500)

  awaiting mergerelease-blockersprinttype-security
  Unread
  python/cpython#160896·miss-islington opened Oct 29, 2026 · Updated Oct 31, 2026

• [3.13] gh-160499: Pause asyncio TLS reads when SSL replies pile up (GH-160500)

  awaiting mergerelease-blockersprinttype-security
  Unread
  python/cpython#160895·miss-islington opened Oct 29, 2026 · Updated Oct 31, 2026

• [3.12] gh-150751: validate http.client Content-Length and chunk-size (GH-150752)

  awaiting reviewrelease-blockertype-security
  Unread
  python/cpython#160772·miss-islington opened Oct 27, 2026 · Updated Nov 6, 2026

• [3.11] gh-150751: validate http.client Content-Length and chunk-size (GH-150752)

  awaiting reviewrelease-blockertype-security
  Unread
  python/cpython#160771·miss-islington opened Oct 27, 2026 · Updated Oct 29, 2026

• [3.13] gh-150751: validate http.client Content-Length and chunk-size (GH-150752)

  awaiting reviewrelease-blockertype-security
  Unread
  python/cpython#160770·miss-islington opened Oct 27, 2026 · Updated Nov 6, 2026