diff options
| author | Benjamin Peterson <benjamin@python.org> | 2015-12-05 08:17:57 (GMT) |
|---|---|---|
| committer | Benjamin Peterson <benjamin@python.org> | 2015-12-05 08:17:57 (GMT) |
| commit | 5e621176c4ec3cbd5102b9ca7441695832544123 (patch) | |
| tree | 3acd20397f151439689f929f4244fd9f58f20092 | |
| parent | b03856ab661ca8901cf068aa387e559f4358e3f6 (diff) | |
| download | cpython-5e621176c4ec3cbd5102b9ca7441695832544123.zip cpython-5e621176c4ec3cbd5102b9ca7441695832544123.tar.gz cpython-5e621176c4ec3cbd5102b9ca7441695832544123.tar.bz2 | |
add CVE and issue number
| -rw-r--r-- | Misc/NEWS | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -99,8 +99,9 @@ Library - Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths before checking for a CGI script at that path. -- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second - parameter. Bug reported by Guido Vranken. +- Issue #21529 (CVE-2014-4616): Fix arbitrary memory access in + JSONDecoder.raw_decode with a negative second parameter. Bug reported by Guido + Vranken. - Issue #21082: In os.makedirs, do not set the process-wide umask. Note this changes behavior of makedirs when exist_ok=True. |