[Python-checkins] cpython (2.5): Add CVE number to urllib/urllib2 news item.

guido.van.rossum python-checkins at python.org
Tue Mar 29 22:11:02 CEST 2011


http://hg.python.org/cpython/rev/f03e2acb9826
changeset:   69043:f03e2acb9826
branch:      2.5
user:        guido at google.com
date:        Mon Mar 28 13:53:40 2011 -0700
summary:
  Add CVE number to urllib/urllib2 news item.

files:
  Misc/NEWS |  2 +-
  1 files changed, 1 insertions(+), 1 deletions(-)


diff --git a/Misc/NEWS b/Misc/NEWS
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -13,7 +13,7 @@
 -------
 
 - Issue #11662: Make urllib and urllib2 ignore redirections if the
-  scheme is not HTTP, HTTPS or FTP.  This fixes a security hole.
+  scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
 
 - Issue #8674: Fixed a number of incorrect or undefined-behaviour-inducing
   overflow checks in the audioop module (CVE-2010-1634).

-- 
Repository URL: http://hg.python.org/cpython


More information about the Python-checkins mailing list