commit | dabfc56b57f5086eb5522d8e6cd7670c62d2482d | [log] [tgz] |
---|---|---|
author | Benjamin Peterson <benjamin@python.org> | Fri Dec 05 20:05:18 2014 -0500 |
committer | Benjamin Peterson <benjamin@python.org> | Fri Dec 05 20:05:18 2014 -0500 |
tree | 7f91d7fa465e56973ec6bf5bf7472cac5da70706 | |
parent | faad6bbea6c86e30c770eb0a3648e2cd52b2e55e [diff] [blame] |
smtplib: limit amount read from the network (closes #16042)
diff --git a/Misc/NEWS b/Misc/NEWS index cee5b85..ff68b45 100644 --- a/Misc/NEWS +++ b/Misc/NEWS
@@ -10,6 +10,9 @@ Library ------- +- Issue #16042: CVE-2013-1752: smtplib: Limit amount of data read by limiting + the call to readline(). Original patch by Christian Heimes. + - Issue #16041: In poplib, limit maximum line length read from the server to prevent CVE-2013-1752.