summaryrefslogtreecommitdiffstats
path: root/Misc/NEWS
diff options
context:
space:
mode:
authorBenjamin Peterson <benjamin@python.org>2014-06-15 01:41:13 (GMT)
committerBenjamin Peterson <benjamin@python.org>2014-06-15 01:41:13 (GMT)
commita8c75fe31ae81231b05a4e100529f8d70ea93ef2 (patch)
tree7acbfad576db26bc91584c742f15144d691ed671 /Misc/NEWS
parent0220048083866034973ce7b05735ded97d2ca4d4 (diff)
parent6cd1954c5cff4b3722a183d13648c71b18259778 (diff)
downloadcpython-a8c75fe31ae81231b05a4e100529f8d70ea93ef2.zip
cpython-a8c75fe31ae81231b05a4e100529f8d70ea93ef2.tar.gz
cpython-a8c75fe31ae81231b05a4e100529f8d70ea93ef2.tar.bz2
merge 3.3 (#21766)
Diffstat (limited to 'Misc/NEWS')
-rw-r--r--Misc/NEWS3
1 files changed, 3 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 2f4b0ed..66d9132 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -26,6 +26,9 @@ Library
run_forever() and run_until_complete() methods of asyncio.BaseEventLoop now
raise an exception if the event loop was closed.
+- Issue #21766: Prevent a security hole in CGIHTTPServer by URL unquoting paths
+ before checking for a CGI script at that path.
+
- Issue #21310: Fixed possible resource leak in failed open().
- Issue #21677: Fixed chaining nonnormalized exceptions in io close() methods.