summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS
diff options
context:
space:
mode:
authorSenthil Kumaran <senthil@uthcode.com>2016-07-31 06:48:19 (GMT)
committerSenthil Kumaran <senthil@uthcode.com>2016-07-31 06:48:19 (GMT)
commit7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3 (patch)
treeeb60c18adf0f714205c773f832ff487572e9bed0 /Misc/NEWS
parentdbaa559b7fc6b80c1f230119f609b99b5b3844f3 (diff)
parent17742f2d45c9dd7ca777e33601a26e80576fdbf6 (diff)
downloadcpython-7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3.zip
cpython-7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3.tar.gz
cpython-7bfbd1d3c56b2a5281edeb7a8e21598618b7c1a3.tar.bz2
merge heads
Diffstat (limited to 'Misc/NEWS')
-rw-r--r--Misc/NEWS4
1 files changed, 4 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 0a6ddf4..ffd6471 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -34,6 +34,10 @@ Core and Builtins
Library
-------
+- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
+ HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
+ that the script is in CGI mode.
+
- Issue #27656: Do not assume sched.h defines any SCHED_* constants.
- Issue #27130: In the "zlib" module, fix handling of large buffers