[python-committers] Time to cut new rc2 release candidates - expat DoS fix is in

Gregory P. Smith greg at krypto.org
Thu Mar 15 02:39:18 CET 2012


On Wed, Mar 14, 2012 at 6:35 PM, Benjamin Peterson <benjamin at python.org>wrote:

> 2012/3/14 Gregory P. Smith <greg at krypto.org>:
> > The fixes for the expat hash randomization DoS are in and working -
> > http://bugs.python.org/issue14234.  New stable and security fix rc2
> release
> > candidates should be created for 2.6, 2.7, 3.1 and 3.2.
>
> Okay. Can you tell me the commits I need to transplant to the 2.7
> release branch?
>
>
For 2.7:
  http://hg.python.org/cpython/rev/b54f5849013c
  http://hg.python.org/cpython/rev/cb72aa8a8008

For 2.6:
  http://hg.python.org/cpython/rev/9c8d066013ea

For 3.2:
  http://hg.python.org/cpython/rev/d6c197edd99b
  http://hg.python.org/cpython/rev/b2d4a6a9463e

For 3.1:
  http://hg.python.org/cpython/rev/7b5bc1719477


2.6 and 3.1 only need to transplant one commit as they don't support
--with-system-expat.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-committers/attachments/20120314/b32f71ca/attachment.html>


More information about the python-committers mailing list