| commit | 2bc23b8448394e96d5562fcc7b69aa54bb2c1a38 | [log] [tgz] |
|---|---|---|
| author | guido@google.com <guido@google.com> | Thu Mar 24 10:44:17 2011 -0700 |
| committer | guido@google.com <guido@google.com> | Thu Mar 24 10:44:17 2011 -0700 |
| tree | 6f149cc6725aec4b9ec8bbdd72d7c93d351c14b7 | |
| parent | 60a4a90c8dd2972eb4bb977e70835be9593cbbac [diff] [blame] |
Add FTP to the allowed url schemes. Add Misc/NEWS.
diff --git a/Misc/NEWS b/Misc/NEWS index 3aea1f3..76aea17 100644 --- a/Misc/NEWS +++ b/Misc/NEWS
@@ -12,6 +12,9 @@ Library ------- +- Issue #11662: Make urllib and urllib2 ignore redirections if the + scheme is not HTTP, HTTPS or FTP. This fixes a security hole. + - Issue #8674: Fixed a number of incorrect or undefined-behaviour-inducing overflow checks in the audioop module (CVE-2010-1634).