[Python-checkins] cpython (merge 3.2 -> default): Merge issue 11662.
guido.van.rossum
python-checkins at python.org
Tue Mar 29 22:11:38 CEST 2011
http://hg.python.org/cpython/rev/c8701b9256cf
changeset: 69055:c8701b9256cf
parent: 69050:adbcba130143
parent: 69054:968bca2cab60
user: Guido van Rossum <guido at python.org>
date: Tue Mar 29 13:00:28 2011 -0700
summary:
Merge issue 11662.
files:
Misc/NEWS | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/Misc/NEWS b/Misc/NEWS
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -139,6 +139,9 @@
- Issue #11666: let help() display named tuple attributes and methods
that start with a leading underscore.
+- Issue #11662: Make urllib and urllib2 ignore redirections if the
+ scheme is not HTTP, HTTPS or FTP (CVE-2011-1521).
+
- Issue #5537: Fix time2isoz() and time2netscape() functions of
httplib.cookiejar for expiration year greater than 2038 on 32-bit systems.
--
Repository URL: http://hg.python.org/cpython
More information about the Python-checkins
mailing list