diff options
| author | Guido van Rossum <guido@python.org> | 2005-02-03 15:00:18 (GMT) |
|---|---|---|
| committer | Guido van Rossum <guido@python.org> | 2005-02-03 15:00:18 (GMT) |
| commit | 9ee3fb380ae02c5528dc0584c19b8153a0733808 (patch) | |
| tree | fff07b6eb2a41d17ff37abb58d589f9cae926098 /Misc | |
| parent | 28624fd32392e9bf2932e65feb7b8c06a090f26a (diff) | |
| download | cpython-9ee3fb380ae02c5528dc0584c19b8153a0733808.zip cpython-9ee3fb380ae02c5528dc0584c19b8153a0733808.tar.gz cpython-9ee3fb380ae02c5528dc0584c19b8153a0733808.tar.bz2 | |
Security fix PSF-2005-001 for SimpleXMLRPCServer.py.
Diffstat (limited to 'Misc')
| -rw-r--r-- | Misc/NEWS | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -25,6 +25,10 @@ Core and builtins Library ------- +- Applied a security fix to SimpleXMLRPCserver (PSF-2005-001). This + disables recursive traversal through instance attributes, which can + be exploited in various ways. + - Bug #1110478: Revert os.environ.update to do putenv again. - Bug #1103844: fix distutils.install.dump_dirs() with negated options. |