00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00471: CVE-2025-12084

* pythongh-142145: Remove quadratic behavior in node ID cache clearing (pythonGH-142146)
* pythongh-142754: Ensure that Element & Attr instances have the ownerDocument attribute (pythonGH-142794)
(cherry picked from commit 1cc7551)
(cherry picked from commit 08d8e18)
(cherry picked from commit 8d2d7bb)

Co-authored-by: Jacob Walls <38668450+jacobtylerwalls@users.noreply.github.com>
Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authoded-by: Lumír Balhar <lbalhar@redhat.com>

00476: CVE-2026-1299

pythongh-144125: email: verify headers are sound in BytesGenerator
(cherry picked from commit 052e55e)

Co-authored-by: Seth Michael Larson <seth@python.org>
Co-authored-by: Denis Ledoux <dle@odoo.com>
Co-authored-by: Denis Ledoux <5822488+beledouxdenis@users.noreply.github.com>
Co-authored-by: Petr Viktorin <302922+encukou@users.noreply.github.com>
Co-authored-by: Bas Bloemsaat <1586868+basbloemsaat@users.noreply.github.com>

00477: Raise an error when importing stdlib modules compiled for a di…

…fferent Python version

This is a downstream workaround "implementing"
python#137212 -
the mechanism for the check exists in Python 3.15+, where it needs to be
added to the standard library modules.
In Fedora, we need it also in previous Python versions, as we experience
segmentation fault when importing stdlib modules after update while
Python is running.

_tkinter, _tracemalloc and readline are not calling PyModuleDef_Init,
which is modified with this patch, hence they need a
direct call to the check function.

Co-Authored-By: Karolina Surma <ksurma@redhat.com>

00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00475: CVE-2025-15367

pythongh-143923: Reject control characters in POP3 commands

(cherry-picked from commit b234a2b)

00475: CVE-2025-15367

Reject control characters in POP3 commands