summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2014-06-15 01:41:31 (GMT)
committerBenjamin Peterson <benjamin@python.org>2014-06-15 01:41:31 (GMT)
commitff180af0572ce64ea7b4bb99957cf0c216adce36 (patch)
tree284a7316b8d3c44f71266b3dd1e817f1f06010d2 /Misc/NEWS
parent48f68d00b8e017050489635c04c82153a345a336 (diff)
parenta8c75fe31ae81231b05a4e100529f8d70ea93ef2 (diff)
downloadcpython-ff180af0572ce64ea7b4bb99957cf0c216adce36.zip
cpython-ff180af0572ce64ea7b4bb99957cf0c216adce36.tar.gz
cpython-ff180af0572ce64ea7b4bb99957cf0c216adce36.tar.bz2
merge 3.4 (#21766)
Diffstat (limited to 'Misc/NEWS')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 76502f3..dbd16e5 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -106,6 +106,9 @@ Library
run_forever() and run_until_complete() methods of asyncio.BaseEventLoop now
raise an exception if the event loop was closed.
+- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths
+ before checking for a CGI script at that path.
+
- Issue #21310: Fixed possible resource leak in failed open().
- Issue #21256: Printout of keyword args should be in deterministic order in